5.2.4

Dependencies

• Upgraded runtime-dependency @xmlbuilder2@^3.0.2||^4.0.3, was @^3.0.2 (via [#441])

---

What's Changed

• docs: enrich example simple by @jkowalleck in #1473
• chore(deps): bump knip from 5.69.0 to 5.69.1 in /tools/test-dependencies by @dependabot[bot] in #1476
• chore(deps): bump the eslint group across 1 directory with 3 updates by @dependabot[bot] in #1475
• ci: fix npm version by @jkowalleck in #1477
• chore(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in #1478
• chore(deps): bump knip from 5.69.1 to 5.70.2 in /tools/test-dependencies by @dependabot[bot] in #1484
• chore(deps): bump the eslint group across 1 directory with 3 updates by @dependabot[bot] in #1479
• chore(deps): bump xmlbuilder2 from 3.1.1 to 4.0.1 by @dependabot[bot] in #1483

Full Changelog: v5.2.3...v5.2.4

5.2.3

Fixed

• Explicitly prevent self-references in dependency graph (via #1472)

---

What's Changed

• chore(deps): bump knip from 5.68.0 to 5.69.0 in /tools/test-dependencies by @dependabot[bot] in #1466
• fix: explicitely prevent self-references in dependency graph by @jkowalleck in #1472

Full Changelog: v5.2.2...v5.2.3

5.2.2

Fixed

• Prevent Component duplications (#1418 via #1456)

Docs

• Correct default value of option specVersion (via #1460)

---

What's Changed

• docs: fix defaultValue of specVersion by @jkowalleck in #1460
• refactor: fix internal type override by @jkowalleck in #1461
• chore(deps): bump the eslint group across 1 directory with 4 updates by @dependabot[bot] in #1458
• chore(deps): bump knip from 5.66.4 to 5.68.0 in /tools/test-dependencies by @dependabot[bot] in #1459
• fix: prevent component duplication by @jkowalleck in #1456
• refactor: remove structuredClonePolyfill by @jkowalleck in #1463
• tests: move testbeds by @jkowalleck in #1464

Full Changelog: v5.2.1...v5.2.2

5.2.1

Fixed

• Typing for plugin options of enums support literals, too (via #1455)

---

What's Changed

• tests: testbeds enforce package managers by @jkowalleck in #1454
• chore(deps): bump knip from 5.66.3 to 5.66.4 in /tools/test-dependencies by @dependabot[bot] in #1453
• chore(deps): bump the eslint group across 1 directory with 3 updates by @dependabot[bot] in #1452
• fix: fixed some typing for plugin options by @jkowalleck in #1455

Full Changelog: v5.2.0...v5.2.1

5.2.0

Added

• Basic support for CycloneDX 1.7 (via #1451)

Build

• Use TypeScript v5.9.3 now, was v5.9.2 (via #1438)

---

What's Changed

• chore(deps): bump the eslint group across 1 directory with 5 updates by @dependabot[bot] in #1435
• chore(deps): bump knip from 5.63.1 to 5.64.1 in /tools/test-dependencies by @dependabot[bot] in #1437
• chore(deps): bump the eslint group across 1 directory with 3 updates by @dependabot[bot] in #1436
• chore(deps-dev): bump jest from 30.1.3 to 30.2.0 in the jest group across 1 directory by @dependabot[bot] in #1440
• chore(deps): bump knip from 5.64.1 to 5.64.3 in /tools/test-dependencies by @dependabot[bot] in #1441
• chore(deps-dev): bump typescript from 5.9.2 to 5.9.3 in the typescript group across 1 directory by @dependabot[bot] in #1438
• chore(deps): bump the eslint group across 1 directory with 5 updates by @dependabot[bot] in #1442
• chore: package-manager-cache: false by @jkowalleck in #1443
• chore(deps): bump the eslint group across 1 directory with 4 updates by @dependabot[bot] in #1444
• chore(deps): bump knip from 5.64.3 to 5.66.0 in /tools/test-dependencies by @dependabot[bot] in #1446
• chore(deps): bump actions/download-artifact from 5 to 6 by @dependabot[bot] in #1447
• chore(deps): bump actions/upload-artifact from 4 to 5 by @dependabot[bot] in #1448
• chore(deps): bump knip from 5.66.0 to 5.66.3 in /tools/test-dependencies by @dependabot[bot] in #1450
• chore(deps): bump the eslint group across 1 directory with 2 updates by @dependabot[bot] in #1449
• feat: support CycloneDX 1.7 by @jkowalleck in #1451

Full Changelog: v5.1.1...v5.2.0

5.1.1

Maintenance release

Runtime Dependencies

• Support @cyclonedx/cyclonedx-library@^9.0.0, was ^8.4.0 (via #1433)

Build

• Use TypeScript v5.9.2 now, was v5.8.3 (via #1416)

---

What's Changed

• refactor: normalizePackageManifest type assert by @jkowalleck in #1403
• chore(deps-dev): bump jest from 30.0.0 to 30.0.2 in the jest group across 1 directory by @dependabot[bot] in #1402
• chore(deps): bump the eslint group across 1 directory with 4 updates by @dependabot[bot] in #1401
• chore(deps): bump the eslint group across 1 directory with 4 updates by @dependabot[bot] in #1404
• chore(deps-dev): bump jest from 30.0.2 to 30.0.3 in the jest group across 1 directory by @dependabot[bot] in #1405
• chore(deps-dev): bump jest from 30.0.3 to 30.0.4 in the jest group across 1 directory by @dependabot[bot] in #1407
• chore: QA tool to detect missing dependencies by @jkowalleck in #1409
• chore(deps): bump neostandard from 0.12.1 to 0.12.2 in /tools/code-style by @dependabot[bot] in #1408
• chore(deps): bump the eslint group across 1 directory with 5 updates by @dependabot[bot] in #1410
• chore(deps): bump knip from 5.61.3 to 5.62.0 in /tools/test-dependencies by @dependabot[bot] in #1412
• chore(deps): bump eslint-plugin-jsdoc from 51.3.4 to 51.4.1 in /tools/code-style in the eslint group across 1 directory by @dependabot[bot] in #1411
• chore(deps-dev): bump jest from 30.0.4 to 30.0.5 in the jest group across 1 directory by @dependabot[bot] in #1414
• chore(deps): bump the eslint group across 1 directory with 5 updates by @dependabot[bot] in #1417
• chore(deps): bump the eslint group across 1 directory with 4 updates by @dependabot[bot] in #1420
• chore(deps): bump actions/download-artifact from 4 to 5 by @dependabot[bot] in #1419
• chore(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in #1423
• chore(deps): bump knip from 5.62.0 to 5.63.0 in /tools/test-dependencies by @dependabot[bot] in #1424
• chore(deps): bump the eslint group across 1 directory with 5 updates by @dependabot[bot] in #1427
• chore(deps-dev): bump typescript from 5.8.3 to 5.9.2 in the typescript group across 1 directory by @dependabot[bot] in #1416
• chore(deps): support normalize-package-data ^8.0.0 by @dependabot[bot] in #1415
• chore(deps-dev): bump jest from 30.0.5 to 30.1.1 in the jest group across 1 directory by @dependabot[bot] in #1426
• chore(deps): bump actions/setup-node from 4 to 5 by @dependabot[bot] in #1428
• chore(deps): bump the eslint group across 1 directory with 4 updates by @dependabot[bot] in #1429
• chore(deps-dev): bump jest from 30.1.2 to 30.1.3 in the jest group across 1 directory by @dependabot[bot] in #1430
• chore(deps): bump knip from 5.63.0 to 5.63.1 in /tools/test-dependencies by @dependabot[bot] in #1431
• chore(deps): bump the eslint group across 1 directory with 3 updates by @dependabot[bot] in #1432
• feat: support cyclonedx-library v9.0.0 by @jkowalleck in #1433

Full Changelog: v5.1.0...v5.1.1

5.1.0

Changed

• Utilizes license file gatherer of @cyclonedx/cyclonedx-library, previously used own implementation (via #1398)

Dependencies

• Upgraded runtime-dependency @cyclonedx/cyclonedx-library@^8.4.0, was @^8.0.0 (via #1398)

Build

• Use TypeScript v5.8.3 now, was v5.8.2 (via #1382)

---

What's Changed

• refactor: group output targets in plugin by @jkowalleck in #1377
• chore(deps): bump the eslint group across 1 directory with 4 updates by @dependabot in #1378
• chore: cleanup eslint by @jkowalleck in #1379
• style: apply neostandard to JS files by @jkowalleck in #1380
• chore(deps): bump the eslint group across 1 directory with 3 updates by @dependabot in #1381
• tests: regression test for issue #1384 by @jkowalleck in #1385
• chore(deps): bump the eslint group across 1 directory with 3 updates by @dependabot in #1383
• chore(deps-dev): bump typescript from 5.8.2 to 5.8.3 in the typescript group across 1 directory by @dependabot in #1382
• chore(deps): bump typescript-eslint from 8.29.0 to 8.29.1 in /tools/code-style in the eslint group across 1 directory by @dependabot in #1386
• chore(deps): bump the eslint group across 1 directory with 3 updates by @dependabot in #1387
• chore(deps-dev): bump npm-run-all2 from 7.0.2 to 8.0.1 by @dependabot in #1389
• chore(deps): bump the eslint group across 1 directory with 4 updates by @dependabot in #1388
• chore(deps): bump the eslint group across 1 directory with 6 updates by @dependabot in #1391
• chore: add workflow permissions by @jkowalleck in #1392
• chore(deps): bump the eslint group across 1 directory with 3 updates by @dependabot in #1393
• ci: use node24 by @jkowalleck in #1394
• feat: use CDX-library's license evidence gathering by @jkowalleck in #1398
• chore(deps-dev): bump jest from 29.7.0 to 30.0.0 in the jest group across 1 directory by @dependabot in #1399
• chore(deps): bump the eslint group across 1 directory with 5 updates by @dependabot in #1400

Full Changelog: v5.0.1...v5.1.0

5.0.2-alpha.0

Signed-off-by: jkowalleck <[email protected]>

5.0.1

Maintenance release

Full Changelog: v5.0.0...v5.0.1

5.0.0

BREAKING Changes

• Dropped support for node<20.18.0 (#1362 via #1365)

Documentation

• Fixed docs of default values (via #1369)

Dependencies

• Upgraded runtime-dependency @cyclonedx/cyclonedx-library@^8.0.0, was @^7.0.0 (via #1367)
• Upgraded runtime-dependency normalize-package-data@^7.0.0, was @^3||^4||^5||^6 (via #1368)

Build

• Use TypeScript v5.8.2 now, was v5.7.3 (via #1376)

---

What's Changed

• refactor: call addRootComponentExtRefs() only once by @jkowalleck in #1358
• feat!: 5.0 by @jkowalleck in #1365
• chore(dev-deps): bump CS by @jkowalleck in #1375
• build: use [email protected] by @jkowalleck in #1376

Full Changelog: v4.0.1...v5.0.0