Skip to content

Commit 8fb1b14

Browse files
madpahjkowalleckhakandilek
authoredMar 20, 2023
feat: Release 4.0.0 #341)
Highlights of this release include: * Support for De-serialization from JSON and XML to this Pythonic Model * Deprecation of Python 3.6 support * Support for Python 3.11 * Support for `BomLink` * Support VEX without needing `Component` in the same `Bom` * Support for `services` having `dependencies` BREAKING CHANGE: Large portions of this library have been re-written for this release and many methods and contracts have changed. Signed-off-by: Paul Horton <paul.horton@owasp.org> * feat: support VEX without Components in the same BOM BREAKING CHANGE: Model classes changed to relocated Vulnerability at Bom, not at Component Signed-off-by: Paul Horton <paul.horton@owasp.org> * feat: support VEX without Components in the same BOM BREAKING CHANGE: Model classes changed to relocated Vulnerability at Bom, not at Component Signed-off-by: Paul Horton <paul.horton@owasp.org> feat: allow `version` of BOM to be defined feat: allow `serial_number` of BOM to be prescribed feat: add helper method to get URN for a BOM according to https://www.iana.org/assignments/urn-formal/cdx Signed-off-by: Paul Horton <paul.horton@owasp.org> * chore: fix release workflow * chore: editorconfig Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> * feat: support for deserialization from JSON and XML (#290) BREAKING CHANGE: * feat: drop Python 3.6 support Signed-off-by: Hakan Dilek <hakandilek@gmail.com> Signed-off-by: Paul Horton <paul.horton@owasp.org> Co-authored-by: Hakan Dilek <hakandilek@gmail.com> Co-authored-by: Hakan Dilek <hakandilek@users.noreply.github.com> * fix: update `serializable` to include XML safety changes Signed-off-by: Paul Horton <paul.horton@owasp.org> * feat: Support for Python 3.11 (#349) * feat: officially test and support Python 3.11 Signed-off-by: Paul Horton <paul.horton@owasp.org> * removed unused imports Signed-off-by: Paul Horton <paul.horton@owasp.org> * bump `poetry` to `1.1.12` in CI Signed-off-by: Paul Horton <paul.horton@owasp.org> * fix: remove `toml` as dependency as not used and seems to be breaking Python 3.11 CI Signed-off-by: Paul Horton <paul.horton@owasp.org> * fix: removed `types-toml` from dependencies - not used Signed-off-by: Paul Horton <paul.horton@owasp.org> --------- Signed-off-by: Paul Horton <paul.horton@owasp.org> * fix: removed `autopep8` in favour of `flake8` as both have conflicting dependencies now Signed-off-by: Paul Horton <paul.horton@owasp.org> * chore: bump dev dependencies fix: removed `setuptools` as dependency Signed-off-by: Paul Horton <paul.horton@owasp.org> * tests: compoennt versions optional (#350) * chore: exclude `venv*` from QA; add typing to QA Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> * tests: component versions are optional Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> --------- Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> * doc: doc updates for new deserialization feature Signed-off-by: Paul Horton <paul.horton@owasp.org> * doc: doc updates for contribution Signed-off-by: Paul Horton <paul.horton@owasp.org> --------- Signed-off-by: Paul Horton <paul.horton@owasp.org> Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> Signed-off-by: Hakan Dilek <hakandilek@gmail.com> Co-authored-by: Jan Kowalleck <jan.kowalleck@gmail.com> Co-authored-by: Hakan Dilek <hakandilek@gmail.com> Co-authored-by: Hakan Dilek <hakandilek@users.noreply.github.com>
1 parent a011d89 commit 8fb1b14

File tree

151 files changed

+5346
-3085
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

151 files changed

+5346
-3085
lines changed
 

‎.github/workflows/deploy.yml

+7-7
Original file line numberDiff line numberDiff line change
@@ -4,9 +4,9 @@ on:
44
push:
55
branches: [ 'main' ]
66
workflow_dispatch:
7-
7+
88
env:
9-
PYTHON_VERSION_DEFAULT: "3.10"
9+
PYTHON_VERSION_DEFAULT: "3.11"
1010
POETRY_VERSION: "1.1.12"
1111

1212
jobs:
@@ -22,14 +22,14 @@ jobs:
2222
uses: actions/checkout@v3
2323
with:
2424
fetch-depth: 0
25-
25+
2626
- name: Setup python
2727
# see https://github.com/actions/setup-python
2828
uses: actions/setup-python@v4
2929
with:
3030
python-version: ${{ env.PYTHON_VERSION_DEFAULT }}
3131
architecture: 'x64'
32-
32+
3333
- name: Install and configure Poetry
3434
# See https://github.com/marketplace/actions/install-poetry-action
3535
uses: snok/install-poetry@v1
@@ -38,17 +38,17 @@ jobs:
3838
virtualenvs-create: true
3939
virtualenvs-in-project: true
4040
installer-parallel: true
41-
41+
4242
- name: Install dependencies
4343
run: poetry install --no-root
4444

4545
- name: View poetry version
4646
run: poetry --version
47-
47+
4848
- name: Python Semantic Release
4949
# see https://python-semantic-release.readthedocs.io/en/latest/automatic-releases/github-actions.html
5050
# see https://github.com/relekang/python-semantic-release
51-
uses: relekang/python-semantic-release@v7.33.1
51+
uses: relekang/python-semantic-release@v7.33.2
5252
with:
5353
github_token: ${{ secrets.GITHUB_TOKEN }}
5454
repository_username: __token__

‎.github/workflows/manual-release-candidate.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ jobs:
2525
python -m pip install poetry --upgrade pip
2626
poetry config virtualenvs.create false
2727
poetry install
28-
python -m pip install python-semantic-release
28+
python -m pip install python-semantic-release==7.28.1
2929
- name: Apply Pre Release Version
3030
run: |
3131
RC_VERSION="$(semantic-release --noop --major print-version)-${{ github.event.inputs.release_candidate_suffix }}"

0 commit comments

Comments
 (0)