|
2 | 2 |
|
3 | 3 |
|
4 | 4 |
|
| 5 | +## v6.0.0-rc.1 (2023-11-30) |
| 6 | + |
| 7 | +### Breaking |
| 8 | + |
| 9 | +* feat!: v6.0.0 RC1 |
| 10 | + |
| 11 | +Signed-off-by: Jan Kowalleck <[email protected]> ( [`dada5d7`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/dada5d72680701c65608b88e0f739341accf854f)) |
| 12 | + |
| 13 | +### Chore |
| 14 | + |
| 15 | +* chore(deps-dev): update mypy requirement from 1.7.0 to 1.7.1 (#487) |
| 16 | + |
| 17 | +Updates the requirements on [mypy](https://github.com/python/mypy) to permit the latest version. |
| 18 | +- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) |
| 19 | +- [Commits](https://github.com/python/mypy/compare/v1.7.0...v1.7.1) |
| 20 | + |
| 21 | +--- |
| 22 | +updated-dependencies: |
| 23 | +- dependency-name: mypy |
| 24 | + dependency-type: direct:development |
| 25 | +... |
| 26 | + |
| 27 | +Signed-off-by: dependabot [bot ] <[email protected]> |
| 28 | +Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> ([`78957e6`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/78957e6592be2106de7933f5b54a0916194980e3)) |
| 29 | + |
| 30 | +* chore(deps-dev): update mypy requirement from 1.6.1 to 1.7.0 (#484) |
| 31 | + |
| 32 | +Updates the requirements on [mypy](https://github.com/python/mypy) to permit the latest version. |
| 33 | +- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) |
| 34 | +- [Commits](https://github.com/python/mypy/compare/v1.6.1...v1.7.0) |
| 35 | + |
| 36 | +--- |
| 37 | +updated-dependencies: |
| 38 | +- dependency-name: mypy |
| 39 | + dependency-type: direct:development |
| 40 | +... |
| 41 | + |
| 42 | +Signed-off-by: dependabot [bot ] <[email protected]> |
| 43 | +Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> ([`c716ba3`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/c716ba3751017e2f88367b660dbc11866c2feb1d)) |
| 44 | + |
| 45 | +* chore(deps-dev): update ddt requirement from 1.6.0 to 1.7.0 (#483) |
| 46 | + |
| 47 | +Updates the requirements on [ddt](https://github.com/datadriventests/ddt) to permit the latest version. |
| 48 | +- [Release notes](https://github.com/datadriventests/ddt/releases) |
| 49 | +- [Commits](https://github.com/datadriventests/ddt/compare/1.6.0...1.7.0) |
| 50 | + |
| 51 | +--- |
| 52 | +updated-dependencies: |
| 53 | +- dependency-name: ddt |
| 54 | + dependency-type: direct:development |
| 55 | +... |
| 56 | + |
| 57 | +Signed-off-by: dependabot [bot ] <[email protected]> |
| 58 | +Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> ([`8a1f7b9`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/8a1f7b9678e888654a373965b7902428525f7d60)) |
| 59 | + |
| 60 | +* chore: mograte dev-dependencies to new poetry layout (#482) |
| 61 | + |
| 62 | +see https://python-poetry.org/docs/managing-dependencies/#dependency-groups |
| 63 | + |
| 64 | +Signed-off-by: Jan Kowalleck <[email protected]> ( [`a85585c`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/a85585cf5e445ba5e67a027b4d1161911df6467d)) |
| 65 | + |
| 66 | +* chore(deps-dev): update flake8-isort requirement from 6.1.0 to 6.1.1 (#481) |
| 67 | + |
| 68 | +Updates the requirements on [flake8-isort](https://github.com/gforcada/flake8-isort) to permit the latest version. |
| 69 | +- [Changelog](https://github.com/gforcada/flake8-isort/blob/main/CHANGES.rst) |
| 70 | +- [Commits](https://github.com/gforcada/flake8-isort/compare/6.1.0...6.1.1) |
| 71 | + |
| 72 | +--- |
| 73 | +updated-dependencies: |
| 74 | +- dependency-name: flake8-isort |
| 75 | + dependency-type: direct:development |
| 76 | +... |
| 77 | + |
| 78 | +Signed-off-by: dependabot [bot ] <[email protected]> |
| 79 | +Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> ([`fc74ddd`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/fc74dddc8add79be31d3747ddce9241bce2e4fed)) |
| 80 | + |
| 81 | +### Documentation |
| 82 | + |
| 83 | +* docs: keywaords & funding (#486) |
| 84 | + |
| 85 | +Signed-off-by: Jan Kowalleck <[email protected]> ( [`3189e59`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/3189e59ff8e3d3d10f7b949b5a08397ff3d3642b)) |
| 86 | + |
| 87 | +### Feature |
| 88 | + |
| 89 | +* feat: add basic support for CDX 1.5 (#488) |
| 90 | + |
| 91 | +This PR introduces basic support for CDX 1.5. |
| 92 | + |
| 93 | +Ref: |
| 94 | +- #404 |
| 95 | + |
| 96 | +**Schema:** |
| 97 | + |
| 98 | +- Extended schema-downloader and added specification files, |
| 99 | +- Adapted `README` and `SchemaVersion` for 1.5 |
| 100 | + |
| 101 | +**Model:** |
| 102 | + |
| 103 | +- Added `SchemaVersion1Dot5`, serializable annotations, |
| 104 | +- Extended `ComponentType` and `ExternalReferenceType` enums |
| 105 | + |
| 106 | +**Tests:** |
| 107 | + |
| 108 | +- Generated snapshots for 1.5. |
| 109 | +- In some existing tests `bom-ref` changed, since 1.5 is now listed before 1.4 |
| 110 | + |
| 111 | +**Chore:** |
| 112 | + |
| 113 | +- Added `newline = '\n'` to schema-downloader and `writeSnapshot` for cross-platform support |
| 114 | + |
| 115 | +---- |
| 116 | + |
| 117 | +* feat: add basic support for CDX 1.5 |
| 118 | + |
| 119 | +Signed-off-by: Johannes Feichtner <[email protected]> |
| 120 | + |
| 121 | +* docs: note minversions of `HashAlgorithm` cases |
| 122 | + |
| 123 | +Signed-off-by: Jan Kowalleck <[email protected]> |
| 124 | + |
| 125 | +* docs: set ref after schema download |
| 126 | + |
| 127 | +Signed-off-by: Jan Kowalleck <[email protected]> |
| 128 | + |
| 129 | +* refactor: add the newly missing/TODO elements |
| 130 | + |
| 131 | +Signed-off-by: Jan Kowalleck <[email protected]> |
| 132 | + |
| 133 | +* docs: note minversions of `ComponentType` cases |
| 134 | + |
| 135 | +Signed-off-by: Jan Kowalleck <[email protected]> |
| 136 | + |
| 137 | +* refactor: adjust xml child order for CDX1.5 |
| 138 | + |
| 139 | +Signed-off-by: Jan Kowalleck <[email protected]> |
| 140 | + |
| 141 | +* refactor: adjust xml child order for CDX1.5 |
| 142 | + |
| 143 | +Signed-off-by: Jan Kowalleck <[email protected]> |
| 144 | + |
| 145 | +* docs: update to latest CDX meta |
| 146 | + |
| 147 | +Signed-off-by: Jan Kowalleck <[email protected]> |
| 148 | + |
| 149 | +* refactor: adjust xml child order for CDX1.5 |
| 150 | + |
| 151 | +Signed-off-by: Jan Kowalleck <[email protected]> |
| 152 | + |
| 153 | +* feat: new enum cases fr VulnerabilityScoreSource |
| 154 | + |
| 155 | +Signed-off-by: Jan Kowalleck <[email protected]> |
| 156 | + |
| 157 | +* refactor: adjust xml child order for CDX1.5 |
| 158 | + |
| 159 | +Signed-off-by: Jan Kowalleck <[email protected]> |
| 160 | + |
| 161 | +* tests: adjust to latest implementation |
| 162 | + |
| 163 | +Signed-off-by: Jan Kowalleck <[email protected]> |
| 164 | + |
| 165 | +* revert deletion by accident |
| 166 | + |
| 167 | +Signed-off-by: Jan Kowalleck <[email protected]> |
| 168 | + |
| 169 | +--------- |
| 170 | + |
| 171 | +Signed-off-by: Johannes Feichtner <[email protected]> |
| 172 | +Signed-off-by: Jan Kowalleck <[email protected]> |
| 173 | +Co-authored-by: Jan Kowalleck <[email protected]> |
| 174 | +Signed-off-by: Jan Kowalleck <[email protected]> ( [`0546677`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/0546677f7ea82ab176836b4d4432a7e3dc6db230)) |
| 175 | + |
| 176 | +### Unknown |
| 177 | + |
| 178 | +* Feat: prevent unknwon enums from rendering (#496) |
| 179 | + |
| 180 | +- fixes #490 |
| 181 | +- BC: Component serialization may throw `cyclonedx.exception.serialization.SerializationOfUnsupportedComponentTypeException` |
| 182 | +- feat: serialization have own exceptions of `cyclonedx.exception.serialization.*` |
| 183 | +- tests: lots of (functional) tests related to enums and serialization |
| 184 | +- misc: bump `py-serializable@^0.15` -> `@^0.16` |
| 185 | + |
| 186 | + |
| 187 | +details & progress: |
| 188 | + |
| 189 | +- [x] `DataFlow` |
| 190 | +- [x] `Encoding` |
| 191 | +- [x] `HashAlgorithm` |
| 192 | +- [x] `ExternalReferenceType` |
| 193 | + convert "unknown" to `other` |
| 194 | +- [x] `component.ComponentScope` |
| 195 | +- [x] `component.ComponentType`. > tests done, migrator open |
| 196 | + Unclear how to proceed. dropping the info is a bad idea here. |
| 197 | + Best would be to throw an exception and abort the rendering. |
| 198 | +- [x] `component.PatchClassification` |
| 199 | +- [x] `impact_analysis.ImpactAnalysisAffectedStatus` |
| 200 | +- [x] `impact_analysis.ImpactAnalysisJustification` |
| 201 | +- [x] `impact_analysis.ImpactAnalysisResponse` |
| 202 | +- [x] `impact_analysis.ImpactAnalysisState` |
| 203 | +- [x] `issue.IssueClassification` |
| 204 | +- [x] `vulnerability.VulnerabilityScoreSource` |
| 205 | + convert "unknown" to `other` |
| 206 | +- [x] `vulnerability.VulnerabilitySeverity` |
| 207 | + |
| 208 | +--------- |
| 209 | + |
| 210 | +Signed-off-by: Jan Kowalleck <[email protected]> ( [`6c204f7`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/6c204f7f6afbc49fe936931c6188380a8072f650)) |
| 211 | + |
| 212 | +* bc: remove parser API (#495) |
| 213 | + |
| 214 | +Signed-off-by: Jan Kowalleck <[email protected]> ( [`ac1f48a`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/ac1f48afae06f16f2375398658dd86076758a84a)) |
| 215 | + |
| 216 | +* bc: remove const `output.LATEST_SUPPORTED_SCHEMA_VERSION` (#494) |
| 217 | + |
| 218 | +Signed-off-by: Jan Kowalleck <[email protected]> ( [`b10dc83`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/b10dc83f1036d22693342ef8711502a899a3f5bb)) |
| 219 | + |
| 220 | +* Remove deprecated 6.0.0 (#493) |
| 221 | + |
| 222 | +* bc: remove deprecated functionality |
| 223 | + |
| 224 | +Signed-off-by: Jan Kowalleck <[email protected]> |
| 225 | + |
| 226 | +* tests: remove unused/outdated tests |
| 227 | + |
| 228 | +Signed-off-by: Jan Kowalleck <[email protected]> |
| 229 | + |
| 230 | +--------- |
| 231 | + |
| 232 | +Signed-off-by: Jan Kowalleck <[email protected]> ( [`e9cc5ee`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/e9cc5ee75ccf466040c2c4d6f5e8b5de8e24a666)) |
| 233 | + |
| 234 | +* tests: remove unused test snapshots |
| 235 | + |
| 236 | +Signed-off-by: Jan Kowalleck <[email protected]> ( [`cb0d5b6`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/cb0d5b6a455ca6aef3070b4f473fec18202b3a2b)) |
| 237 | + |
| 238 | + |
5 | 239 | ## v5.1.1 (2023-11-02)
|
6 | 240 |
|
7 | 241 | ### Fix
|
|
0 commit comments