cyclonedx-python-lib

cyclonedx-python-lib copied to clipboard

feat: add `cyclonedx.model.dependency.Dependency.provides`

7

Fixes #691

uzairchhapra

currently, we support python >= 3.8 this means, we do support python versions that are end-of-life. see https://devguide.python.org/versions/ * py38 - EOL 2024-10-07 * ... TBC ... ## proposal -...

jkowalleck

[TRACKING] Complete support for CycloneDX v1.6

2

see https://github.com/CycloneDX/specification/releases/tag/1.6 and https://github.com/CycloneDX/specification/releases/tag/1.6.1 The following items are not currently supported for CycloneDX v1.5 (as of release 7.6.x): - [ ] definitions - partially addressed by #701 - partially addressed...

jkowalleck

jkowalleck

feat: add `models.OrganizationalEntity.bom_ref`

2

Changes for the issue https://github.com/CycloneDX/cyclonedx-python-lib/issues/799

Yowgf

model.contact.OrganizationalEntity missing bom_ref attribute

3

## Example ```python import json from cyclonedx.model.bom import Bom from cyclonedx.validation.json import JsonStrictValidator from cyclonedx.schema import OutputFormat, SchemaVersion specification = { "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:835142d8-05ce-4729-bcb9-ff39cb67eb37", "version": 1, "metadata":...

Yowgf

implement `component.evidence.identity`

2

goal: have support for component's identity evidences according to spec https://cyclonedx.org/docs/1.6/json/#components_items_evidence_identity

jkowalleck

Bumps [python-semantic-release/python-semantic-release](https://github.com/python-semantic-release/python-semantic-release) from 9.1.1 to 9.21.0. Release notes Sourced from python-semantic-release/python-semantic-release's releases. v9.21.0 (2025-02-23) This release is published under the MIT License. ✨ Features Add package name variant, python-semantic-release, project...

dependabot[bot]

Wrong input should result into an exception

2

The code in spdx.py function `is_compound_expression` may run into an exception for several cases, and this results into a `return False`. This is semantically overloaded. In case of `False` we...

Joerki

chore(deps): update sphinx-rtd-theme requirement from <3,>=2.0.0 to >=2.0.0,<4

5

Updates the requirements on [sphinx-rtd-theme](https://github.com/readthedocs/sphinx_rtd_theme) to permit the latest version. Changelog Sourced from sphinx-rtd-theme's changelog. 3.0.1 Use black color for text in selectors. .. _release-3.0.0: 3.0.0 Final version. .. _release-3.0.0rc4:...

dependabot[bot]