nil4

`merge`-d polyglot SBOM loses dependency graph information

14

### Problem overview CycloneDX tools vary in their support for dependency graph information. For example, `cyclonedx-dotnet`@0.19.0 supports it, while `cyclonedx-node-module` does not due to https://github.com/CycloneDX/cyclonedx-node-module/issues/61. When merging SBOMs in a...

`merge` output includes UTF-8 byte-order-marks

3

After upgrading `cyclonedx-cli` from v0.16.0 to v0.19.0, it was observed that XML BOMs produced by the `merge` command started being rejected when uploaded to Dependency Track v4.3.6. The issue is...

Typing `fl` or `fi` in a textbox crashes with Avalonia 11.0.10 on MacOS

4

### Describe the bug Apps built with Avalonia 11.0.10 and 11.1.0-beta1 packages crash repeatably on MacOS 14.4, when typing `fi` or `fl` in a text box. ### To Reproduce ```shell...

### Library name krb5 ### New version number 1.21.3 ### Other information that may be useful (release notes, etc...) ref. https://web.mit.edu/kerberos/krb5-1.21/ > ### Major changes in 1.21.3 (2024-06-26) > >...

.NET 9.0 To-Do's

3

.NET 9.0 RC1 release does not include any XML documentation files (possible related to https://github.com/dotnet/runtime/issues/106825 or https://github.com/dotnet/runtime/issues/105974#issuecomment-2278395449) When RC2 is released in Oct, and then RTM in Nov, check if...

Enable `RollForward` to run on the latest .NET SDKs

2

Enables installing and running `CycloneDX` on runtimes/SDKs newer than those that it targets when published. (For instance, allows v4.0.0 to run with only .NET SDK 9.0 installed, and no 8.0,...

### Usage Information Nuke 9.0.4 / .NET SDK 9.0.300 / .NET 9 ### Description The last Nuke release (9.0.4) depends on `Microsoft.Build.Tasks.Core` 17.12.6: https://github.com/nuke-build/nuke/blob/da2ea1fecf4896fbd68f3c1884ea704e64b0412f/Directory.Packages.props#L67 A security advisory has recently been...

Generated Swift code does not build when a C# method has an argument of type enum array. To reproduce, add a new method to the managed sample [`EnumTests` class](https://github.com/royalapplications/beyondnet/blob/main/Samples/Beyond.NET.Sample.Managed/Source/EnumTests.cs): ```csharp...

Invalid project references do not indicate source project in `-graph` builds

3

### Describe the bug When building with the `-graph` option enabled, there is no indication about which project is the *source* of one or more invalid project references. This makes...

`Avalonia.Svg` package deprecated and published under a new name (breaking change)

2

Markdown.Avalonia uses the package `Avalonia.Svg`: https://github.com/whistyun/Markdown.Avalonia/blob/8ab520b41e921549b3e471a44cdd242c5d0d81d8/Markdown.Avalonia.Svg/Markdown.Avalonia.Svg.csproj#L22 The author recently deprecated `Avalonia.Svg` and published a different package under a new name to replace it; ref. https://www.nuget.org/packages/Avalonia.Svg > This package has been...