Esp-idf-sbom

Bug Fixes

- bump python to 3.13 in release_pypi.yml

New Features

- add support for embedded manifests

Bug Fixes

- use version comparison as a fallback to CPE match strings
- evaluate CPE attribute relations correctly
- avoid calling git-grep if neither cpe nor keyword is present
- clone and fetch only the master branch

Bug Fixes

- include all used components in the project's SPDX dependencies

New Features

- enable keyword search in CVE description

New Features

- allow usage of local NVD mirror for vulnerability scanning

Bug Fixes

- skip manifest validation in pre-commit if a git rebase is in progress
- exclude files from sub-package if it's not included
- properly manage input paths for the manifest license sub-command
- include missing dependencies for the SPDX project package

Bug Fixes

- correct global variable annotation for Python versions prior to 3.8
- ensure pyparsing usage remains compatible with version 2.2.2 or newer