Cyclonedx-python-lib

Latest version: v9.1.0

Safety actively analyzes 723144 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 3 of 19

8.2.1

Fix

* fix: encode quotation mark in URL (724)

Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com> ([`a7c7c97`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/a7c7c97c37ee1c7988c028aa779f74893f858c7b))

8.2.0

Feature

* feat: Add Python 3.13 support (718)

Signed-off-by: gruebel <anton.gruebelgmail.com> ([`d4be3ba`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/d4be3ba6b3ccc65553a7dd10ad559c1eddfbb19b))

8.1.0

Documentation

* docs: fix code examples regarding outputting (709)



Signed-off-by: Hakan Dilek <hakandilekgmail.com> ([`c72d5f4`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/c72d5f483d5c1990fe643c4c25e37373d4d3248f))

Feature

* feat: add support for Lifecycles in BOM metadata (698)



---------

Signed-off-by: Johannes Feichtner <johannesweb-wack.at>
Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com>
Signed-off-by: Johannes Feichtner <343448+Churrousers.noreply.github.com>
Co-authored-by: Jan Kowalleck <jan.kowalleckgmail.com> ([`6cfeb71`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/6cfeb711f11aec8fa4d7be885f6797cc2eaa7e67))

8.0.0

Breaking

* feat!: v8.0.0 (665)

BREAKING Changes

* Removed `cyclonedx.mode.ThisTool`, utilize `cyclonedx.builder.this.this_tool()` instead.
* Moved `cyclonedx.model.Tool` to `cyclonedx.model.tool.Tool`.
* Property `cyclonedx.mode.bom.BomMetaData.tools` is of type `cyclonedx.model.tool.ToolRepository` now, was `SortedSet[cyclonedx.model.Tool]`.
The getter will act accordingly; the setter might act in a backwards-compatible way.
* Property `cyclonedx.mode.vulnerability.Vulnerability.tools` is of type `cyclonedx.model.tool.ToolRepository` now, was `SortedSet[cyclonedx.model.Tool]`.
The getter will act accordingly; the setter might act in a backwards-compatible way.
* Constructor `cyclonedx.model.license.LicenseExpression()` accepts optional argument `acknowledgement` only as key-word argument, no longer as positional argument.


Changes

* Constructor of `cyclonedx.model.bom.BomMetaData` also accepts an instance of `cyclonedx.model.tool.ToolRepository` for argument `tools`.
* Constructor of `cyclonedx.model.bom.BomMetaData` no longer adds this very library as a tool.
Downstream users SHOULD add it manually, like `my-bom.metadata.tools.components.add(cyclonedx.builder.this.this_component())`.

Fixes

* Deserialization of CycloneDX that do not include tools in the metadata are no longer unexpectedly modified/altered.

Added

Enabled Metadata Tools representation and serialization in accordance with CycloneDX 1.5

* New class `cyclonedx.model.tool.ToolRepository`.
* New function `cyclonedx.builder.this.this_component()` -- representation of this very python library as a `Component`.
* New function `cyclonedx.builder.this.this_tool()` -- representation of this very python library as a `Tool`.
* New function `cyclonedx.model.tool.Tool.from_component()`.

Dependencies

* Raised runtime dependency `py-serializable>=1.1.1,<2`, was `>=1.1.0,<2`.

---------

Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com>
Signed-off-by: Joshua Kugler <tek30584adobe.com>
Signed-off-by: semantic-release <semantic-releasebot.local>
Co-authored-by: Joshua Kugler <joshuaazariah.com>
Co-authored-by: semantic-release <semantic-releasebot.local> ([`002f966`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/002f96630ce8fc6f1766ee6cc92a16b35a821c69))

Documentation

* docs(chaneglog): omit chore/ci/refactor/style/test/build (703)

Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com> ([`a210809`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/a210809efb34c2dc895fc0c6d96a3412a9097625))

7.6.2

Documentation

* docs: fix some doc strings

Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com> ([`4fa8fc1`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/4fa8fc1b6703ecf6788b72f2d53c6a17e2146cf7))

Fix

* fix: behavior of and typing for crypto setters with optional values (694)

fixes 690

---------

Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com> ([`d8b20bd`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/d8b20bdc5224ea30cf767f6f3f1a6f8ff2754973))

7.6.1

Fix

* fix: file copyright headers (676)

utilizes flake8 plugin
<https://pypi.org/project/flake8-copyright-validator/> to assert the
correct headers

Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com> ([`35e00b4`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/35e00b4ee5a9306b9e97b011025409bcbfcef309))

Page 3 of 19

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.