Cyclonedx-python-lib

Latest version: v9.1.0

Safety actively analyzes 723144 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 7 of 19

6.3.0

Documentation

* docs: add `Documentation` url to project meta

Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com> ([`1080b73`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/1080b7387a0bbc49a067cd2efefb1545470947e5))

* docs: add `Documentation` url to project meta

Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com> ([`c4288b3`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/c4288b35e0e1050f0982f7492cfcd3bea34b445c))

Feature

* feat: enable dependency `py-serializable 0.17` (529)

Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com> ([`9f24220`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/9f24220029cd18cd191f63876899cd86be52dce1))

6.2.0

Build

* build: allow additional major-version RC branch patterns

Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com> ([`f8af156`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/f8af156c9c38f737b7067722d2a96f8a2a4fcb48))

Documentation

* docs: fix typo

Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com> ([`2563996`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/25639967c93ad464e486f2fe6a148b3be439f43d))

* docs: update intro and description

Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com> ([`f0bd05d`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/f0bd05dc854b5b71421b82cfb527fcb8f41a7c4a))

* docs: buld docs on ubuntu22.04 python311

Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com> ([`b3e9ab7`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/b3e9ab77696f2ee763f1746f8142bdf471477c39))

Feature

* feat: allow `lxml` requirement in range of `>=4,<6` (523)

Updates the requirements on [lxml](https://github.com/lxml/lxml) to permit the latest version.
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](https://github.com/lxml/lxml/compare/lxml-4.0.0...lxml-5.0.0)

---
updated-dependencies:
- dependency-name: lxml
dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <supportgithub.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]users.noreply.github.com> ([`7d12b9a`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/7d12b9a9f7a2fdc5e6bb12f891c6f4291e20e65e))

Unknown

* docs

Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com> ([`7dcd166`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/7dcd16621002713dcf1ce8e17bc5762320fae4fa))

6.1.0

Feature

* feat: add function to map python `hashlib` algorithms to CycloneDX (519)

new API: `model.HashType.from_hashlib_alg()`

Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com> ([`81f8cf5`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/81f8cf59b1f40ffbd213789a8b1b621a01e3f631))

6.0.0

Breaking

* feat!: v6.0.0 (492)

Breaking Changes

* Removed symbols that were already marked as deprecated (via [493])
* Removed symbols in `parser.*` ([489] via [495])
* Removed `output.LATEST_SUPPORTED_SCHEMA_VERSION` ([491] via [494])
* Serialization of unsupported enum values might downgrade/migrate/omit them ([490] via [496])
Handling might raise warnings if a data loss occurred due to omitting.
The result is a guaranteed valid XML/JSON, since no (enum-)invalid values are rendered.
* Serialization of any `model.component.Component` with unsupported `type` raises `exception.serialization.SerializationOfUnsupportedComponentTypeException` ([490] via [496])
* Object `model.bom_ref.BomRef`&39;s property `value` defaults to `Null`, was arbitrary `UUID` ([504] via [505])
This change does not affect serialization. All `bom-ref`s are guaranteed to have unique values on rendering.
* Removed helpers from public API ([503] via [506])

Added

* Basic support for CycloneDX 1.5 ([404] via [488])
* No data models were enhanced nor added, yet.
Pull requests to add functionality are welcome.
* Existing enumerable got new cases, to reflect features of CycloneDX 1.5 ([404] via [488])
* Outputters were enabled to render CycloneDX 1.5 ([404] via [488])

Tests

* Created (regression/unit/integration/functional) tests for CycloneDX 1.5 ([404] via [488])
* Created (regression/functional) tests for Enums&39; handling and completeness ([490] via [496])

Misc

* Bumped dependency `py-serializable^0.16`, was `^0.15` (via [496])


----

API Changes — the details for migration

* Added new sub-package `exception.serialization` (via [496])
* Removed class `models.ComparableTuple` ([503] via [506])
* Enum `model.ExternalReferenceType` got new cases, to reflect features for CycloneDX 1.5 ([404] via [488])
* Removed function `models.get_now_utc` ([503] via [506])
* Removed function `models.sha1sum` ([503] via [506])
* Enum `model.component.ComponentType` got new cases, to reflect features for CycloneDX 1.5 ([404] via [488])
* Removed `model.component.Component.__init__()`&39;s deprecated optional kwarg `namespace` (via [493])
Use kwarg `group` instead.
* Removed `model.component.Component.__init__()`&39;s deprecated optional kwarg `license_str` (via [493])
Use kwarg `licenses` instead.
* Removed deprecated method `model.component.Component.get_namespace()` (via [493])
* Removed class `models.dependency.DependencyDependencies` ([503] via [506])
* Removed `model.vulnerability.Vulnerability.__init__()`&39;s deprecated optional kwarg `source_name` (via [493])
Use kwarg `source` instead.
* Removed `model.vulnerability.Vulnerability.__init__()`&39;s deprecated optional kwarg `source_url` (via [493])
Use kwarg `source` instead.
* Removed `model.vulnerability.Vulnerability.__init__()`&39;s deprecated optional kwarg `recommendations` (via [493])
Use kwarg `recommendation` instead.
* Removed `model.vulnerability.VulnerabilityRating.__init__()`&39;s deprecated optional kwarg `score_base` (via [493])
Use kwarg `score` instead.
* Enum `model.vulnerability.VulnerabilityScoreSource` got new cases, to reflect features for CycloneDX 1.5 ([404] via [488])
* Removed `output.LATEST_SUPPORTED_SCHEMA_VERSION` ([491] via [494])
* Removed deprecated function `output.get_instance()` (via [493])
Use function `output.make_outputter()` instead.
* Added new class `output.json.JsonV1Dot5`, to reflect CycloneDX 1.5 ([404] via [488])
* Added new item to dict `output.json.BY_SCHEMA_VERSION`, to reflect CycloneDX 1.5 ([404] via [488])
* Added new class `output.xml.XmlV1Dot5`, to reflect CycloneDX 1.5 ([404] via [488])
* Added new item to dict `output.xml.BY_SCHEMA_VERSION`, to reflect CycloneDX 1.5 ([404] via [488])
* Removed class `parser.ParserWarning` ([489] via [495])
* Removed class `parser.BaseParser` ([489] via [495])
* Enum `schema.SchemaVersion` got new case `V1_5`, to reflect CycloneDX 1.5 ([404] via [488])


[404]: https://github.com/CycloneDX/cyclonedx-python-lib/issues/404
[488]: https://github.com/CycloneDX/cyclonedx-python-lib/pull/488
[489]: https://github.com/CycloneDX/cyclonedx-python-lib/issues/489
[490]: https://github.com/CycloneDX/cyclonedx-python-lib/issues/490
[491]: https://github.com/CycloneDX/cyclonedx-python-lib/issues/491
[493]: https://github.com/CycloneDX/cyclonedx-python-lib/pull/493
[494]: https://github.com/CycloneDX/cyclonedx-python-lib/pull/494
[495]: https://github.com/CycloneDX/cyclonedx-python-lib/pull/495
[496]: https://github.com/CycloneDX/cyclonedx-python-lib/pull/496
[503]: https://github.com/CycloneDX/cyclonedx-python-lib/issues/503
[504]: https://github.com/CycloneDX/cyclonedx-python-lib/issues/504
[505]: https://github.com/CycloneDX/cyclonedx-python-lib/pull/505
[506]: https://github.com/CycloneDX/cyclonedx-python-lib/pull/506

---------

Signed-off-by: Johannes Feichtner <johannesweb-wack.at>
Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com>
Signed-off-by: semantic-release <semantic-release>
Co-authored-by: Johannes Feichtner <343448+Churrousers.noreply.github.com>
Co-authored-by: semantic-release <semantic-release> ([`74865f8`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/74865f8e498c9723c2ce3556ceecb6a3cfc4c490))

5.2.0

Documentation

* docs: keywaords & funding (486)

Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com> ([`3189e59`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/3189e59ff8e3d3d10f7b949b5a08397ff3d3642b))

Feature

* feat: `model.XsUri` migrate control characters according to spec (498)

fixes https://github.com/CycloneDX/cyclonedx-python-lib/issues/497

---------

Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com> ([`e490429`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/e49042976f8577af4061c34394db270612488cdf))

5.1.1

Fix

* fix: update own `externalReferences` (480)

Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com> ([`edb3dde`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/edb3dde889c06755dd1963ed21dd803db3ea0dcc))

Page 7 of 19

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.