Breaking
* feat: Release 4.0.0 341)
Highlights of this release include:
* Support for De-serialization from JSON and XML to this Pythonic Model
* Deprecation of Python 3.6 support
* Support for Python 3.11
* Support for `BomLink`
* Support VEX without needing `Component` in the same `Bom`
* Support for `services` having `dependencies`
BREAKING CHANGE: Large portions of this library have been re-written for this release and many methods and contracts have changed.
Signed-off-by: Paul Horton <paul.hortonowasp.org>
* feat: support VEX without Components in the same BOM
BREAKING CHANGE: Model classes changed to relocated Vulnerability at Bom, not at Component
Signed-off-by: Paul Horton <paul.hortonowasp.org>
* feat: support VEX without Components in the same BOM
BREAKING CHANGE: Model classes changed to relocated Vulnerability at Bom, not at Component
Signed-off-by: Paul Horton <paul.hortonowasp.org>
feat: allow `version` of BOM to be defined
feat: allow `serial_number` of BOM to be prescribed
feat: add helper method to get URN for a BOM according to https://www.iana.org/assignments/urn-formal/cdx
Signed-off-by: Paul Horton <paul.hortonowasp.org>
* chore: fix release workflow
* chore: editorconfig
Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com>
* feat: support for deserialization from JSON and XML (290)
BREAKING CHANGE:
* feat: drop Python 3.6 support
Signed-off-by: Hakan Dilek <hakandilekgmail.com>
Signed-off-by: Paul Horton <paul.hortonowasp.org>
Co-authored-by: Hakan Dilek <hakandilekgmail.com>
Co-authored-by: Hakan Dilek <hakandilekusers.noreply.github.com>
* fix: update `serializable` to include XML safety changes
Signed-off-by: Paul Horton <paul.hortonowasp.org>
* feat: Support for Python 3.11 (349)
* feat: officially test and support Python 3.11
Signed-off-by: Paul Horton <paul.hortonowasp.org>
* removed unused imports
Signed-off-by: Paul Horton <paul.hortonowasp.org>
* bump `poetry` to `1.1.12` in CI
Signed-off-by: Paul Horton <paul.hortonowasp.org>
* fix: remove `toml` as dependency as not used and seems to be breaking Python 3.11 CI
Signed-off-by: Paul Horton <paul.hortonowasp.org>
* fix: removed `types-toml` from dependencies - not used
Signed-off-by: Paul Horton <paul.hortonowasp.org>
---------
Signed-off-by: Paul Horton <paul.hortonowasp.org>
* fix: removed `autopep8` in favour of `flake8` as both have conflicting dependencies now
Signed-off-by: Paul Horton <paul.hortonowasp.org>
* chore: bump dev dependencies
fix: removed `setuptools` as dependency
Signed-off-by: Paul Horton <paul.hortonowasp.org>
* tests: compoennt versions optional (350)
* chore: exclude `venv*` from QA; add typing to QA
Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com>
* tests: component versions are optional
Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com>
---------
Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com>
* doc: doc updates for new deserialization feature
Signed-off-by: Paul Horton <paul.hortonowasp.org>
* doc: doc updates for contribution
Signed-off-by: Paul Horton <paul.hortonowasp.org>
---------
Signed-off-by: Paul Horton <paul.hortonowasp.org>
Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com>
Signed-off-by: Hakan Dilek <hakandilekgmail.com>
Co-authored-by: Jan Kowalleck <jan.kowalleckgmail.com>
Co-authored-by: Hakan Dilek <hakandilekgmail.com>
Co-authored-by: Hakan Dilek <hakandilekusers.noreply.github.com> ([`8fb1b14`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/8fb1b14f5e04e85f21e654c44fa6b9b774867757))
Unknown
* 4.0.0
Automatically generated by python-semantic-release ([`40fbfda`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/40fbfda428cfa71b16fd6e5e8d5f49cea4b5438b))