Skip to content

Latest commit

 

History

History
197 lines (144 loc) · 10.6 KB

CHANGELOG.md

File metadata and controls

197 lines (144 loc) · 10.6 KB
Raw

Changelog

v1.3.0 (2022-01-24)

Feature

  • bom-ref for Component and Vulnerability default to a UUID (#142) (3953bb6)

v1.2.0 (2022-01-24)

Feature

v1.1.1 (2022-01-19)

Fix

v1.1.0 (2022-01-13)

Feature

  • Add support for bom.metadata.component (#118) (1ac31f4)

v1.0.0 (2022-01-13)

Support for CycloneDX schema version 1.4 (#108)

Breaking Changes

Support for CycloneDX 1.4. This includes:

  • Support for tools having externalReferences
  • Allowing version for a Component to be optional in 1.4
  • Support for releaseNotes per Component
  • Support for the core schema implementation of Vulnerabilities (VEX)

Features

Fixes

  • Unit tests now include schema validation (we've left schema validation out of the core library due to dependency bloat)
  • Ensure schema is adhered to in 1.0
  • URIs are now used throughout the library through a new XsUri class to provide URI validation

Other

v0.12.3 (2021-12-15)

Fix

  • Removed requirements-parser as dependency (temp) as not available for Python 3 as Wheel (#98) (3677d9f)

v0.12.2 (2021-12-09)

Fix

  • Tightened dependency packageurl-python (#95) (eb4ae5c)

v0.12.1 (2021-12-09)

Fix

  • Further loosened dependency definitions (8bef6ec)

v0.12.0 (2021-12-09)

Feature

  • Loosed dependency versions to make this library more consumable (55f10fb)

v0.11.1 (2021-11-10)

Fix

  • Constructor for Vulnerability to correctly define ratings as optional (395a0ec)

v0.11.0 (2021-11-10)

Feature

v0.10.2 (2021-10-21)

Fix

  • Correct way to write utf-8 encoded files (49f9369)

v0.10.1 (2021-10-21)

Fix

  • Ensure output to file is UTF-8 (a10da20)
  • Ensure output to file is UTF-8 (193bf64)

v0.10.0 (2021-10-20)

Feature

v0.9.1 (2021-10-19)

Fix

  • Missing check for Classifiers in Environment Parser (b7fa38e)

v0.9.0 (2021-10-19)

Feature

  • Add support for parsing package licenses when using the Environment Parsers (c414eaf)

v0.8.3 (2021-10-14)

Fix

  • Coding standards violations (00cd1ca)
  • Handle Pipfile.lock dependencies without an index specified (26c62fb)

v0.8.2 (2021-10-14)

Fix

  • Add namespace and subpath support to Component to complete PackageURL Spec support (780adeb)

v0.8.1 (2021-10-12)

Fix

  • Multiple hashes being created for an externalRefernce which is not as required (970d192)

v0.8.0 (2021-10-12)

Feature

  • Add support for externalReferneces for Components and associated enhancements to parsers to obtain information where possible/known (a152852)

v0.7.0 (2021-10-11)

Feature

  • Support for pipenv.lock file parsing (68a2dff)

v0.6.2 (2021-10-11)

Fix

  • Added ability to add tools in addition to this library when generating CycloneDX + plus fixes relating to multiple BOM instances (e03a25c)

v0.6.1 (2021-10-11)

Fix

  • Better methods for checking if a Component is already represented in the BOM, and the ability to get the existing instance (5fee85f)

v0.6.0 (2021-10-11)

Feature

  • Helper method for representing a File as a Component taking into account versioning for files as per CycloneDX/cyclonedx.org#34 (7e0fb3c)
  • Support for non-PyPi Components - PackageURL type is now definable when creating a Component (fde79e0)

v0.5.0 (2021-10-11)

Feature

  • Add support for tool(s) that generated the SBOM (7d1e6ef)

Fix

  • Bumped a dependency version (efc1053)

v0.4.1 (2021-09-27)

Fix

  • Improved handling for requirements.txt content without pinned or declared versions (7f318cb)

v0.4.0 (2021-09-16)

Feature

  • Support for localising vectors (i.e. stripping out any scheme prefix) (b9e9e17)
  • Helper methods for deriving Severity and SourceType (6a86ec2)

Fix

  • Removed print call (8806553)
  • Relaxed typing of parameter to be compatible with Python < 3.9 (f9c7990)
  • Removed print call (d272d2e)
  • Remove unused commented out code (ba4f285)

v0.3.0 (2021-09-15)

Feature

  • Adding support for extension schema that descriptions vulnerability disclosures (d496695)

v0.2.0 (2021-09-14)

Feature

  • Added helper method to return a PackageURL object representing a Component (367bef1)

Fix

  • Whitespace on empty line removed (cfc952e)

v0.1.0 (2021-09-13)

Feature

v0.0.11 (2021-09-10)

Fix

  • test: Test was not updated for revised author statement (d1c9d37)
  • build: Test failure and dependency missing (9a2cfe9)
  • build: Removed artefacts associtated with non-poetry build (f9119d4)

v0.0.10 (2021-09-08)

Fix

v0.0.9 (2021-09-08)

Fix

  • Additional info to poetry, remove circleci (2fcfa5a)

v0.0.8 (2021-09-08)

Fix

  • Initial release to pypi, tell poetry to include cyclonedx package (a030177)

v0.0.7 (2021-09-08)

Fix

v0.0.6 (2021-09-08)

Fix

  • Initial release to pypi (99687db)

v0.0.5 (2021-09-08)

v0.0.4 (2021-09-08)

v0.0.3 (2021-09-08)

v0.0.2 (2021-09-08)