feat: pulled SPDX license IDs v1.0-3.28.0

HISTORY.md

@@ -67,6 +67,7 @@ All notable changes to this project will be documented in this file.
   * `Component.purl` is a `string` now, was `PackaheUrl` ([#1348] via [#1379])
   * Constructor of `Contrib.License.Factories.LicenseFactory` got an injectable argument `spdxExpressionValidate` for validating SPDX License Expressions ([#1348] via [#1382])  
     Suggested implementation is `spdx-expression-parse`.
+  * Pulled SPDX license IDs v1.0-3.28.0 (via [#1395])
 * Dependencies
   * Dependency `packageurl-js` became a suggested (optional peer-dependency) library ([#1348] via [#1378])  
     You may use it to craft and parse PackageURLs downstream.
@@ -83,6 +84,7 @@ All notable changes to this project will be documented in this file.
 [#1379]: https://github.com/CycloneDX/cyclonedx-javascript-library/pull/1379
 [#1380]: https://github.com/CycloneDX/cyclonedx-javascript-library/pull/1380
 [#1382]: https://github.com/CycloneDX/cyclonedx-javascript-library/pull/1382
+[#1395]: https://github.com/CycloneDX/cyclonedx-javascript-library/pull/1395
 
 ## 9.5.0 -- 2026-03-02
 

res/schema/README.md

@@ -4,7 +4,7 @@ some schema for offline use as download via [script](../../tools/schema-download
 original sources: <https://github.com/CycloneDX/specification/blob/master>
 
 Currently using version
-[4b3f59453366e27c8073fd24e98bf21ef8892c8e](https://github.com/CycloneDX/specification/commit/4b3f59453366e27c8073fd24e98bf21ef8892c8e)
+[b29918c192fdd8f75d46fb24aeb871bb13bd477c](https://github.com/CycloneDX/specification/commit/b29918c192fdd8f75d46fb24aeb871bb13bd477c)
 
 | file | note |
 |------|------|

res/schema/cryptography-defs.SNAPSHOT.schema.json

@@ -1,7 +1,7 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
   "$id": "http://cyclonedx.org/schema/cryptography-defs.schema.json",
-  "$comment": "2025-09-07T11:12:52Z",
+  "$comment": "2026-02-26T14:12:39Z",
   "title": "Cryptographic Algorithm Family Definitions",
   "description": "Enumerates cryptographic algorithm families and their specific metadata.",
   "type": "object",
@@ -248,6 +248,7 @@
         "A5/2",
         "AES",
         "ARIA",
+        "Argon2",
         "Ascon",
         "BLAKE2",
         "BLAKE3",
@@ -258,6 +259,7 @@
         "CAST6",
         "CMAC",
         "CMEA",
+        "CTR_DRBG",
         "ChaCha",
         "ChaCha20",
         "DES",
@@ -273,8 +275,12 @@
         "HC",
         "HKDF",
         "HMAC",
+        "HMAC_DRBG",
+        "HPKE",
+        "Hash_DRBG",
         "IDEA",
         "IKE-PRF",
+        "J-PAKE",
         "KMAC",
         "LMS",
         "MD2",
@@ -284,6 +290,7 @@
         "ML-DSA",
         "ML-KEM",
         "MQV",
+        "OPAQUE",
         "PBES1",
         "PBES2",
         "PBKDF1",
@@ -305,20 +312,29 @@
         "SHA-2",
         "SHA-3",
         "SLH-DSA",
+        "SM2",
+        "SM3",
+        "SM4",
+        "SM9",
         "SNOW3G",
         "SP800-108",
+        "SPAKE2",
+        "SPAKE2PLUS",
+        "SRP",
         "Salsa20",
         "Serpent",
         "SipHash",
         "Skipjack",
         "TUAK",
         "Twofish",
+        "UMAC",
         "Whirlpool",
         "X3DH",
         "XMSS",
         "Yarrow",
         "ZUC",
-        "bcrypt"
+        "bcrypt",
+        "scrypt"
       ]
     },
     "ellipticCurvesEnum": {