Merge branch 'main' into feat/license-expression-detailed

Author: jkowalleck

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,39 @@
+<!--🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅
+
+You can expedite processing of your PR by using this template to provide context
+and additional information. Before actually opening a PR please make sure that it
+does NOT fall into any of the following categories
+
+🚫 Spam PRs (accidental or intentional) - these will result in a 30-days or even
+∞ ban from interacting with the project depending on reoccurrence and severity.
+
+🚫 Lazy typo fixing PRs - if you fix a typo in a file, your PR will only be merged
+if all other typos in the same file are also fixed with the same PR
+
+🚫 If you fail to provide any _Description_ below, your PR will be considered spam.
+If you do not check the _Affirmation_ box below, your PR will not be merged.
+
+🚫 If you do not check one of the _AI Tool Disclosure_ boxes below, your PR will
+not be merged. If you used AI tools to assist you in writing code, but fail to
+provide the required disclosure, your PR will not be merged.
+
+🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅🔅-->
+
+### Description
+
+<!-- ✍️-->
+A clear and concise summary of the change and which issue (if any) it fixes. Should also include relevant motivation and context.
+
+Resolves or fixes issue: <!-- ✍️ Add GitHub issue number in format `#0000` or `none` -->
+
+### AI Tool Disclosure
+
+- [ ] My contribution does not include any AI-generated content
+- [ ] My contribution includes AI-generated content, as disclosed below:
+  - AI Tools: `[e.g. GitHub CoPilot, ChatGPT, JetBrains Junie etc.]`
+  - LLMs and versions: `[e.g. GPT-4.1, Claude Haiku 4.5, Gemini 2.5 Pro etc.]`
+  - Prompts: `[Summarize the key prompts or instructions given to the AI tools]`
+
+### Affirmation
+
+- [ ] My code follows the [CONTRIBUTING.md](https://github.com/CycloneDX/cyclonedx-python-lib/blob/main/CONTRIBUTING.md) guidelines

.github/workflows/python.yml

@@ -180,23 +180,10 @@ jobs:
           - "-allExtras"
           - "-noExtras"
         exclude:
-          - os: macos-latest
+          - os: macos-latest  # macos-latest is incompatible with some PY versions
             python-version: "3.10"
-          - os: macos-latest
+          - os: macos-latest  # macos-latest is incompatible with some PY versions
             python-version: "3.9"
-        include:
-          - os: macos-13
-            python-version: "3.10"
-            toxenv-factors: "-allExtras"
-          - os: macos-13
-            python-version: "3.10"
-            toxenv-factors: "-noExtras"
-          - os: macos-13
-            python-version: "3.9"
-            toxenv-factors: "-allExtras"
-          - os: macos-13
-            python-version: "3.9"
-            toxenv-factors: "-noExtras"
     steps:
       - name: Disabled Git auto EOL CRLF transforms
         run: |
@@ -239,7 +226,7 @@ jobs:
       - name: Artifact reports
         if: ${{ ! cancelled() }}
         # see https://github.com/actions/upload-artifact
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: ${{ env.TESTS_REPORTS_ARTIFACT }}-${{ matrix.os }}-py${{ matrix.python-version }}${{ matrix.toxenv-factors }}
           path: ${{ env.REPORTS_DIR }}
@@ -253,7 +240,7 @@ jobs:
     steps:
       - name: fetch test artifacts
         # see https://github.com/actions/download-artifact
-        uses: actions/download-artifact@v6
+        uses: actions/download-artifact@v7
         with:
           path: ${{ env.REPORTS_DIR }}
           pattern: ${{ env.TESTS_REPORTS_ARTIFACT }}-*

.readthedocs.yaml

@@ -6,9 +6,9 @@ version: 2
 
 # Set the version of Python and other tools you might need
 build:
-  os: ubuntu-22.04
+  os: ubuntu-lts-latest
   tools:
-    python: "3.11"
+    python: "3.14"
     # You can also specify other tool versions:
     # nodejs: "16"
     # rust: "1.55"

docs/requirements.txt

@@ -1,4 +1,4 @@
 m2r2>=0.3.2
-sphinx>=7.2.6,<9
-sphinx-autoapi>=3.0.0,<4
-sphinx-rtd-theme>=2.0.0,<3
+sphinx>=8,<9
+sphinx-autoapi>=3,<4
+sphinx-rtd-theme>=3,<4

pyproject.toml

@@ -97,12 +97,15 @@ flake8-use-fstring = "1.4"
 pep8-naming = "0.15.1"
 isort = "6.1.0"
 autopep8 = "2.3.2"
-mypy = "1.19.0"
+mypy = "1.19.1"
 tomli = { version = "2.3.0", python = "<3.11" }
 tox = "4.30.3"
 xmldiff = "2.7.0"
 bandit = "1.8.6"
-pyupgrade = "3.21.0"
+pyupgrade = [
+  { version = "3.21.0", python = "<3.10" },
+  { version = "3.21.2", python = ">=3.10" },
+]
 deptry = "0.23.1"
 # for tests, use the GPL-version of jsonschema format validators - they are faster
 jsonschema = { version = "*", extras = ["format"], optional=true }