- Add Changelog to project urls
(
5f38d75)
- Fix changelog
(
1e6574f)
-
Finalize PEP639, auto-enable it, remove CLI switch
environment --PEP-639(#928,6b81028) -
Remove deprecated CLI switches
--schema-versionand--outfile, use--spec-versionand--output-fileinstead (#892,2be98e5)
-
Formatting and reorder of code style instructions. (
15ac2cd) -
License file
*.rstare NOT typetext- they are binary (#911,168f81d)
- Maintenance
(
e3c168b)
- Fix default value for
--spec-version(2f2982b)
-
Install instructions for
uv(07d9bcc)
-
Deprecate CLI switch
--outfile; use new--output-fileinstead (#875,fb30ee0) -
Deprecate CLI switch
--schema-version; use new--spec-versioninstead (#871,bbae05f)
- Fix headline structure in readme
(
74f07e1)
- Emitted metadata tool name is
cyclonedx-py, wascyclonedx-bom. * Emitted metadata tools are up to non-deprecated CycloneDX specification. * No longer emit deprecated or undocumented properties in namespacecdx:poetry(see previous release 4.6.0 for official replacements). -cdx:poetry:source:package:reference-cdx:poetry:package:source:resolved_reference-cdx:poetry:package:source:vcs:requested_revision-cdx:poetry:package:source:vcs:commit_id
The mentioned changes are considered "breaking" for processes that relied on the respective data structures. Migration paths are self-explanatory.
- Requires
cyclonedx-python-lib>=8.0.0,<9now, was>=7.3.0,<8.0.0,!=7.3.1.
- Contrib and setup hint
(
2ae46ff)
- Fix typo
(
9f9fa9e)
See also the migration guide in the docs.
- BC: Removed support for python < 3.8
- BC: Removed deprecated shell script
cyclonedx-bom; usecyclonedx-pyinstead - BC: Removed conda support. However, conda's Python environments are fully supported. See below.
- BC: Removed public API. You may use the CLI instead, see chapter "usage" in the docs.
- BC: Complete redesign of the CommandLineInterface(CLI):
- Uses sub-commands for easy accessibility and divide in specific purposes and domains
- Easy understandable flags, switches and options -- in accordance with the domains
- Updated help pages, added usage examples
- Dozens of new features and fixes, such as:
- environment analyzer supports any Python (virtual) environment -- including support for, but not limited to: conda, Hatch, PDM, Pipenv, Poetry, venv, virtualenv
- Poetry analyzer support groups, filtering, and such
- Pipenv analyzer support categories, filtering, and such
- requirements analyzer is feature complete and fixed - More details in the SBOM results (based on method)
- PackageURLs may have
more qualifiers (enabled per default, disable via
--short-PURLs) - component properties
according to official
taxonomy - SBOM results
may be validated (enabled per default, disable via
--no-validate) - SBOM results may have
dependency graph populated (if supported by method - applies to environment and Poetry) - SBOM
results may have root-component populated (if
pyprojectprovided) - SBOM results are more
diff-friendly and not just one long line of text - Fixed possible issues with input data encoding
- May omit dev-dependencies or domain-specific groups/categories (if supported by method and issued by CLI switches)
- Strip authentication secrets from (private) download/index URLs
- Support CycloneDX 1.5
- which is the default now - Upgraded documentation, examples, ...
- Complete rewrite from scratch - Dependencies were bumped, dropped, added, ...
- QA and test suites were massively enhanced
- Input file encoding fallback
(
0bc7296)
-
Mark
ShellSessionin README (411cf3d)
- Deprecated CLI command
cyclonedx-bomprints deprecation warning on STDERR before execution (#489,2009236)
- Ci release pipeline
(
99ccdc6)
- Ci release pipeline
(
6515071)
-
Describe
cyclonedx-pyrather thancyclonedx-bom(c04196e) -
Minor updates to poetry usage details & contributing.md (#407,
0abe230)
- Cli default file for json format
(
8747620)
- Describe methods to call the tool
(
2bac83a)
- Make module callable
(
5b3d8d7)
-
Add hint for RTFD to README (
cf4f534) -
Add link to https://cyclonedx.org/ to README (
fc4b8e4) -
Add RTFD shield to README (
7fef6ee) -
Fixed link to RTFD (
3a8669a)
- Update RequirementsFileParser docs to include nested file support
(
9e9021d)
-
Add pip-requirements-parser and update virtualenv to latest version (
73b2182) -
Add support for hashes, local packages and private repositories (
addc21a)
-
Added marker and classifiers to denote this as typed (#313,
f317353) -
Bump to latest
cyclonedx-python-lib(5902fbf)
BREAKING CHANGE: Default Schema Version has been replaced by notion of LATEST supported Schema Version
-
Update to latest RC of
cyclonedx-python-lib(6c8b517) -
Update to latest RC of
cyclonedx-python-lib(bc8ee6b)
- Default Schema Version has been replaced by notion of LATEST supported Schema Version
- Bump dependencies to get latest
cyclonedx-python-lib(87c3fe7)
-
Add support for output to CycloneDX 1.4 (draft) (#294,
7bb6d32) -
Breaking CHANGE - relocated concrete parsers (#294,
7bb6d32) -
Breaking CHANGE - relocated concrete parsers from
cyclonedx-python-lib(#294,7bb6d32)
-
Corrected docker image build process to not rely on
distfolder which is cleaned up by python-semantic-release (6c65c11) -
Revert to previous process for building Docker image as PyPi index update is too slow to pull straight away after publish (
67bb738)
- Add static code analysis, better typing and bump cyclonedx-python-lib to 0.11
(
d5d9f56)
- If no input file is supplied and no input is provided on STDIN, we will now try to automatically
locate (in the current working directory) a manifest with default name for the input type
specified. This works for PIP (Pipfile.lock), Poetry (poetry.lock) and Requirements
(requirements.txt)
(
93f9e59)
- Corrected documentation after deprecation of
-rf,-pf,--poetry-file,--requirements-fileand--pip-file(4c4c8d8)
-
Encoding issues on Windows (bump cyclonedx-python-lib to ^0.10.1) (
fe5df36) -
Encoding issues on Windows (bump cyclonedx-python-lib to ^0.10.2) (
da6772b)
- Add conda support (bump cyclonedx-python-lib to ^0.10.0)
(
cb24275)
- Bump to cyclonedx-python-lib to resolve issue #244
(
ebea3ef)
- Add license information in CycloneDX BOM when using Environment as the source
(
5d1f9a7)
- Update to latest stable cyclonedx-python-lib
(
6145bd5)
- Add support for generating SBOM from poetry.lock files
(
bb4ac0f)
- Handle
requirements.txtwhich contain dependencies without a version statement and warn that they cannot be included in the resulting CycloneDX BOM (e637e56)
- Error message when
requirements.txtfile is non-existent updated (3bbc071)
- Default to "requirements.txt" in current directory when "-r" flag is supplied but not "-rf" flag
is supplied
(
bb7e30a)
- Release GH action
(
148421b)
- ci: Corrected main to master branch.
(
7162cd9)
- Initial Release