head 1.65;
access;
symbols
pkgsrc-2026Q3:1.65.0.2
pkgsrc-2026Q3-base:1.65
pkgsrc-2026Q2:1.63.0.2
pkgsrc-2026Q2-base:1.63
pkgsrc-2026Q1:1.61.0.4
pkgsrc-2026Q1-base:1.61
pkgsrc-2025Q4:1.61.0.2
pkgsrc-2025Q4-base:1.61
pkgsrc-2025Q3:1.55.0.2
pkgsrc-2025Q3-base:1.55
pkgsrc-2025Q2:1.50.0.2
pkgsrc-2025Q2-base:1.50
pkgsrc-2025Q1:1.47.0.2
pkgsrc-2025Q1-base:1.47
pkgsrc-2024Q4:1.42.0.2
pkgsrc-2024Q4-base:1.42
pkgsrc-2024Q3:1.38.0.2
pkgsrc-2024Q3-base:1.38
pkgsrc-2024Q2:1.34.0.2
pkgsrc-2024Q2-base:1.34
pkgsrc-2024Q1:1.28.0.2
pkgsrc-2024Q1-base:1.28
pkgsrc-2023Q4:1.21.0.2
pkgsrc-2023Q4-base:1.21
pkgsrc-2023Q3:1.16.0.2
pkgsrc-2023Q3-base:1.16
pkgsrc-2023Q2:1.13.0.2
pkgsrc-2023Q2-base:1.13
pkgsrc-2023Q1:1.11.0.6
pkgsrc-2023Q1-base:1.11
pkgsrc-2022Q4:1.11.0.4
pkgsrc-2022Q4-base:1.11
pkgsrc-2022Q3:1.11.0.2
pkgsrc-2022Q3-base:1.11
pkgsrc-2022Q2:1.7.0.2
pkgsrc-2022Q2-base:1.7
pkgsrc-2022Q1:1.5.0.2
pkgsrc-2022Q1-base:1.5
pkgsrc-2021Q4:1.2.0.2
pkgsrc-2021Q4-base:1.2;
locks; strict;
comment @# @;
1.65
date 2026.08.16.12.20.26; author wiz; state Exp;
branches;
next 1.64;
commitid FHUgg0cgs4CNkRRG;
1.64
date 2026.06.23.10.42.43; author wiz; state Exp;
branches;
next 1.63;
commitid KcvlymvD3B8PwUKG;
1.63
date 2026.06.07.21.13.58; author wiz; state Exp;
branches;
next 1.62;
commitid bdjoPJXQzzZjxUIG;
1.62
date 2026.03.26.14.36.13; author wiz; state Exp;
branches;
next 1.61;
commitid aHqn7TgVozycGuzG;
1.61
date 2025.12.09.13.49.34; author wiz; state Exp;
branches;
next 1.60;
commitid 9zVGvZL480dCRJlG;
1.60
date 2025.11.02.19.52.12; author wiz; state Exp;
branches;
next 1.59;
commitid vSbXzlCTFjEM31hG;
1.59
date 2025.10.30.13.11.30; author wiz; state Exp;
branches;
next 1.58;
commitid m33UibcMyPhiWAgG;
1.58
date 2025.10.19.18.45.05; author wiz; state Exp;
branches;
next 1.57;
commitid 0RK3izIek0Ny8dfG;
1.57
date 2025.09.22.20.31.05; author wiz; state Exp;
branches;
next 1.56;
commitid nR5R1QGIgNwOAKbG;
1.56
date 2025.09.21.15.37.51; author wiz; state Exp;
branches;
next 1.55;
commitid S3jywj6DPqjc0BbG;
1.55
date 2025.07.27.09.23.52; author wiz; state Exp;
branches;
next 1.54;
commitid OgXIXQdfwPTwJm4G;
1.54
date 2025.07.14.10.57.29; author wiz; state Exp;
branches;
next 1.53;
commitid Yrpq9qZwaHPwFH2G;
1.53
date 2025.07.13.10.27.45; author wiz; state Exp;
branches;
next 1.52;
commitid Nfwc3pPbmF8Zwz2G;
1.52
date 2025.07.06.08.43.39; author wiz; state Exp;
branches;
next 1.51;
commitid YnbKblJvhiFAbF1G;
1.51
date 2025.07.01.19.34.11; author wiz; state Exp;
branches;
next 1.50;
commitid IOXUJWRex1LEW41G;
1.50
date 2025.06.10.05.12.27; author wiz; state Exp;
branches;
next 1.49;
commitid LIpWskThCWNUQiYF;
1.49
date 2025.05.11.10.25.33; author wiz; state Exp;
branches;
next 1.48;
commitid HneZ8n1lvkA9ytUF;
1.48
date 2025.04.28.10.41.12; author wiz; state Exp;
branches;
next 1.47;
commitid XhmbZjt47Tgm3OSF;
1.47
date 2025.03.02.20.21.10; author wiz; state Exp;
branches;
next 1.46;
commitid GUjNAuJRlwGu5xLF;
1.46
date 2025.02.18.10.43.48; author wiz; state Exp;
branches;
next 1.45;
commitid 7N87AoIZS7rNhWJF;
1.45
date 2025.02.13.10.58.53; author adam; state Exp;
branches;
next 1.44;
commitid wtZddbjReMlFwiJF;
1.44
date 2025.02.09.14.28.49; author wiz; state Exp;
branches;
next 1.43;
commitid qXbL6JMy3mxXONIF;
1.43
date 2025.02.02.15.57.00; author wiz; state Exp;
branches;
next 1.42;
commitid YPwaWyZFfHdaxUHF;
1.42
date 2024.11.24.10.22.16; author wiz; state Exp;
branches;
next 1.41;
commitid 62v6RFddHtIPVSyF;
1.41
date 2024.10.30.14.35.34; author wiz; state Exp;
branches;
next 1.40;
commitid qOnQ3hcBtJbv8HvF;
1.40
date 2024.10.22.07.55.51; author wiz; state Exp;
branches;
next 1.39;
commitid 3LiSc8DwuFnmbDuF;
1.39
date 2024.10.12.08.55.12; author wiz; state Exp;
branches;
next 1.38;
commitid tMKbowTrAVRxPltF;
1.38
date 2024.09.22.15.45.02; author wiz; state Exp;
branches;
next 1.37;
commitid skNwsOcdCP37KOqF;
1.37
date 2024.08.19.21.22.06; author wiz; state Exp;
branches;
next 1.36;
commitid 327cDdohYy8vHtmF;
1.36
date 2024.07.14.13.41.49; author wiz; state Exp;
branches;
next 1.35;
commitid Udu90yX0VF2hjOhF;
1.35
date 2024.07.07.14.39.09; author wiz; state Exp;
branches;
next 1.34;
commitid eRinynYaqMcXQUgF;
1.34
date 2024.06.17.09.35.33; author wiz; state Exp;
branches;
next 1.33;
commitid QUpo8588VCIFOjeF;
1.33
date 2024.06.08.11.57.31; author wiz; state Exp;
branches;
next 1.32;
commitid qKJYqpCLu4niTadF;
1.32
date 2024.05.12.10.40.06; author wiz; state Exp;
branches;
next 1.31;
commitid NVwJmIq9jSRvkH9F;
1.31
date 2024.04.28.09.54.08; author wiz; state Exp;
branches;
next 1.30;
commitid wyDmpa2UJx1HwT7F;
1.30
date 2024.04.21.15.35.36; author wiz; state Exp;
branches;
next 1.29;
commitid kCwM9hBZGGaMD17F;
1.29
date 2024.04.18.08.55.26; author wiz; state Exp;
branches;
next 1.28;
commitid n1OcmCZlt0btwB6F;
1.28
date 2024.03.24.13.04.17; author adam; state Exp;
branches;
next 1.27;
commitid nxjqCthVLyeCHp3F;
1.27
date 2024.03.04.18.49.17; author adam; state Exp;
branches;
next 1.26;
commitid spQ8uoDpOlqNfS0F;
1.26
date 2024.03.03.11.40.53; author wiz; state Exp;
branches;
next 1.25;
commitid vw2V4BKG4pKOUH0F;
1.25
date 2024.02.05.10.53.31; author adam; state Exp;
branches;
next 1.24;
commitid TpbFZEhaAnpgweXE;
1.24
date 2024.01.28.13.19.59; author wiz; state Exp;
branches;
next 1.23;
commitid o6oLiwpiu8kFAdWE;
1.23
date 2024.01.07.16.15.01; author wiz; state Exp;
branches;
next 1.22;
commitid gHuUkENQq1XyexTE;
1.22
date 2023.12.30.10.26.19; author wiz; state Exp;
branches;
next 1.21;
commitid Jn4FiBaEDbzSytSE;
1.21
date 2023.12.17.22.22.06; author wiz; state Exp;
branches;
next 1.20;
commitid HuIbiSWjhMokWRQE;
1.20
date 2023.12.07.08.33.39; author wiz; state Exp;
branches;
next 1.19;
commitid nGtMe8c9Old4GvPE;
1.19
date 2023.11.07.23.00.54; author wiz; state Exp;
branches;
next 1.18;
commitid ZuD8j2u3PNTkrJLE;
1.18
date 2023.11.07.22.58.58; author wiz; state Exp;
branches;
next 1.17;
commitid FIWVsAd13HAfqJLE;
1.17
date 2023.10.28.19.57.14; author wiz; state Exp;
branches;
next 1.16;
commitid jP8MYROLWZ3yJqKE;
1.16
date 2023.09.09.20.56.01; author wiz; state Exp;
branches;
next 1.15;
commitid PJV1XnBFQVjYD8EE;
1.15
date 2023.07.30.15.32.49; author adam; state Exp;
branches;
next 1.14;
commitid SIXcZSzMn5vWaQyE;
1.14
date 2023.07.05.22.19.46; author wiz; state Exp;
branches;
next 1.13;
commitid lH2e9FeTSyTmeFvE;
1.13
date 2023.05.04.11.38.14; author wiz; state Exp;
branches;
next 1.12;
commitid tEF6rvWRB8ANFDnE;
1.12
date 2023.03.29.09.04.02; author wiz; state Exp;
branches;
next 1.11;
commitid wlISliP6q07FYZiE;
1.11
date 2022.09.18.11.53.56; author wiz; state Exp;
branches;
next 1.10;
commitid wgI9sqYMcyqB5lUD;
1.10
date 2022.08.07.07.54.58; author wiz; state Exp;
branches;
next 1.9;
commitid 1MKpmJUvMTtk7VOD;
1.9
date 2022.07.24.10.55.02; author wiz; state Exp;
branches;
next 1.8;
commitid P7vcPfNP9Y50z8ND;
1.8
date 2022.07.03.10.38.09; author wiz; state Exp;
branches;
next 1.7;
commitid RsMuqiS4kFm39rKD;
1.7
date 2022.06.13.09.59.01; author wiz; state Exp;
branches;
next 1.6;
commitid yMjLDGd53PguzRHD;
1.6
date 2022.04.20.21.29.08; author wiz; state Exp;
branches;
next 1.5;
commitid ZvHLnxOzkMzR7ZAD;
1.5
date 2022.03.08.09.08.29; author wiz; state Exp;
branches;
next 1.4;
commitid Qx4P7R7JrZktpovD;
1.4
date 2022.02.20.21.23.44; author wiz; state Exp;
branches;
next 1.3;
commitid 1kIkUCzUea4vZotD;
1.3
date 2022.01.04.20.54.40; author wiz; state Exp;
branches;
next 1.2;
commitid CYyhdK9qtoffkmnD;
1.2
date 2021.12.17.10.18.23; author wiz; state Exp;
branches;
next 1.1;
commitid obR7n1vsuv1QoZkD;
1.1
date 2021.12.07.18.05.29; author wiz; state Exp;
branches;
next ;
commitid dmJHzOM0ZOL3jKjD;
desc
@@
1.65
log
@py-cyclonedx-python-lib: update to 11.12.0.
## v11.12.0 (2026-08-13)
### Features
- Add isExternal property to Component for CycloneDX v1.7
([#959](https://github.com/CycloneDX/cyclonedx-python-lib/pull/959),
[`6993dea`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/6993dea6b84a9bf0627f959bed48d0fb5339e293))
## v11.11.2 (2026-08-12)
### Bug Fixes
- Encode paths when loading XML schemas
([#1028](https://github.com/CycloneDX/cyclonedx-python-lib/pull/1028),
[`17a0136`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/17a0136138ceca96383f484f158f5d4de414a9ec))
## v11.11.1 (2026-08-10)
### Bug Fixes
- Comparablepackageurl includes `name`
([#1022](https://github.com/CycloneDX/cyclonedx-python-lib/pull/1022),
[`d718ac2`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/d718ac2391095851e6e5e2e75988e7dfb79494a4))
@
text
@# $NetBSD: Makefile,v 1.64 2026/06/23 10:42:43 wiz Exp $
DISTNAME= cyclonedx_python_lib-11.12.0
PKGNAME= ${PYPKGPREFIX}-${DISTNAME:S/_/-/g}
CATEGORIES= security python
MASTER_SITES= ${MASTER_SITE_PYPI:=c/cyclonedx-python-lib/}
MAINTAINER= pkgsrc-users@@NetBSD.org
HOMEPAGE= https://github.com/CycloneDX/cyclonedx-python-lib
COMMENT= Python library for generating CycloneDX SBOMs
LICENSE= apache-2.0
TOOL_DEPENDS+= ${PYPKGPREFIX}-poetry-core>=2.2.1:../../devel/py-poetry-core
DEPENDS+= ${PYPKGPREFIX}-license-expression>=30:../../devel/py-license-expression
DEPENDS+= ${PYPKGPREFIX}-packageurl>=0.11:../../devel/py-packageurl
DEPENDS+= ${PYPKGPREFIX}-referencing>=0.28.4:../../textproc/py-referencing
DEPENDS+= ${PYPKGPREFIX}-serializable>=2:../../devel/py-serializable
DEPENDS+= ${PYPKGPREFIX}-sortedcontainers>=2.4.0:../../devel/py-sortedcontainers
TEST_DEPENDS+= ${PYPKGPREFIX}-ddt>=1.7.2:../../devel/py-ddt
TEST_DEPENDS+= ${PYPKGPREFIX}-jsonschema>=4.18:../../textproc/py-jsonschema
TEST_DEPENDS+= ${PYPKGPREFIX}-lxml>=4:../../textproc/py-lxml
TEST_DEPENDS+= ${PYPKGPREFIX}-xmldiff>=2.6.3:../../textproc/py-xmldiff
USE_LANGUAGES= # none
# as of 11.12.0
# 40 failed, 6944 passed, 1397 warnings
.include "../../lang/python/pyversion.mk"
.if ${PYTHON_VERSION} < 313
DEPENDS+= ${PYPKGPREFIX}-typing-extensions>=4.6:../../devel/py-typing-extensions
.endif
.include "../../lang/python/wheel.mk"
.include "../../mk/bsd.pkg.mk"
@
1.64
log
@py-cyclonedx-python-lib: update to 11.11.0.
## v11.11.0 (2026-06-17)
### Bug Fixes
- Protocolpropertiestype enum case `5g-aka` for CycloneDX 1.7
### Features
- `cryptoprimitive` enum cases for CycloneDX 1.7
- `protocolpropertiestype` enum cases for CycloneDX 1.7
## v11.10.0 (2026-06-11)
### Bug Fixes
- Lossless flattening of dependency graph during JSON serialization
- Typing in `contrib.bom.utils.BomDependencyGraphFlatMerger`
### Documentation
- Improve docs of `contrib.bom.utils.BomRefDiscriminator`
### Features
- Add `contrib.bom.utils.BomDependencyGraphFlatMerger`
- Move `output.BomRefDiscriminator` to `contrib.bom.utils.BomRefDiscriminator`
### Performance Improvements
- `contrib.bom.utils.bomdependencygraphflatmerger._flatten_merge`
## v11.9.0 (2026-06-08)
### Features
- Add support for license expression details
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.63 2026/06/07 21:13:58 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-11.11.0
d26 2
a27 2
# as of 11.11.0
# 40 failed, 6919 passed, 1397 warnings
@
1.63
log
@py-cyclonedx-python-lib: update to 11.8.0.
## v11.8.0 (2026-06-04)
### Documentation
- Update CDX summary
### Features
- Add support CycloneDX 1.7.1 & 1.6.2 & 1.5.1
- Pull SPDX license IDs v1.1-3.28.0
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.62 2026/03/26 14:36:13 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-11.8.0
d26 2
a27 2
# as of 11.8.0
# 40 failed, 6622 passed, 1387 warnings
@
1.62
log
@py-cyclonedx-python-lib: update to 11.7.0.
## v11.7.0 (2026-03-17)
### Documentation
- Add comprehensive SBOM validation guide
- Docstrings for schema version classes
- Modernize RTF setup
### Features
- Add properties for licenses according to CycloneDX 1.5
- Make schema deprecation warnings handle-able
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.61 2025/12/09 13:49:34 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-11.7.0
d26 2
a27 2
# as of 11.7.0
# 40 failed, 6490 passed, 1387 warnings
@
1.61
log
@py-cyclonedx-python-lib: update to 11.6.0.
Features
Moved non‑standard implementations to Contrib area (#916, 15a9023)
Added
New sub-package contrib.
Changed
Moved non‑standard implementations to Contrib area.
Deprecated
Certain exports have been deprecated; downstream imports should be updated to the new locations.
Note: the symbols themselves remain supported. See documentation and the "Refactored" section below for details.
Some (trivial) non-standard functionality was deprecated:
model.bom.Bom.get_component_by_purl()
model.bom.Bom.get_urn_uuid()
model.bom.Bom.has_component()
model.bom.Bom.get_vulnerabilities_for_bom_ref()
model.bom.Bom.has_vulnerabilities()
model.bom.Bom.urn()
Refactored
The following symbols were moved.
The symbols are still import-able through their old location.
OLD -> NEW
builder.this.this_component() -> contrib.this.builders.this_component()
builder.this.this_tool() -> contrib.this.builders.this_tool()
exception.factory.* -> contrib.license.exceptions.*
factory.license.LicenseFactory -> contrib.license.factories.LicenseFactory
model.HashType.from_hashlib_alg() -> contrib.hash.factories.HashTypeFactory.from_hashlib_alg()
model.HashType.from_composite_str() -> contrib.hash.factories.HashTypeFactory.from_composite_str()
model.component.Component.for_file() -> contrib.component.builders.ComponentBuilder.make_for_file()
model.vulnerability.VulnerabilitySeverity.get_from_cvss_scores() -> contrib.vulnerability.cvss.vs_from_cvss_scores()
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.60 2025/11/02 19:52:12 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-11.6.0
d26 2
a27 2
# as of 11.6.0
# 40 failed, 6487 passed, 1387 warnings
@
1.60
log
@py-cyclonedx-python-lib: update to 11.5.0.
Features
Add support for DistributionConstraints in BOM metadata (#906, 70adb7c)
Add support for properties in external references (#907, 73e7c1a)
What's Changed
chore(deps): bump actions/upload-artifact from 4 to 5 by @@dependabot[bot] in #904
chore(deps): bump actions/download-artifact from 5 to 6 by @@dependabot[bot] in #905
feat: add support for DistributionConstraints in BOM metadata by @@Churro in #906
feat: add support for properties in external references by @@Churro in #907
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.59 2025/10/30 13:11:30 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-11.5.0
d26 2
a27 2
# as of 11.5.0
# 40 failed, 6487 passed, 632 warnings
@
1.59
log
@py-cyclonedx-python-lib: update to 11.4.0.
## v11.4.0 (2025-10-23)
### Features
- Add support for CycloneDX 1.7 (basics)
## v11.3.0 (2025-10-22)
### Bug Fixes
- Implement `__lt__` for models still missing it
### Features
- Deserialize single `ComponentEvidence.identity`
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.58 2025/10/19 18:45:05 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-11.4.0
d26 2
a27 2
# as of 11.4.0
# 40 failed, 6447 passed, 632 warnings
@
1.58
log
@py-cyclonedx-python-lib: update to 11.2.0.
Documentation
Add Changelog to project urls (d8a24b7)
Features
Support Python 3.14 (#897, 267672b)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.57 2025/09/22 20:31:05 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-11.2.0
d26 2
a27 2
# as of 11.2.0
# 30 failed, 5880 passed, 543 warnings
@
1.57
log
@py-cyclonedx-python-lib: fix PLIST for latest poetry-core and depend on it
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.56 2025/09/21 15:37:51 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-11.1.0
a4 1
PKGREVISION= 1
d26 1
a26 1
# as of 11.1.0
@
1.56
log
@py-cyclonedx-python-lib: update to 11.1.0.
## v11.1.0 (2025-09-09)
### Documentation
- Shorten lines
- Update CDX spec links
- Update linked CDX spec
- Update linked XML spec
### Features
- Add BomRefs for known models according to CycloneDX 1.5
- Updating SPDX license list to 3.27.0
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.55 2025/07/27 09:23:52 wiz Exp $
d5 1
d14 1
a14 1
TOOL_DEPENDS+= ${PYPKGPREFIX}-poetry-core>=1.0.0:../../devel/py-poetry-core
@
1.55
log
@py-cyclonedx-python-lib: update to 11.0.0.
## v11.0.0 (2025-07-21)
### Features
- Ignore unknown properties when deserializing
## v10.5.0 (2025-07-20)
### Features
- Use only nonGPL dependencies
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.54 2025/07/14 10:57:29 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-11.0.0
d26 2
a27 2
# as of 11.0.0
# 30 failed, 5796 passed, 543 warnings
@
1.54
log
@py-cyclonedx-python-lib: fix path to py-typing-extensions
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.53 2025/07/13 10:27:45 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-10.4.1
d26 2
a27 2
# as of 10.4.1
# 30 failed, 5794 passed, 543 warnings
@
1.53
log
@py-cyclonedx-python-lib: update to 10.4.1.
## v10.4.1 (2025-07-08)
### Bug Fixes
- Add runtime dependnecy `typing_extensions>=4.6; python_version<"3.13"`
- Added runtime dependnecy `referencing>=0.28.4"`
## v10.4.0 (2025-07-08)
### Bug Fixes
- Issue `DeprecationWarnings` for deprecated properties properly
- Removed meaningless pattern checks for CycloneDX 1.2 JSON schema
### Features
- Decorate deprecated symbols
- Validators return specific error classes
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.52 2025/07/06 08:43:39 wiz Exp $
d30 1
d32 1
a32 1
DEPENDS+= ${PYPKGPREFIX}-typing_extensions>=4.6:../../devel/py-typing_extensions
@
1.52
log
@py-cyclonedx-python-lib: update to 10.3.0.
## v10.3.0 (2025-06-30)
### Documentation
- Instructions for code style
([`160810f`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/160810f077c211ee5cf59a5ca9e9c27fb3d5818c))
### Features
- Schema based validation may return iterable of all errors
([#834](https://github.com/CycloneDX/cyclonedx-python-lib/pull/834),
[`f95576f`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/f95576fb583480372e65903894f766ae542e4951))
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.51 2025/07/01 19:34:11 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-10.3.0
d16 1
d26 7
a32 2
# as of 10.3.0
# 30 failed, 5794 passed, 529 warnings
@
1.51
log
@py-cyclonedx-python-lib: update to 10.2.0.
## v10.2.0 (2025-06-10)
### Bug Fixes
- `vulnerabilityscoresource.get_from_vector()` for `CVSS_V3_1` and `CVSS_V4`
### Features
- Add support for component's evidences according to spec
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.50 2025/06/10 05:12:27 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-10.2.0
d25 2
a26 2
# as of 10.2.0
# 20 failed, 5448 passed, 529 warnings
@
1.50
log
@py-cyclonedx-python-lib: update to 10.1.0.
## v10.1.0 (2025-06-05)
### Features
- Pulled SPDX license IDs v1.0-3.26.0
## v10.0.2 (2025-06-02)
### Bug Fixes
- `model.bommetadata.component` setter typehint
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.49 2025/05/11 10:25:33 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-10.1.0
d25 2
a26 2
# as of 10.1.0
# 20 failed, 5412 passed, 511 warnings
@
1.49
log
@py-cyclonedx-python-lib: update to 10.0.1.
## v10.0.1 (2025-05-10)
### Bug Fixes
- Add missing comparator for VulnerabilityAnalysis
When trying to generate a CycloneDX BOM that has two vulnerabilities that only differ in their
analysis, you get ``` TypeError: '<' not supported between instances of 'VulnerabilityAnalysis'
and 'VulnerabilityAnalysis' ```
This PR adds the `__lt__` method for the VulnerabilityAnalysis model to fix sorting and also
includes a test case to verify the fix.
### Documentation
- **fix**: Mdformat
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.48 2025/04/28 10:41:12 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-10.0.1
d25 2
a26 2
# as of 10.0.1
# 20 failed, 5300 passed, 511 warnings
@
1.48
log
@py-cyclonedx-python-lib: update to 10.0.0.
## v10.0.0 (2025-04-23)
### Features
- Drop support for Python <3.9
Python 3.8 is end-of-life.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.47 2025/03/02 20:21:10 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-10.0.0
d25 2
a26 2
# as of 10.0.0
# 20 failed, 5299 passed, 511 warnings
@
1.47
log
@py-cyclonedx-python-lib: update to 9.1.0.
9.1.0
What's Changed
feat: VulnerabilityAnalysis properties for issued/updated datetime by @@indiVar0508 in #794
fix: improved comparison functionality of model.VulnerabilityAnalysis by @@jkowalleck in #795
## v9.0.0 (2025-02-26)
### Breaking
* feat!: 9.0.1 (#777)
### BREAKING Changes
* Fix: `model.vulnerability.VulnerabilityReference`'s properties are all
mandatory ([#790] via [#792]
* Refactor: Rename `spdx.is_compund_expression` -> `spdx.is_expression`
([#779]
* Behavior: `BomRef` affects comparison/hashing ([#754] [#780]
This is only a breaking change if you relied on ordering of elements.
* Behavior: streamline comparison/hashing functions ([#755]
This is only a breaking change if you relied on ordering of elements.
* Dependency: bump dependency `py-serializable >=2 <3`, was `>=1.1.1 <2` ([#775]
This is only a breaking change if you have other packages depend on that
specific version.
## v8.9.0 (2025-02-25)
### Documentation
* docs: extended instructions for "contributing" (#783)
supersedes
https://github.com/CycloneDX/cyclonedx-python-lib/pull/773/files#r1954324461
### Feature
* feat: avoid raising `NoPropertiesProvidedException` for optional parameters (#786)
the following classes' init no longer raise `NoPropertiesProvidedException`:
* `cyclonedx.model.IdentifiableAction`
* `cyclonedx.model.component.Commit`
* `cyclonedx.model.component.ComponentEvidence`
* `cyclonedx.model.component.Diff`
* `cyclonedx.model.component.Pedigree`
* `cyclonedx.model.issue.IssueTypeSource`
* `cyclonedx.model.vulnerability.VulnerabilityAnalysis`
* `cyclonedx.model.vulnerability.VulnerabilityCredits`
* `cyclonedx.model.vulnerability.VulnerabilityRating`
* `cyclonedx.model.vulnerability.VulnerabilitySource`
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.46 2025/02/18 10:43:48 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-9.1.0
d25 1
a25 1
# as of 9.1.0
@
1.46
log
@py-cyclonedx-python-lib: adapt for py-serializable 2 and depend on it
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.45 2025/02/13 10:58:53 adam Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-8.8.0
a4 1
PKGREVISION= 1
d25 2
a26 26
SUBST_CLASSES+= s2
SUBST_SED.s2+= -e "s,import serializable,import py_serializable as serializable,"
SUBST_SED.s2+= -e "s,from serializable,from py_serializable,"
SUBST_FILES.s2+= cyclonedx/model/__init__.py
SUBST_FILES.s2+= cyclonedx/model/bom.py
SUBST_FILES.s2+= cyclonedx/model/bom_ref.py
SUBST_FILES.s2+= cyclonedx/model/component.py
SUBST_FILES.s2+= cyclonedx/model/contact.py
SUBST_FILES.s2+= cyclonedx/model/crypto.py
SUBST_FILES.s2+= cyclonedx/model/definition.py
SUBST_FILES.s2+= cyclonedx/model/dependency.py
SUBST_FILES.s2+= cyclonedx/model/impact_analysis.py
SUBST_FILES.s2+= cyclonedx/model/issue.py
SUBST_FILES.s2+= cyclonedx/model/license.py
SUBST_FILES.s2+= cyclonedx/model/lifecycle.py
SUBST_FILES.s2+= cyclonedx/model/release_note.py
SUBST_FILES.s2+= cyclonedx/model/service.py
SUBST_FILES.s2+= cyclonedx/model/tool.py
SUBST_FILES.s2+= cyclonedx/model/vulnerability.py
SUBST_FILES.s2+= cyclonedx/schema/schema.py
SUBST_FILES.s2+= cyclonedx/serialization/__init__.py
SUBST_MESSAGE.s2= Adapting for serializable 2.x
SUBST_STAGE.s2= pre-configure
# as of 8.8.0nb1
# 20 failed, 5223 passed, 510 warnings
@
1.45
log
@py-cyclonedx-python-lib: updated to 8.8.0
v8.8.0 (2025-02-12)
Feature
feat: add cyclonedx.model.crypto.ProtocolProperties.crypto_refs
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.44 2025/02/09 14:28:49 wiz Exp $
d5 1
d17 1
a17 1
DEPENDS+= ${PYPKGPREFIX}-serializable>=1.1.1:../../devel/py-serializable
d26 25
a50 1
# as of 8.7.0
@
1.44
log
@py-cyclonedx-python-lib: update to 8.7.0.
8.7.0
Feature
feat: allow empty OrganizationalContact object (#772)
What's Changed
feat: allow empty OrganizationalContact object by @@Churro in #772
8.6.0
Feature
feat: expand the capabilities of models.definition.Standard (#713)
feat: allow empty OrganizationalEntity object (#768)
What's Changed
feat: allow empty OrganizationalEntity object by @@Churro in #768
chore: tools shebang by @@jkowalleck in #770
feat: add extended support for Definitions by @@hakandilek in #713
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.43 2025/02/02 15:57:00 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-8.7.0
d16 1
a16 1
DEPENDS+= ${PYPKGPREFIX}-serializable>=1.1:../../devel/py-serializable
@
1.43
log
@py-cyclonedx-python-lib: update to 8.5.1.
Documentation
docs: responsibilities & capabilities (#763)
docs: Fix typos in conda-forge.md and remove unused reference in README (#762)
docs: modernize docstrings for CDX1.6 (#759)
Feature
feat: couple classes and their serializes (#757)
Deprecates .serialization.BomRefHelper and .serialization.LicenseRepositoryHelper.
(stealth-release of this feature, as it is almost only used internally)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.42 2024/11/24 10:22:16 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-8.5.1
d25 2
a26 2
# as of 8.5.1
# 20 failed, 5188 passed, 509 warnings
@
1.42
log
@py-cyclonedx-python-lib: update to 8.5.0.
Documentation
docs: remove invalid docsting note about auto-assigned bom-ref values (#733) (5aa5787)
Feature
feat: support CycloneDX 1.6.1 (#742)
What's Changed
docs: remove invalid docsting note about auto-assigned bom-ref values by @@jkowalleck in #733
chore(deps-dev): update flake8-bugbear requirement from 24.8.19 to 24.10.31 by @@dependabot in #734
chore(deps-dev): update tomli requirement from 2.0.2 to 2.1.0 by @@dependabot in #739
feat: support CycloneDX 1.6.1 by @@jkowalleck in #742
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.41 2024/10/30 14:35:34 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-8.5.0
d25 1
a25 1
# as of 8.5.0
@
1.41
log
@py-cyclonedx-python-lib: update to 8.4.0.
8.4.0
Feature
feat: add factory method XsUri.make_bom_link() (#728)
Fix
fix: no warning for missing dependencies if no component exists (#720)
Docs
docs: fix Definitions docstring (#731)
## v8.3.0 (2024-10-26)
### Documentation
* docs: revisit examples readme (#725)
### Feature
* feat: add basic support for Definitions (#701)
## v8.2.1 (2024-10-24)
### Fix
* fix: encode quotation mark in URL (#724)
## v8.2.0 (2024-10-22)
### Feature
* feat: Add Python 3.13 support (#718)
## v8.1.0 (2024-10-21)
### Documentation
* docs: fix code examples regarding outputting (#709)
### Feature
* feat: add support for Lifecycles in BOM metadata (#698)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.40 2024/10/22 07:55:51 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-8.4.0
d25 2
a26 2
# as of 8.4.0
# 20 failed, 5185 passed, 509 warnings
@
1.40
log
@py-cyclonedx-python-lib: update to 8.0.0.
### Documentation
* docs(chaneglog): omit chore/ci/refactor/style/test/build (#703)
* docs: rephrase migration paths
### Unknown
* rework tools xml deserializer (#700)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.39 2024/10/12 08:55:12 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-8.0.0
d25 2
a26 2
# as of 8.0.0
# 20 failed, 5110 passed, 582 warnings
@
1.39
log
@py-cyclonedx-python-lib: update to 7.6.2.
chore: trusted publishing (#695)
docs: fix some doc strings
fix: behavior of and typing for crypto setters with optional values (#694)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.38 2024/09/22 15:45:02 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-7.6.2
d25 2
a26 2
# as of 7.6.2
# 20 failed, 5015 passed, 542 warnings
@
1.38
log
@py-cyclonedx-python-lib: update to 7.6.1.
Fix
fix: file copyright headers (#676)
utilizes flake8 plugin
to assert the
correct headers
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.37 2024/08/19 21:22:06 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-7.6.1
d25 2
a26 2
# as of 7.6.1
# 20 failed, 5012 passed, 542 warnings
@
1.37
log
@py-cyclonedx-python-lib: update to 7.6.0.
feat: HashType.from_composite_str for Blake2b, SHA3, Blake3 (#663)
The code mistreated hashes for Blake2b and SHA3.
Code for explicitly handling SHA1 & BLAKE3 was added, as those have no
variants defined in the CycloneDX specification.
fixes #652
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.36 2024/07/14 13:41:49 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-7.6.0
d25 1
a25 3
PYTHON_VERSIONS_INCOMPATIBLE= 27
# as of 7.6.0
@
1.36
log
@py-cyclonedx-python-lib: update to 7.5.1.
fix: XML serialize normalizedString and token properly (#646)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.35 2024/07/07 14:39:09 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-7.5.1
d27 2
a28 1
# 20 failed, 5008 passed, 542 warnings
@
1.35
log
@py-cyclonedx-python-lib: update to 7.5.0.
v7.5.0 (2024-07-04)
feat: add workaround property for v1.5 and v1.6 (#642)
style: model args - one per line (#643)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.34 2024/06/17 09:35:33 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-7.5.0
d16 1
a16 1
DEPENDS+= ${PYPKGPREFIX}-serializable>=0.16:../../devel/py-serializable
@
1.34
log
@py-cyclonedx-python-lib: update to 7.4.1.
v7.4.1 (2024-06-12)
Chore
chore: rollback py sem release matcher
Documentation
docs: exclude dep bumps from changelog (#627)
Fix
fix: cyclonedx.model.Property.value value is optional (#631)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.33 2024/06/08 11:57:31 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-7.4.1
@
1.33
log
@py-cyclonedx-python-lib: update to 7.4.0.
docs: OSSP best practice percentage
feat: updated SPDX license list to v3.24.0 (#622)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.32 2024/05/12 10:40:06 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-7.4.0
d27 2
@
1.32
log
@py-cyclonedx-python-lib: update to 7.3.4.
Bugfixes.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.31 2024/04/28 09:54:08 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-7.3.4
@
1.31
log
@py-cyclonedx-python-lib: update to 7.3.2.
7.3.2
* fix: properly sort components based on all properties (#599)
reverts #587 - as this one introduced errors fixes #598 fixes #586
7.3.1
* chore: semantic-release git commit/sign valid email address
* fix: include all fields of `Component` in `__lt__` function for #586 (#587)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.30 2024/04/21 15:35:36 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-7.3.2
@
1.30
log
@py-cyclonedx-python-lib: update to 7.3.0.
7.3.0
Feature
feat: license factory set acknowledgement (#593)
add a parameter to LicenseFactory.make_*() methods, to set the LicenseAcknowledgement.
## v7.2.0 (2024-04-19)
### Feature
* feat: disjunctive license acknowledgement (#591)
---------
Signed-off-by: Jan Kowalleck <jan.kowalleck@@gmail.com> ([`9bf1839`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/9bf1839859a244e790e91c3e1edd82d333598d60))
### Unknown
* tests: add meaningful names to validation tests (#588)
When packaging cyclonedx-python-lib for a Linux distribution, it’s
pretty common that some JSON validation tests fail. [1]
Due to the large number of combinations and the fact that these tests
are consecutively numbered, it has been tedious to figure out which
tests are exactly failing and why. This in turn makes it difficult to
decide which tests to disable or report upstream.
Append meaningful names to validation tests so that instead of e.g.:
[…]::TestJsonValidator::test_validate_no_none_001
[…]::TestJsonValidator::test_validate_no_none_002
[…]::TestJsonValidator::test_validate_no_none_003
[…]::TestJsonValidator::test_validate_no_none_004
[…]::TestJsonValidator::test_validate_no_none_005
[…]::TestJsonValidator::test_validate_no_none_006
[…]::TestJsonValidator::test_validate_no_none_007
[…]::TestJsonValidator::test_validate_no_none_008
the tests are named:
[…]::TestJsonValidator::test_validate_no_none_001_valid_component_swid_1_6
[…]::TestJsonValidator::test_validate_no_none_002_valid_machine_learning_considerations_env_1_6
[…]::TestJsonValidator::test_validate_no_none_003_valid_metadata_tool_1_6
[…]::TestJsonValidator::test_validate_no_none_004_valid_patch_1_6
[…]::TestJsonValidator::test_validate_no_none_005_valid_empty_components_1_6
[…]::TestJsonValidator::test_validate_no_none_006_valid_properties_1_6
[…]::TestJsonValidator::test_validate_no_none_007_valid_service_1_6
[…]::TestJsonValidator::test_validate_no_none_008_valid_metadata_author_1_6
[1]: https://aur.archlinux.org/cgit/aur.git/diff/PKGBUILD?h=python-cyclonedx-lib&id=9c6ae556874a633a521407a77a9a85bb31da2047
* doc: poor merge resolved
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.29 2024/04/18 08:55:26 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-7.3.0
@
1.29
log
@py-cyclonedx-python-lib: update to 7.1.0.
7.1.0
Documentation
docs: missing schema support table & update schema support to reflect version 7.0.0 (#584)
Feature
feat: support bom.properties for CycloneDX v1.5+ (#585)
7.0.0
Breaking
feat!: Support for CycloneDX v1.6
added draft v1.6 schemas and boilerplate for v1.6
re-generated test snapshots for v1.6
note bom.metadata.manufacture as deprecated
work on bom.metadata for v1.6
Deprecated .component.author. Added .component.authors and .component.manufacturer
work to add .component.omniborid - but tests deserialisation tests fail due to schema differences (.component.author not in 1.6)
work to get deserialization tests passing
chore(deps): bump py-serializable to >=1.0.3 to resolve issues with deserialization to XML
imports tidied
properly added .component.swhid
add .component.cryptoProperties - with test failures for SchemaVersion < 1.6
typing and bandit ignores
coding standards
test filtering
coding standards
additional tests to increase code coverage
corrected CryptoMode enum
coding standards
Added address to organizationalEntity
Added address to organizationalEntity
raise UserWarning in .component.version has length > 1024
coding standards and typing
add acknowledgement to LicenseExpression (#582)
more proper way to filter test cases
update schema to published versions
fetch schema 1.6 JSON
fetch test data for CDX 1.6
reformat
reformat
refactor
style
refactor
docs
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.28 2024/03/24 13:04:17 adam Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-7.1.0
@
1.28
log
@py-cyclonedx-python-lib: updated to 6.4.4
6.4.4
fix: wrong extra name for xml validation
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.27 2024/03/04 18:49:17 adam Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-6.4.4
@
1.27
log
@py-cyclonedx-python-lib: updated to 6.4.3
v6.4.3
fix: serialization of model.component.Diff
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.26 2024/03/03 11:40:53 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-6.4.3
d18 1
a18 1
TEST_DEPENDS+= ${PYPKGPREFIX}-ddt>=1.7.1:../../devel/py-ddt
d23 2
@
1.26
log
@py-cyclonedx-python-lib: update to 6.4.2.
Maintenance release.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.25 2024/02/05 10:53:31 adam Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-6.4.2
@
1.25
log
@py-cyclonedx-python-lib: updated to 6.4.1
v6.4.1
chore(deps-dev): update bandit requirement from 1.7.6 to 1.7.7
chore(deps-dev): update coverage requirement from 7.4.0 to 7.4.1
docs: ship docs with sdist build
docs: refactor example
fix: model.BomRef no longer equal to unset peers
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.24 2024/01/28 13:19:59 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-6.4.1
a24 6
# https://github.com/CycloneDX/cyclonedx-python-lib/issues/435
post-install:
${RM} ${DESTDIR}${PREFIX}/${PYSITELIB}/LICENSE
${RM} ${DESTDIR}${PREFIX}/${PYSITELIB}/NOTICE
${RM} ${DESTDIR}${PREFIX}/${PYSITELIB}/README.md
@
1.24
log
@py-cyclonedx-python-lib: update to 6.4.0.
Chore
chore(deps-dev): update tox requirement from 4.12.0 to 4.12.1 (#533)
Updates the requirements on tox to permit the latest version.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.23 2024/01/07 16:15:01 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-6.4.0
d13 4
a16 3
TOOL_DEPENDS+= ${PYPKGPREFIX}-poetry-core>=0:../../devel/py-poetry-core
DEPENDS+= ${PYPKGPREFIX}-packageurl>=0.9:../../devel/py-packageurl
DEPENDS+= ${PYPKGPREFIX}-serializable>=0.11.1:../../devel/py-serializable
d18 4
a21 5
DEPENDS+= ${PYPKGPREFIX}-license-expression>=0:../../devel/py-license-expression
TEST_DEPENDS+= ${PYPKGPREFIX}-ddt>=1.6.0:../../devel/py-ddt
TEST_DEPENDS+= ${PYPKGPREFIX}-jsonschema-[0-9]*:../../textproc/py-jsonschema
TEST_DEPENDS+= ${PYPKGPREFIX}-lxml-[0-9]*:../../textproc/py-lxml
TEST_DEPENDS+= ${PYPKGPREFIX}-xmldiff-[0-9]*:../../textproc/py-xmldiff
@
1.23
log
@py-cyclonedx-python-lib: update to 6.3.0.
6.3.0
What's Changed
chore(deps-dev): update ddt requirement from 1.7.0 to 1.7.1 by @@dependabot in #527
chore(deps-dev): update flake8 requirement from 6.1.0 to 7.0.0 by @@dependabot in #528
feat: enable dependency py-serializable 0.17 by @@jkowalleck in #529
6.2.0
What's Changed
chore(deps-dev): update mypy requirement from 1.7.1 to 1.8.0 by @@dependabot in #521
chore(deps-dev): update coverage requirement from 7.3.3 to 7.4.0 by @@dependabot in #524
chore(deps): update lxml requirement from ^4 to >=4,<6 by @@dependabot in #523
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.22 2023/12/30 10:26:19 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-6.3.0
@
1.22
log
@py-cyclonedx-python-lib: update to 6.1.0.
Chore
chore: update maintainers
Signed-off-by: Jan Kowalleck (87c72d7)
chore(deps): bump python-semantic-release/python-semantic-release (#515)
Bumps python-semantic-release/python-semantic-release from 8.5.0 to 8.5.1.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.21 2023/12/17 22:22:06 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-6.1.0
@
1.21
log
@py-cyclonedx-python-lib: update to 6.0.0.
v6.0.0 (2023-12-10)
Breaking
feat!: v6.0.0 (#492)
Breaking Changes
Removed symbols that were already marked as deprecated (via #493)
Removed symbols in parser.* (#489 via #495)
Removed output.LATEST_SUPPORTED_SCHEMA_VERSION (#491 via #494)
Serialization of unsupported enum values might downgrade/migrate/omit them (#490 via #496)
Handling might raise warnings if a data loss occurred due to omitting.
The result is a guaranteed valid XML/JSON, since no (enum-)invalid values are rendered.
Serialization of any model.component.Component with unsupported type raises exception.serialization.SerializationOfUnsupportedComponentTypeException (#490 via #496)
Object model.bom_ref.BomRef's property value defaults to Null, was arbitrary UUID (#504 via #505)
This change does not affect serialization. All bom-refs are guaranteed to have unique values on rendering.
Removed helpers from public API (#503 via #506)
Added
Basic support for CycloneDX 1.5 (#404 via #488) -- Thanks to @@Churro
No data models were enhanced nor added, yet.
Pull requests to add functionality are welcome.
Existing enumerable got new cases, to reflect features of CycloneDX 1.5 (#404 via #488)
Outputters were enabled to render CycloneDX 1.5 (#404 via #488)
Tests
Created (regression/unit/integration/functional) tests for CycloneDX 1.5 (#404 via #488)
Created (regression/functional) tests for Enums' handling and completeness (#490 via #496)
Misc
Bumped dependency py-serializable@@^0.16, was @@^0.15 (via #496)
API Changes — the details for migration
Added new sub-package exception.serialization (via #496)
Removed class models.ComparableTuple (#503 via #506)
Enum model.ExternalReferenceType got new cases, to reflect features for CycloneDX 1.5 (#404 via #488)
Removed function models.get_now_utc (#503 via #506)
Removed function models.sha1sum (#503 via #506)
Enum model.component.ComponentType got new cases, to reflect features for CycloneDX 1.5 (#404 via #488)
Removed model.component.Component.__init__()'s deprecated optional kwarg namespace (via #493)
Use kwarg group instead.
Removed model.component.Component.__init__()'s deprecated optional kwarg license_str (via #493)
Use kwarg licenses instead.
Removed deprecated method model.component.Component.get_namespace() (via #493)
Removed class models.dependency.DependencyDependencies (#503 via #506)
Removed model.vulnerability.Vulnerability.__init__()'s deprecated optional kwarg source_name (via #493)
Use kwarg source instead.
Removed model.vulnerability.Vulnerability.__init__()'s deprecated optional kwarg source_url (via #493)
Use kwarg source instead.
Removed model.vulnerability.Vulnerability.__init__()'s deprecated optional kwarg recommendations (via #493)
Use kwarg recommendation instead.
Removed model.vulnerability.VulnerabilityRating.__init__()'s deprecated optional kwarg score_base (via #493)
Use kwarg score instead.
Enum model.vulnerability.VulnerabilityScoreSource got new cases, to reflect features for CycloneDX 1.5 (#404 via #488)
Removed output.LATEST_SUPPORTED_SCHEMA_VERSION (#491 via #494)
Removed deprecated function output.get_instance() (via #493)
Use function output.make_outputter() instead.
Added new class output.json.JsonV1Dot5, to reflect CycloneDX 1.5 (#404 via #488)
Added new item to dict output.json.BY_SCHEMA_VERSION, to reflect CycloneDX 1.5 (#404 via #488)
Added new class output.xml.XmlV1Dot5, to reflect CycloneDX 1.5 (#404 via #488)
Added new item to dict output.xml.BY_SCHEMA_VERSION, to reflect CycloneDX 1.5 (#404 via #488)
Removed class parser.ParserWarning (#489 via #495)
Removed class parser.BaseParser (#489 via #495)
Enum schema.SchemaVersion got new case V1_5, to reflect CycloneDX 1.5 (#404 via #488)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.20 2023/12/07 08:33:39 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-6.0.0
@
1.20
log
@py-cyclonedx-python-lib: update to 5.2.0.
Breaking Changes
Object model.bom_ref.BomRef's property value defaults to Null, was arbitrary UUID (#504 via #505)
This change does not affect serialization. All bom-refs are guaranteed to have unique values on rendering.
Removed helpers from public API (#503 via #506)
see the details here: #492
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.19 2023/11/07 23:00:54 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-5.2.0
@
1.19
log
@py-cyclonedx-python-lib: annotate workaround
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.18 2023/11/07 22:58:58 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-5.1.1
@
1.18
log
@py-cyclonedx-python-lib: update to 5.1.1.
5.1.1
Bugfix release
5.1.0
Documentation
docs: advance license docs (f61a730)
Feature
feat: guarantee unique BomRefs in serialization result (#479) (a648775)
Incorporate output.BomRefDiscriminator on serialization
5.0.1
What's Changed
docs: fix RTFD build by @@jkowalleck in #476
docs: revisit project meta by @@jkowalleck in #475
chore: make pyproject parsable by dependabot by @@jkowalleck in #477
chore(deps): bump python-semantic-release/python-semantic-release from 8.0.8 to 8.3.0 by @@dependabot in #474
5.0.0
BREAKING CHANGES
Dropped support for python<3.8 (#436 via #441; enable #433)
Reworked license related models, collections, and factories (#365 via #466)
Behavior
Method model.bom.Bom.validate() will throw exception.LicenseExpressionAlongWithOthersException, if detecting invalid license constellation (#453 via #452)
Fixed tuple comparison when unequal lengths (via #461)
API
Enum schema.SchemaVersion is no longer string-like (#442 via #447)
Enum schema.OutputVersion is no longer string-like (#442 via #447)
Abstract class output.BaseOutput requires implementation of new method output_format (#446 via #447)
Abstract method output.BaseOutput.output_as_string() got new optional parameter indent (#437 via #458)
Abstract method output.BaseOutput.output_as_string() accepts arbitrary kwargs (via #458, #462)
Removed class factory.license.LicenseChoiceFactory (via #466)
The old functionality was integrated into factory.license.LicenseFactory.
Method factory.license.LicenseFactory.make_from_string()'s parameter name_or_spdx was renamed to value (via #466)
Method factory.license.LicenseFactory.make_from_string()'s return value can also be a LicenseExpression (#365 via #466)
The behavior imitates the old factory.license.LicenseChoiceFactory.make_from_string()
Renamed class module.License to module.license.DisjunctliveLicense (#365 via #466)
Removed class module.LicenseChoice (#365 via #466)
Use dedicated classes module.license.DisjunctliveLicense and module.license.LicenseExpression instead
All occurrences of models.LicenseChoice were replaced by models.licenses.License (#365 via #466)
All occurrences of SortedSet[LicenseChoice] were specialized to models.license.LicenseRepository (#365 via #466)
Fixed
Serialization of multy-licenses (#365 via #466)
Detect unused "dependent" components in model.bom.validate() (via #464)
Changed
Updated latest supported list of supported SPDX license identifiers (via #433)
Shipped schema files are moved to a protected space (via #433)
These files were never intended for public use.
XML output uses a default namespace, which makes results smaller. (#438 via #458)
Added
Support for Python 3.12 (via #460)
JSON- & XML-Validators (#432, #446 via #433, #448)
The functionality might require additional dependencies, that can be installed with the extra "validation".
See the docs in section "Installation" for details.
JSON & XML can be generated in a more human-friendly form (#437, #438 via #458)
Type hints, typings & overloads for better integration downstream (via #463)
API
New function output.make_outputter() (via #469)
This replaces the deprecated function output.get_instance().
New sub-package validation (#432, #446 via #433, #448, #469, #468, #469)
New class exception.MissingOptionalDependencyException (#432 via #433)
New class exception.LicenseExpressionAlongWithOthersException (#453 via #452)
New dictionaries output.{json,xml}.BY_SCHEMA_VERSION (#446 via #447)
Existing implementations of class output.BaseOutput now have a new method output_format (#446 via #447)
Existing implementations of method output.BaseOutput.output_as_string() got new optional parameter indent (#437 via #458)
Existing implementations of method output.BaseOutput.output_to_file() got new optional parameter indent (#437 via #458)
New method factory.license.LicenseFactory.make_with_expression() (via #466)
New class model.license.DisjunctiveLicense (#365 via #466)
New class model.license.LicenseExpression (#365 via #466)
New class model.license.LicenseRepository (#365 via #466)
New class serialization.LicenseRepositoryHelper (#365 via #466)
Deprecated
Function output.get_instance() might be removed, use output.make_outputter() instead (via #469)
Tests
Added validation tests with official CycloneDX schema test data (#432 via #433)
Use proper snapshots, instead of pseudo comparison (#437 via #464)
Added regression test for bug #365 (via #466, #467)
Misc
Dependencies: bumped py-serializable@@^0.15.0, was @@^0.11.1 (via #458, #463, #464, #466)
Style: streamlined quotes and strings (via #472)
Chore: bumped internal dev- and QA-tools (#436 via #441, #472)
Chore: added more QA tools to prevent common security issues (via #473)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.17 2023/10/28 19:57:14 wiz Exp $
d25 1
@
1.17
log
@python/wheel.mk: simplify a lot, and switch to 'installer' for installation
This follows the recommended bootstrap method (flit_core, build, installer).
However, installer installs different files than pip, so update PLISTs
for all packages using wheel.mk and bump their PKGREVISIONs.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.16 2023/09/09 20:56:01 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-4.1.0
a4 1
PKGREVISION= 1
d17 2
a18 1
TEST_DEPENDS+= ${PYPKGPREFIX}-ddt-[0-9]*:../../devel/py-ddt
a20 1
TEST_DEPENDS+= ${PYPKGPREFIX}-test-[0-9]*:../../devel/py-test
d25 4
a28 2
do-test:
cd ${WRKSRC} && ${SETENV} ${TEST_ENV} pytest-${PYVERSSUFFIX}
@
1.16
log
@py-cyclonedx-python-lib: update to 4.1.0.
feat: programmatic access to library's version (#417)
and lots of dependency updates
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.15 2023/07/30 15:32:49 adam Exp $
d5 1
@
1.15
log
@Remove dependencies for Python 3.7
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.14 2023/07/05 22:19:46 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-4.0.1
@
1.14
log
@py-cyclonedx-python-lib: update to 4.0.1.
Fix
Conditional warning if no root dependencies were found (#398) (c8175bb)
Documentation
examples: README (#399) (1d262ba)
Add exaple how to build and serialize (#397) (65e22bd)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.13 2023/05/04 11:38:14 wiz Exp $
a27 6
.include "../../lang/python/pyversion.mk"
.if ${PYTHON_VERSION} < 308
DEPENDS+= ${PYPKGPREFIX}-importlib-metadata>=3.4:../../devel/py-importlib-metadata
.endif
@
1.13
log
@py-cyclonedx-python-lib: update to 4.0.0.
Feature
Release 4.0.0 #341) (8fb1b14)
Breaking
Large portions of this library have been re-written for this release and many methods and contracts have changed. (8fb1b14)
Model classes changed to relocated Vulnerability at Bom, not at Component (8fb1b14)
Model classes changed to relocated Vulnerability at Bom, not at Component (8fb1b14)
(8fb1b14)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.12 2023/03/29 09:04:02 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx_python_lib-4.0.0
@
1.12
log
@*: use PYTHON_VERSION instead of comparing PYPKGPREFIX
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.11 2022/09/18 11:53:56 wiz Exp $
d3 2
a4 2
DISTNAME= cyclonedx-python-lib-3.1.0
PKGNAME= ${PYPKGPREFIX}-${DISTNAME}
d13 1
d15 1
a15 1
DEPENDS+= ${PYPKGPREFIX}-setuptools>=47.0.0:../../devel/py-setuptools
d17 3
a19 1
DEPENDS+= ${PYPKGPREFIX}-toml>=0.10.0:../../textproc/py-toml
d21 1
d25 3
d30 1
a30 1
.if ${PYTHON_VERSION} == 307
d34 1
a34 1
.include "../../lang/python/egg.mk"
@
1.11
log
@py-cyclonedx-python-lib: update to 3.1.0.
v3.1.0
Feature
Out-factor SPDX compound detection (fd4d537, 2b69925)
License factories (033bad2)
Note: There was no 3.0.0 release officially, but due to CI publishing
issues, an unexpected 3.0.0 release was publiched to PyPi and
subsequently yanked from PyPi. There are NO breaking changes between
2.7.1 and 3.1.0.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.10 2022/08/07 07:54:58 wiz Exp $
d23 1
a23 1
.if ${PYPKGPREFIX} == "py37"
@
1.10
log
@py-cyclonedx-python-lib: update to 2.7.1.
What's Changed
chore(deps-dev): bump flake8-isort from 4.1.1 to 4.1.2.post0 by @@dependabot in #280
fix: BOM validation fails when Components or Services are nested by @@madpah in #276
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.9 2022/07/24 10:55:02 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx-python-lib-2.7.1
@
1.9
log
@py-cyclonedx-python-lib: update to 2.7.0.
What's Changed
feature: support for CycloneDX schema 1.4.2 - adds
vulnerability.properties to the schema by @@madpah in #273
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.8 2022/07/03 10:38:09 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx-python-lib-2.7.0
@
1.8
log
@py-cyclonedx-python-lib: update to 2.6.0.
2.6.0
Reduce unnessessarry type casting of set/SortedSet (#203)
2.5.1
Add expected lower-than comparators for OrganizationalEntity
and VulnerabilityCredits (#248)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.7 2022/06/13 09:59:01 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx-python-lib-2.6.0
@
1.7
log
@py-cyclonedx-python-lib: update to 2.5.1.
2.5.1
Fix
Add missing Vulnerability comparator for sorting (#246) (c3f3d0d)
2.5.0
Feature
Use SortedSet in model to improve reproducibility - this will provide predictable ordering of various items in generated CycloneDX documents - thanks to @@RodneyRichardson (8a1c404)
Documentation
Fix typo "This is out" -> "This is our" (ef0278a)
2.4.0
Feature
deps: Remove unused typing-extensions constraints (2ce358a)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.6 2022/04/20 21:29:08 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx-python-lib-2.5.1
@
1.6
log
@py-cyclonedx-python-lib: update to 2.3.0.
2.3.0
Feature
Add support for Dependency Graph in Model and output serialisation (ea34513)
2.2.0
Feature
Bump XML schemas to latest fix version for 1.2-1.4 - see: (bd2e756)
Bump JSON schemas to latest fix verison for 1.2 and 1.3 - see: (bd6a088)
2.1.1
Fix
Prevent error if version not set (b9a84b5)
version being optional in JSON output can raise error (ba0c82f)
2.1.0
Feature
Output errors are verbose (bfe8fb1)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.5 2022/03/08 09:08:29 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx-python-lib-2.3.0
d15 1
a16 2
DEPENDS+= ${PYPKGPREFIX}-types-setuptools>=57.0.0:../../devel/py-types-setuptools
DEPENDS+= ${PYPKGPREFIX}-types-toml>=0.10.0:../../devel/py-types-toml
a24 1
DEPENDS+= ${PYPKGPREFIX}-typing-extensions>=3.10:../../devel/py-typing-extensions
@
1.5
log
@py-cyclonedx-python-lib: update to 2.0.0.
Feature
Bump dependencies (da3f0ca)
Completed work on #155 (#172) (a926b34)
Support complete model for bom.metadata (#162) (2938a6c)
Support for bom.externalReferences in JSON and XML #124 (1b733d7)
Complete support for bom.components (#155) (32c0139)
Support services in XML BOMs (9edf6c9)
Fix
license_url not serialised in XML output #179 (#180) (f014d7c)
Component.bom_ref is not Optional in our model implementation (in the schema it is) - we generate a UUID if bom_ref is not supplied explicitly (5c954d1)
Temporary fix for __hash__ of Component with properties #153 (a51766d)
Further fix for #150 (1f55f3e)
Regression introduced by first fix for #150 (c09e396)
Components with no version (optional since 1.4) produce invalid BOM output in XML #150 (70d25c8)
expression not supported in Component Licsnes for version 1.0 (15b081b)
Breaking
Adopt PEP-3102 (da3f0ca)
Optional Lists are now non-optional Sets (da3f0ca)
Remove concept of DEFAULT schema version - replaced with LATEST schema version (da3f0ca)
Added BomRef data type (da3f0ca)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.4 2022/02/20 21:23:44 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx-python-lib-2.0.0
@
1.4
log
@py-cyclonedx-python-lib: update to 1.3.0.
1.3.0 (2022-01-24)
Feature
bom-ref for Component and Vulnerability default to a UUID (#142) (3953bb6)
1.2.0 (2022-01-24)
Feature
Add CPE to component (#138) (269ee15)
1.1.1 (2022-01-19)
Fix
Bump dependencies (#136) (18ec498)
1.1.0 (2022-01-13)
Feature
Add support for bom.metadata.component (#118) (1ac31f4)
1.0.0 (2022-01-13)
Support for CycloneDX schema version 1.4 (#108)
Breaking Changes
Support for CycloneDX 1.4. This includes:
Support for tools having externalReferences
Allowing version for a Component to be optional in 1.4
Support for releaseNotes per Component
Support for the core schema implementation of Vulnerabilities (VEX)
Features
$schema is now included in JSON BOMs
Concrete Parsers how now been moved into downstream projects to keep this libraries focus on modelling and outputting CycloneDX - see https://github.com/CycloneDX/cyclonedx-python
Fixes
Unit tests now include schema validation (we've left schema validation out of the core library due to dependency bloat)
Ensure schema is adhered to in 1.0
URIs are now used throughout the library through a new XsUri class to provide URI validation
Other
Documentation is now hosted on readthedocs.org (https://cyclonedx-python-library.readthedocs.io/)
Added reference to release of this library on Anaconda
0.12.3 (2021-12-15)
Fix
Removed requirements-parser as dependency (temp) as not available for Python 3 as Wheel (#98) (3677d9f)
0.12.2 (2021-12-09)
Fix
Tightened dependency packageurl-python (#95) (eb4ae5c)
0.12.1 (2021-12-09)
Fix
Further loosened dependency definitions (8bef6ec)
0.12.0 (2021-12-09)
Feature
Loosed dependency versions to make this library more consumable (55f10fb)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.3 2022/01/04 20:54:40 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx-python-lib-1.3.0
@
1.3
log
@*: bump PKGREVISION for egg.mk users
They now have a tool dependency on py-setuptools instead of a DEPENDS
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.2 2021/12/17 10:18:23 wiz Exp $
d3 1
a3 1
DISTNAME= cyclonedx-python-lib-0.11.1
a4 1
PKGREVISION= 1
d13 5
a17 6
DEPENDS+= ${PYPKGPREFIX}-packageurl-[0-9]*:../../devel/py-packageurl
DEPENDS+= ${PYPKGPREFIX}-requirements-parser-[0-9]*:../../devel/py-requirements-parser
DEPENDS+= ${PYPKGPREFIX}-setuptools-[0-9]*:../../devel/py-setuptools
DEPENDS+= ${PYPKGPREFIX}-toml-[0-9]*:../../textproc/py-toml
DEPENDS+= ${PYPKGPREFIX}-types-setuptools-[0-9]*:../../devel/py-types-setuptools
DEPENDS+= ${PYPKGPREFIX}-types-toml-[0-9]*:../../devel/py-types-toml
d22 7
@
1.2
log
@py-cyclonedx-*: mark as not for python 2.7
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.1 2021/12/07 18:05:29 wiz Exp $
d5 1
@
1.1
log
@security/py-cyclonedx-python-lib: import py-cyclonedx-python-lib-0.11.1
This CycloneDX module for Python can generate valid CycloneDX
bill-of-material document containing an aggregate of all project
dependencies.
This module is not designed for standalone use.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.14 2020/07/13 20:05:12 wiz Exp $
d21 2
@