Changelog

Fix: model.vulnerability.VulnerabilityReference‘s properties are all mandatory (#790 via #792)
Refactor: Rename spdx.is_compund_expression -> spdx.is_expression (#779)
Behavior: BomRef affects comparison/hashing (#754 & #780)
This is only a breaking change if you relied on ordering of elements.
Behavior: streamline comparison/hashing functions (#755) This is only a breaking change if you relied on ordering of elements.
Dependency: bump dependency py-serializable >=2 <3, was >=1.1.1 <2 (#775) This is only a breaking change if you have other packages depend on that specific version.

v8.9.0 (2025-02-25)

Documentation

Extended instructions for “contributing” (#783, ``e2a4ed3` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/e2a4ed3608253b65a0f902f225fe7b7dd29ab864>`_)

Features

Avoid raising NoPropertiesProvidedException for optional parameters (#786, ``845b8d5` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/845b8d538d2f0fcadb3a3257a066ad58e3640c97>`_)

v8.8.0 (2025-02-12)

Features

Add cyclonedx.model.crypto.ProtocolProperties.crypto_refs (#767, ``beb35f5` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/beb35f55e3e75d625db45e4ff084dee02e919ef6>`_)

v8.7.0 (2025-02-06)

Features

Allow empty OrganizationalContact object (#772, ``03b35f4` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/03b35f4293ab3b4c402c7bb8ff458831e492cb8b>`_)

v8.6.0 (2025-02-04)

Features

Allow empty OrganizationalEntity object (#768, ``472bded` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/472bded38cd480ba6885d44c798e015b63c89190>`_)
Expand the capabilities of models.definition.Standard (#713, ``901dcdc` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/901dcdc60a8a46d30878764d7b8bda69c6ba8b80>`_)

v8.5.1 (2025-01-28)

Documentation

Fix typos in in conda-forge.md and remove unused reference in README (#762, ``66ece7a` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/66ece7ae0042740a541ceed3048b89c4f2b24145>`_)
Modernize docstrings for CDX1.6 (#759, ``fb9a42e` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/fb9a42ef9bda6407ddf4c49e75d10aa0fc91e46d>`_)
Responsibilities & capabilities (#763, ``ab4ae45` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/ab4ae4578555f010914d7e904133dd478d7c80c1>`_)

Features

Couple classes and their serializes (#757, ``6003feb` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/6003febaa032969732ee246deb739d1e13bae581>`_)

v8.5.0 (2024-11-18)

Documentation

Remove invalid docsting note about auto-assigned bom-ref values (#733, ``5aa5787` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/5aa5787767c60dc23fd09f6cf14e54e5b0efceb4>`_)

Features

Support CycloneDX 1.6.1 (#742, ``55eafed` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/55eafedf50d395911a697bd9c85eeab5820934ff>`_)

v8.4.0 (2024-10-29)

Bug Fixes

No warning for missing dependencies if no component exists (#720, ``d9c3ded` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/d9c3ded34f443cd04f1f0041f0dd948db3db40e7>`_)

Features

Add factory method XsUri.make_bom_link() (#728, ``5ec73d0` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/5ec73d0668b4f9e087cc11a2e1a0e242ad1b5dd6>`_)

v8.3.0 (2024-10-26)

Documentation

Revisit examples readme (#725, ``e9020f0` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/e9020f0b709a5245d1749d2811b8568f892869bb>`_)

Features

Add basic support for Definitions (#701, ``a1573e5` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/a1573e5af12bb54c7328c73971dc2c2f8d820c0a>`_)

v8.2.1 (2024-10-24)

Bug Fixes

Encode quotation mark in URL (#724, ``a7c7c97` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/a7c7c97c37ee1c7988c028aa779f74893f858c7b>`_)

v8.2.0 (2024-10-22)

Features

Add Python 3.13 support (#718, ``d4be3ba` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/d4be3ba6b3ccc65553a7dd10ad559c1eddfbb19b>`_)

v8.1.0 (2024-10-21)

Documentation

Fix code examples regarding outputting (#709, ``c72d5f4` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/c72d5f483d5c1990fe643c4c25e37373d4d3248f>`_)

Features

Add support for Lifecycles in BOM metadata (#698, ``6cfeb71` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/6cfeb711f11aec8fa4d7be885f6797cc2eaa7e67>`_)

v8.0.0 (2024-10-14)

Documentation

chaneglog: Omit chore/ci/refactor/style/test/build (#703, ``a210809` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/a210809efb34c2dc895fc0c6d96a3412a9097625>`_)

Features

V8.0.0 (#665, ``002f966` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/002f96630ce8fc6f1766ee6cc92a16b35a821c69>`_)

BREAKING Changes

Removed cyclonedx.mode.ThisTool, utilize cyclonedx.builder.this.this_tool() instead. * Moved cyclonedx.model.Tool to cyclonedx.model.tool.Tool.
Property cyclonedx.mode.bom.BomMetaData.tools is of type cyclonedx.model.tool.ToolRepository now, was SortedSet[cyclonedx.model.Tool]. The getter will act accordingly; the setter might act in a backwards-compatible way.
Property cyclonedx.mode.vulnerability.Vulnerability.tools is of type cyclonedx.model.tool.ToolRepository now, was SortedSet[cyclonedx.model.Tool]. The getter will act accordingly; the setter might act in a backwards-compatible way.
Constructor cyclonedx.model.license.LicenseExpression() accepts optional argument acknowledgement only as key-word argument, no longer as positional argument.

Changes

Constructor of cyclonedx.model.bom.BomMetaData also accepts an instance of cyclonedx.model.tool.ToolRepository for argument tools. * Constructor of cyclonedx.model.bom.BomMetaData no longer adds this very library as a tool. Downstream users SHOULD add it manually, like my-bom.metadata.tools.components.add(cyclonedx.builder.this.this_component()).

Fixes

Deserialization of CycloneDX that do not include tools in the metadata are no longer unexpectedly modified/altered.

Added

Enabled Metadata Tools representation and serialization in accordance with CycloneDX 1.5

New class cyclonedx.model.tool.ToolRepository. * New function cyclonedx.builder.this.this_component() – representation of this very python library as a Component. * New function cyclonedx.builder.this.this_tool() – representation of this very python library as a Tool. * New function cyclonedx.model.tool.Tool.from_component().

Dependencies

Raised runtime dependency py-serializable>=1.1.1,<2, was >=1.1.0,<2.

v7.6.2 (2024-10-07)

Bug Fixes

Behavior of and typing for crypto setters with optional values (#694, ``d8b20bd` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/d8b20bdc5224ea30cf767f6f3f1a6f8ff2754973>`_)

Documentation

Fix some doc strings (``4fa8fc1` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/4fa8fc1b6703ecf6788b72f2d53c6a17e2146cf7>`_)

v7.6.1 (2024-09-18)

Bug Fixes

File copyright headers (#676, ``35e00b4` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/35e00b4ee5a9306b9e97b011025409bcbfcef309>`_)

v7.6.0 (2024-08-14)

Features

hashtype.from_composite_str for Blake2b, SHA3, Blake3 (#663, ``c59036e` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/c59036e06ddc97284f82efbbc168dc2d89d090d1>`_)

v7.5.1 (2024-07-08)

Bug Fixes

Xml serialize normalizedString and token properly (#646, ``b40f739` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/b40f739206a44f7dbd94042fb5e1a37c047ea024>`_)

v7.5.0 (2024-07-04)

Features

Add workaround property for v1.5 and v1.6 (#642, ``b5ebcf8` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/b5ebcf8104faf57030cbc5d8190c78524ab86431>`_)

v7.4.1 (2024-06-12)

Bug Fixes

cyclonedx.model.property.value value is optional (#631, ``ad0f98b` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/ad0f98b433fd85ba14db6b6288f33d98bc79ee51>`_)

Documentation

Exclude dep bumps from changelog (#627, ``60361f7` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/60361f781a1b356f24a553e133e0f58a2ad37a7d>`_)

v7.4.0 (2024-05-23)

Documentation

Ossp best practice percentage (``75f58dc` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/75f58dcd41c1495737bff69d354beeeff7660c15>`_)

Features

Updated SPDX license list to v3.24.0 (#622, ``3f9770a` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/3f9770a95fbe48dfc0cb911a6526690017c2fb37>`_)

v7.3.4 (2024-05-06)

Bug Fixes

Allow suppliers with empty-string names (#611, ``b331aeb` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/b331aeb4b7261c7b1359c592b2dcda27bd35e369>`_)

v7.3.3 (2024-05-06)

Bug Fixes

Json validation allow arbitrary $schema value (#613, ``08b7c60` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/08b7c607360b65215d9d29d42ae86e60c6efe49b>`_)

v7.3.2 (2024-04-26)

Bug Fixes

Properly sort components based on all properties (#599, ``8df488c` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/8df488cb422a6363421fee39714df4e8e8e7a593>`_)

v7.3.1 (2024-04-22)

Bug Fixes

Include all fields of Component in __lt__ function for #586 (#587, ``d784685` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/d7846850d1ad33184d1d58b59fdf41a778d05900>`_)

v7.3.0 (2024-04-19)

Features

License factory set acknowledgement (#593, ``7ca2455` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/7ca2455018d0e191afaaa2fd136a7e4d5b325ec6>`_)

v7.2.0 (2024-04-19)

Features

Disjunctive license acknowledgement (#591, ``9bf1839` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/9bf1839859a244e790e91c3e1edd82d333598d60>`_)

v7.1.0 (2024-04-10)

Documentation

Missing schema support table & update schema support to reflect version 7.0.0 (#584, ``d230e67` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/d230e67188661a5fb94730e52bf59c11c965c8d7>`_)

Features

Support bom.properties for CycloneDX v1.5+ (#585, ``1d1c45a` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/1d1c45ac82c7927acc388489228a9b5990f68aa7>`_)

v7.0.0 (2024-04-09)

Features

Support for CycloneDX v1.6 (``8bbdf46` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/8bbdf461434ab66673a496a8305c2878bf5c88da>`_)
added draft v1.6 schemas and boilerplate for v1.6
re-generated test snapshots for v1.6
note bom.metadata.manufacture as deprecated
work on bom.metadata for v1.6
Deprecated .component.author. Added .component.authors and .component.manufacturer
work to add .component.omniborid - but tests deserialisation tests fail due to schema differences (.component.author not in 1.6)
work to get deserialization tests passing

v6.4.4 (2024-03-18)

Bug Fixes

Wrong extra name for xml validation (#571, ``10e38e2` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/10e38e25095de4b2dafbfcd1fd81dce7a9c0f124>`_)

v6.4.3 (2024-03-04)

Bug Fixes

Serialization of model.component.Diff (#557, ``22fa873` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/22fa8734bf1a3a8789ad7578bfa0c86cf0a49d4a>`_)

v6.4.2 (2024-03-01)

Build System

Use poetry v1.8.1 (#560, ``6f81dfa` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/6f81dfaed32b76f251647f6291791e714ab158a3>`_)

Documentation

Exclude internal docs from rendering (#545, ``7e55dfe` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/7e55dfe213cb2a88b3686f9e8bf93cf4642a2ccd>`_)
Update architecture description and examples (#550, ``a19fd28` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/a19fd2828355ae031164ef7a0dda2a8ea2365108>`_)

v6.4.1 (2024-01-30)

Bug Fixes

model.bomref no longer equal to unset peers (#543, ``1fd7fee` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/1fd7fee9dec888c10087921f2e5a7a60062fb419>`_)

Documentation

Refactor example (``c1776b7` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/c1776b718b81cf72ef0c0251504e0d3631e30b17>`_)
Ship docs with sdist build (#544, ``52ef01c` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/52ef01c99319d5aed950e7f6ef6fcfe731ac8b2f>`_)

v6.4.0 (2024-01-22)

Documentation

Add OpenSSF Best Practices shield (#532, ``59c4381` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/59c43814b07db0aa881d87192939eb93e79b0cc2>`_)

Features

Support py-serializable v1.0 (#531, ``e1e7277` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/e1e72777d8a355c6854f4d9eb26c1e2083c806df>`_)

v6.3.0 (2024-01-06)

Documentation

Add Documentation url to project meta (``1080b73` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/1080b7387a0bbc49a067cd2efefb1545470947e5>`_)
Add Documentation url to project meta (``c4288b3` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/c4288b35e0e1050f0982f7492cfcd3bea34b445c>`_)

Features

Enable dependency py-serializable 0.17 (#529, ``9f24220` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/9f24220029cd18cd191f63876899cd86be52dce1>`_)

v6.2.0 (2023-12-31)

v6.1.0 (2023-12-22)

Features

Add function to map python hashlib algorithms to CycloneDX (#519, ``81f8cf5` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/81f8cf59b1f40ffbd213789a8b1b621a01e3f631>`_)

v6.0.0 (2023-12-10)

Features

V6.0.0 (#492, ``74865f8` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/74865f8e498c9723c2ce3556ceecb6a3cfc4c490>`_)

Breaking Changes

Removed symbols that were already marked as deprecated (via #493)
Removed symbols in parser.* (#489 via #495)
Removed output.LATEST_SUPPORTED_SCHEMA_VERSION (#491 via #494)
Serialization of unsupported enum values might downgrade/migrate/omit them (#490 via #496) Handling might raise warnings if a data loss occurred due to omitting. The result is a guaranteed valid XML/JSON, since no (enum-)invalid values are rendered.
Serialization of any model.component.Component with unsupported type raises exception.serialization.SerializationOfUnsupportedComponentTypeException (#490 via #496) * Object model.bom_ref.BomRef‘s property value defaults to Null, was arbitrary UUID (#504 via #505) This change does not affect serialization. All bom-refs are guaranteed to have unique values on rendering.
Removed helpers from public API (#503 via #506)

Added

Basic support for CycloneDX 1.5 (#404 via #488) * No data models were enhanced nor added, yet. Pull requests to add functionality are welcome. * Existing enumerable got new cases, to reflect features of CycloneDX 1.5 (#404 via #488) * Outputters were enabled to render CycloneDX 1.5 (#404 via #488)

Tests

Created (regression/unit/integration/functional) tests for CycloneDX 1.5 (#404 via #488) * Created (regression/functional) tests for Enums’ handling and completeness (#490 via #496)

Misc

Bumped dependency py-serializable@^0.16, was @^0.15 (via #496)

API Changes — the details for migration

Added new sub-package exception.serialization (via #496)
Removed class models.ComparableTuple (#503 via #506)
Enum model.ExternalReferenceType got new cases, to reflect features for CycloneDX 1.5 (#404 via #488)
Removed function models.get_now_utc (#503 via #506) * Removed function models.sha1sum (#503 via #506)
Enum model.component.ComponentType got new cases, to reflect features for CycloneDX 1.5 (#404 via #488)
Removed model.component.Component.__init__()‘s deprecated optional kwarg namespace (via #493) Use kwarg group instead.
Removed model.component.Component.__init__()‘s deprecated optional kwarg license_str (via #493) Use kwarg licenses instead.
Removed deprecated method model.component.Component.get_namespace() (via #493)
Removed class models.dependency.DependencyDependencies (#503 via #506)
Removed model.vulnerability.Vulnerability.__init__()‘s deprecated optional kwarg source_name (via #493) Use kwarg source instead.
Removed model.vulnerability.Vulnerability.__init__()‘s deprecated optional kwarg source_url (via #493) Use kwarg source instead.
Removed model.vulnerability.Vulnerability.__init__()‘s deprecated optional kwarg recommendations (via #493) Use kwarg recommendation instead.
Removed model.vulnerability.VulnerabilityRating.__init__()‘s deprecated optional kwarg score_base (via #493) Use kwarg score instead.
Enum model.vulnerability.VulnerabilityScoreSource got new cases, to reflect features for CycloneDX 1.5 (#404 via #488)
Removed output.LATEST_SUPPORTED_SCHEMA_VERSION (#491 via #494)
Removed deprecated function output.get_instance() (via #493) Use function output.make_outputter() instead. * Added new class output.json.JsonV1Dot5, to reflect CycloneDX 1.5 (#404 via #488)
Added new item to dict output.json.BY_SCHEMA_VERSION, to reflect CycloneDX 1.5 (#404 via #488)
Added new class output.xml.XmlV1Dot5, to reflect CycloneDX 1.5 (#404 via #488)
Added new item to dict output.xml.BY_SCHEMA_VERSION, to reflect CycloneDX 1.5 (#404 via #488)
Removed class parser.ParserWarning (#489 via #495)
Removed class parser.BaseParser (#489 via #495)
Enum schema.SchemaVersion got new case V1_5, to reflect CycloneDX 1.5 (#404 via #488)

v5.2.0 (2023-12-02)

Documentation

Keywaords & funding (#486, ``3189e59` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/3189e59ff8e3d3d10f7b949b5a08397ff3d3642b>`_)

Features

model.xsuri migrate control characters according to spec (#498, ``e490429` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/e49042976f8577af4061c34394db270612488cdf>`_)

v5.1.1 (2023-11-02)

Bug Fixes

Update own externalReferences (#480, ``edb3dde` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/edb3dde889c06755dd1963ed21dd803db3ea0dcc>`_)

v5.1.0 (2023-10-31)

Documentation

Advance license docs (``f61a730` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/f61a7303de1d5dacf0917a1d66f5ebe0732ccd75>`_)

Features

Guarantee unique BomRefs in serialization result (#479, ``a648775` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/a648775bb5195621e17fdbae92950ab6d56a665a>`_)

v5.0.1 (2023-10-24)

Documentation

Fix RTFD build (#476, ``b9fcfb4` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/b9fcfb40af366fdee7258ccb720e0fad27994824>`_)
Revisit project meta (#475, ``c3254d0` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/c3254d055f3cda96d2849222a0bba7be8cf486a3>`_)

v5.0.0 (2023-10-24)

Features

V5.0.0 (#440, ``26b151c` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/26b151cba7d7d484f23ee7888444f09ad6d016b1>`_)

BREAKING CHANGES

Dropped support for python<3.8 (#436 via #441; enable #433)
Reworked license related models, collections, and factories (#365 via #466)
Behavior * Method model.bom.Bom.validate() will throw exception.LicenseExpressionAlongWithOthersException, if detecting invalid license constellation (#453 via #452)
Fixed tuple comparison when unequal lengths (via #461)
API * Enum schema.SchemaVersion is no longer string-like (#442 via #447)
Enum schema.OutputVersion is no longer string-like (#442 via #447)
Abstract class output.BaseOutput requires implementation of new method output_format (#446 via #447)
Abstract method output.BaseOutput.output_as_string() got new optional parameter indent (#437 via #458) * Abstract method output.BaseOutput.output_as_string() accepts arbitrary kwargs (via #458, #462)
Removed class factory.license.LicenseChoiceFactory (via #466) The old functionality was integrated into factory.license.LicenseFactory.
Method factory.license.LicenseFactory.make_from_string()‘s parameter name_or_spdx was renamed to value (via #466)
Method factory.license.LicenseFactory.make_from_string()‘s return value can also be a LicenseExpression (#365 via #466) The behavior imitates the old factory.license.LicenseChoiceFactory.make_from_string()
Renamed class module.License to module.license.DisjunctliveLicense (#365 via #466)
Removed class module.LicenseChoice (#365 via #466) Use dedicated classes module.license.DisjunctliveLicense and module.license.LicenseExpression instead
All occurrences of models.LicenseChoice were replaced by models.licenses.License (#365 via #466)
All occurrences of SortedSet[LicenseChoice] were specialized to models.license.LicenseRepository (#365 via #466)

Fixed

Serialization of multy-licenses (#365 via #466) * Detect unused “dependent” components in model.bom.validate() (via #464)

Changed

Updated latest supported list of supported SPDX license identifiers (via #433)
Shipped schema files are moved to a protected space (via #433)
These files were never intended for public use.
XML output uses a default namespace, which makes results smaller. (#438 via #458)

Added

Support for Python 3.12 (via #460)
JSON- & XML-Validators (#432, #446 via #433, #448)
The functionality might require additional dependencies, that can be installed with the extra “validation”. See the docs in section “Installation” for details. * JSON & XML can be generated in a more human-friendly form (#437, #438 via #458)
Type hints, typings & overloads for better integration downstream (via #463) * API * New function output.make_outputter() (via #469) This replaces the deprecated function output.get_instance().
New sub-package validation (#432, #446 via #433, #448, #469, #468, #469)
New class exception.MissingOptionalDependencyException (#432 via #433) * New class exception.LicenseExpressionAlongWithOthersException (#453 via #452) * New dictionaries output.{json,xml}.BY_SCHEMA_VERSION (#446 via #447) * Existing implementations of class output.BaseOutput now have a new method output_format (#446 via #447)
Existing implementations of method output.BaseOutput.output_as_string() got new optional parameter indent (#437 via #458)
Existing implementations of method output.BaseOutput.output_to_file() got new optional parameter indent (#437 via #458) * New method factory.license.LicenseFactory.make_with_expression() (via #466)
New class model.license.DisjunctiveLicense (#365 via #466)
New class model.license.LicenseExpression (#365 via #466)
New class model.license.LicenseRepository (#365 via #466)
New class serialization.LicenseRepositoryHelper (#365 via #466)

Deprecated

Function output.get_instance() might be removed, use output.make_outputter() instead (via #469)

Tests

Added validation tests with official CycloneDX schema test data (#432 via #433)
Use proper snapshots, instead of pseudo comparison (#437 via #464)
Added regression test for bug #365 (via #466, #467)

Misc

Dependencies: bumped py-serializable@^0.15.0, was @^0.11.1 (via #458, #463, #464, #466)
Style: streamlined quotes and strings (via #472)
Chore: bumped internal dev- and QA-tools (#436 via #441, #472)
Chore: added more QA tools to prevent common security issues (via #473)

v4.2.3 (2023-10-16)

Bug Fixes

Spdx-expression-validation internal crashes are cought and handled (#471, ``5fa66a0` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/5fa66a043818eb5747dbd630496c6d31f818c0ab>`_)

v4.2.2 (2023-09-14)

Bug Fixes

Ship meta files (#434, ``3a1a8a5` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/3a1a8a5c1cbe8d8989b4cb335269a02b5c6d4f38>`_)

Documentation

Fix shield in README (``6a941b1` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/6a941b1ef5cc0f9e956173cce7e9da57e8c6bf22>`_)
example: Showcase LicenseChoiceFactory (#428, ``c56ec83` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/c56ec8395dd203ac41fa6f4c43970a50c0e80efb>`_)

v4.2.1 (2023-09-06)

Bug Fixes

licensechoicefactory.make_from_string() prioritize SPDX id over expression (#427, ``e1bdfdd` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/e1bdfddcfab97359fbde9f53dc65f56fc8ec4ba9>`_)

v4.2.0 (2023-09-06)

Features

Complete SPDX license expression (#425, ``e06f9fd` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/e06f9fd2c30e8976766f326ff216103d2560cb9a>`_)

v4.1.0 (2023-08-27)

Documentation

examples: Showcase shorthand dependency management (#403, ``8b32efb` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/8b32efb322a3281d58e9f980bb9001b112aa944a>`_)

Features

Programmatic access to library’s version (#417, ``3585ea9` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/3585ea9911ae521e86793ef18f5891289fb0b604>`_)

v4.0.1 (2023-06-28)

Bug Fixes

Conditional warning if no root dependencies were found (#398, ``c8175bb` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/c8175bb6aebac7f129d42d7a5a0ae928212c20cb>`_)

Build System

Streamlined ci and builds (#358, ``9779af0` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/9779af02f5f3cd99fe3e1a088f5547f4991b05b7>`_)

Documentation

Add exaple how to build and serialize (#397, ``65e22bd` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/65e22bdc6a1a3fc02a6282146bc8fbc17ddb32fa>`_)
examples: Readme (#399, ``1d262ba` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/1d262ba57eab0d61b947fc293fc59c6234f19647>`_)

v4.0.0 (2023-03-20)

Bug Fixes

Remove toml as dependency as not used and seems to be breaking Python 3.11 CI (``8fb1b14` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/8fb1b14f5e04e85f21e654c44fa6b9b774867757>`_)
Removed autopep8 in favour of flake8 as both have conflicting dependencies now (``8fb1b14` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/8fb1b14f5e04e85f21e654c44fa6b9b774867757>`_)
Removed setuptools as dependency (``8fb1b14` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/8fb1b14f5e04e85f21e654c44fa6b9b774867757>`_)
Removed types-toml from dependencies - not used (``8fb1b14` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/8fb1b14f5e04e85f21e654c44fa6b9b774867757>`_)
Update serializable to include XML safety changes (``8fb1b14` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/8fb1b14f5e04e85f21e654c44fa6b9b774867757>`_)

Features

Add helper method to get URN for a BOM according to https://www.iana.org/assignments/urn-formal/cdx (``8fb1b14` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/8fb1b14f5e04e85f21e654c44fa6b9b774867757>`_)
Allow serial_number of BOM to be prescribed (``8fb1b14` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/8fb1b14f5e04e85f21e654c44fa6b9b774867757>`_)
Allow version of BOM to be defined (``8fb1b14` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/8fb1b14f5e04e85f21e654c44fa6b9b774867757>`_)
Drop Python 3.6 support (``8fb1b14` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/8fb1b14f5e04e85f21e654c44fa6b9b774867757>`_)
Officially test and support Python 3.11 (``8fb1b14` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/8fb1b14f5e04e85f21e654c44fa6b9b774867757>`_)
Release 4.0.0 #341) (``8fb1b14` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/8fb1b14f5e04e85f21e654c44fa6b9b774867757>`_)
Support for deserialization from JSON and XML (#290, ``8fb1b14` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/8fb1b14f5e04e85f21e654c44fa6b9b774867757>`_)
Support for Python 3.11 (#349, ``8fb1b14` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/8fb1b14f5e04e85f21e654c44fa6b9b774867757>`_)
Support VEX without Components in the same BOM (``8fb1b14` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/8fb1b14f5e04e85f21e654c44fa6b9b774867757>`_)

Breaking Changes

Large portions of this library have been re-written for this release and many methods and contracts have changed.

v3.1.5 (2023-01-12)

Bug Fixes

Mak test’s schema paths relative to cyclonedx package (#338, ``1f0c05f` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/1f0c05fe2b2a22bc84a1a437dd59390f2ceaf986>`_)

v3.1.4 (2023-01-11)

Bug Fixes

tests: Include tests in sdist builds (#337, ``936ad7d` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/936ad7d0c26d8f98040203d3234ca8f1afbd73ab>`_)

Features

Include tests in sdist builds for #336 (#337, ``936ad7d` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/936ad7d0c26d8f98040203d3234ca8f1afbd73ab>`_)

v3.1.3 (2023-01-07)

Bug Fixes

Serialize dependency graph for nested components (#329, ``fb3f835` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/fb3f8351881783281f8b7e796098a4c145b35927>`_)

v3.1.2 (2023-01-06)

Bug Fixes

Prevent errors on metadata handling for some specification versions (#330, ``f08a656` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/f08a65649aee750397edc061eb3b8325a69bb4b4>`_)

Documentation

Fix shields (#324, ``555dad4` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/555dad4bc255066036ecca028192eb83df8ba5a0>`_)
Fix typo (#318, ``63bfb87` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/63bfb8772fe78e9842675d17862c456150dbbc15>`_)
Typo (``539b57a` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/539b57a00e4e60e239bb26141f219366121e7bc2>`_)

v3.1.1 (2022-11-28)

Bug Fixes

Type hint for get_component_by_purl is incorrect (``3f20bf0` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/3f20bf04a65d5c539230281437255b5f48e17621>`_)

v3.1.0 (2022-09-15)

Features

License factories (``033bad2` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/033bad2a50fd2236c712d4621caa57b04fcc2043>`_)
Out-factor SPDX compund detection (``fd4d537` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/fd4d537c9dced0e38f14d99dee174cc5bb0bd465>`_)
Out-factor SPDX compund detection (``2b69925` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/2b699252f8857d97231a689ea9cbfcdff9459626>`_)

v2.7.1 (2022-08-01)

Bug Fixes

Pinned mypy <= 0.961 due to #278 (``d6955cb` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/d6955cb86d8da7a72d0146d0dbeb7c34a794a954>`_)
Properly support nested components and services #275 (``6597db7` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/6597db740f222c68ad90f74fb8fdb58b72642adb>`_)

v2.7.0 (2022-07-21)

Features

Added updated CycloneDX 1.4.2 schemas (``7fb27ae` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/7fb27aed58f7de10f8c6b703699bba315af353e7>`_)
Support for CycloneDX schema version 1.4.2 (``db7445c` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/db7445cd343fc35c6d6fc9f5af3e28cf97a19732>`_)

v2.6.0 (2022-06-20)

Features

Reduce unnessessarry type casting of set/SortedSet (#203, ``089d971` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/089d9714f8f9f8c70076e48baa18340899cc29fa>`_)

v2.5.2 (2022-06-15)

Bug Fixes

Add expected lower-than comparators for OrganizationalEntity and VulnerabilityCredits (#248, ``0046ee1` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/0046ee19547be8dafe5d73bad886b9c5f725f26e>`_)

v2.5.1 (2022-06-10)

Bug Fixes

Add missing Vulnerability comparator for sorting (#246, ``c3f3d0d` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/c3f3d0d105f0dcf991175040b6d6c2b6e7e25d8f>`_)

v2.5.0 (2022-06-10)

Build System

Move typing to dev-dependencies (``0e2376b` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/0e2376baade068ae0490b05550837d104e9abfa4>`_)

Documentation

Fix typo “This is out” -> “This is our” (``ef0278a` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/ef0278a2044147e73a281c5a59f95049d4af7641>`_)

Features

Use SortedSet in model to improve reproducibility - this will provide predictable ordering of various items in generated CycloneDX documents - thanks to @RodneyRichardson (``8a1c404` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/8a1c4043f502292b32c4ab36a8618cf3f67ac8df>`_)

v2.4.0 (2022-05-17)

Features

deps: Remove unused typing-extensions constraints (``2ce358a` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/2ce358a37e6ce5f06aa9297aed17f8f5bea38e93>`_)

v2.3.0 (2022-04-20)

Features

Add support for Dependency Graph in Model and output serialisation (``ea34513` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/ea34513f8229a909007793288ace2f6f51684333>`_)

v2.2.0 (2022-04-12)

Features

Bump JSON schemas to latest fix verison for 1.2 and 1.3 - see: (``bd6a088` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/bd6a088d51c995c0f08271f56aedb456c60c1a2e>`_)
Bump XML schemas to latest fix version for 1.2-1.4 - see: (``bd2e756` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/bd2e756de15c37b34d2866e8de521556420bd5d3>`_)

v2.1.1 (2022-04-05)

Bug Fixes

version being optional in JSON output can raise error (``ba0c82f` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/ba0c82fbde7ba47502c45caf4fa89e9e4381f482>`_)
Prevent error if version not set (``b9a84b5` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/b9a84b5b39fe6cb1560764e86f8bd144f2a901e3>`_)

v2.1.0 (2022-03-28)

Features

Output errors are verbose (``bfe8fb1` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/bfe8fb18825251fd9f146458122aa06137ec27c0>`_)

v2.0.0 (2022-02-21)

BREAKING Changes

BREAKING CHANGE: Adopt PEP-3102
BREAKING CHANGE: Optional Lists are now non-optional Sets
BREAKING CHANGE: Remove concept of DEFAULT schema version - replaced with LATEST schema version
BREAKING CHANGE: Added BomRef data type

Bug Fixes

component.bom_ref is not Optional in our model implementation (in the schema it is) - we generate a UUID if bom_ref is not supplied explicitly (``5c954d1` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/5c954d1e39ce8509ab36e6de7d521927ad3c997c>`_)
expression not supported in Component Licsnes for version 1.0 (``15b081b` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/15b081bd1891566dbe00e18a8b21d3be87154f72>`_)
license_url not serialised in XML output #179 (#180, ``f014d7c` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/f014d7c4411de9ed5e9cb877878ae416d85b2d92>`_)
Components with no version (optional since 1.4) produce invalid BOM output in XML #150 (``70d25c8` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/70d25c8c162e05a5992761ccddbad617558346d1>`_)
Further fix for #150 (``1f55f3e` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/1f55f3edfeacfc515ef0b5e493c27dd6e14861d6>`_)
Implemented correct __hash__ methods in models (#155, ``32c0139` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/32c01396251834c69a5b23c82a5554faf8447f61>`_)
Regression introduced by first fix for #150 (``c09e396` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/c09e396b98c484d1d3d509a5c41746133fe41276>`_)
Resolved #169 (part of #155) (#172, ``a926b34` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/a926b34c7facb8b3709936fe00b62a0b80338f31>`_)
Temporary fix for __hash__ of Component with properties #153 (``a51766d` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/a51766d202c3774003dd7cd8c115b2d9b3da1f50>`_)

Features

bom-ref for Component and Vulnerability default to a UUID (#142, ``b45ff18` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/b45ff187056893c5fb294cbf9de854fd130bb7be>`_)
bom-ref for Component and Vulnerability default to a UUID if not supplied ensuring they have a unique value #141 (``b45ff18` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/b45ff187056893c5fb294cbf9de854fd130bb7be>`_)
Bump dependencies (``da3f0ca` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/da3f0ca3e8b90b37301c03f889eb089bca649b09>`_)
Complete support for bom.components (#155, ``32c0139` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/32c01396251834c69a5b23c82a5554faf8447f61>`_)
Completed work on #155 (#172, ``a926b34` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/a926b34c7facb8b3709936fe00b62a0b80338f31>`_)
Support complete model for bom.metadata (#162, ``2938a6c` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/2938a6c001a5b0b25477241d4ad6601030c55165>`_)
Support for bom.externalReferences in JSON and XML #124 (``1b733d7` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/1b733d75a78e3757010a8049cab5c7d4656dc2a5>`_)
Support services in XML BOMs (``9edf6c9` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/9edf6c940d20a44f5b99c557392a9fa4532b332e>`_)

Breaking Changes

Adopt PEP-3102
Optional Lists are now non-optional Sets
Remove concept of DEFAULT schema version - replaced with LATEST schema version
Added BomRef data type

v1.3.0 (2022-01-24)

Features

bom-ref for Component and Vulnerability default to a UUID (#142, ``3953bb6` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/3953bb676f423c325ca4d80f3fcee33ad042ad93>`_)
bom-ref for Component and Vulnerability default to a UUID if not supplied ensuring they have a unique value #141 (#142, ``3953bb6` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/3953bb676f423c325ca4d80f3fcee33ad042ad93>`_)

v1.2.0 (2022-01-24)

Features

Add CPE to component (#138, ``269ee15` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/269ee155f203d5771c56edb92f7279466bf2012f>`_)

v1.1.1 (2022-01-19)

Bug Fixes

Bump dependencies (#136, ``18ec498` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/18ec4987f6aa4a259d30000a19aa6ee1d49681d1>`_)

v1.1.0 (2022-01-13)

Features

Add support for bom.metadata.component (#118, ``1ac31f4` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/1ac31f4cb14b6c466e092ff38ee2aa472c883c5d>`_)

v1.0.0 (2022-01-13)

v0.12.3 (2021-12-15)

Bug Fixes

Removed requirements-parser as dependency (temp) as not available for Python 3 as Wheel (#98, ``3677d9f` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/3677d9fd584b7c0eb715954bb7b8adc59c0bc9b1>`_)

v0.12.2 (2021-12-09)

Bug Fixes

Tightened dependency packageurl-python (#95, ``eb4ae5c` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/eb4ae5ca8842877b780a755b6611feef847bdb8c>`_)

v0.12.1 (2021-12-09)

Bug Fixes

Further loosened dependency definitions (``8bef6ec` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/8bef6ecad36f51a003b266d776c9520d33e06034>`_)

v0.12.0 (2021-12-09)

Bug Fixes

Typing definitions to be PY 3.6 compatible (``07ebedc` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/07ebedcbab1554970496780bb8bf167f6fe4ad5c>`_)
Update conda package parsing to handle build containing underscore (#66, ``2c6020a` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/2c6020a208aa1c0fd13ab337db6343ad1d2d5c43>`_)

Features

Loosed dependency versions to make this library more consumable (``55f10fb` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/55f10fb5524dafa68112c0836806c27bdd74fcbe>`_)
Lowering minimum dependency versions (``55f10fb` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/55f10fb5524dafa68112c0836806c27bdd74fcbe>`_)
Lowering minimum dependency versions - importlib-metadata raising minimum to ensure we get a typed library (``55f10fb` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/55f10fb5524dafa68112c0836806c27bdd74fcbe>`_)
Lowering minimum version for importlib-metadata to 3.4.0 with modified import statement (``55f10fb` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/55f10fb5524dafa68112c0836806c27bdd74fcbe>`_)

v0.11.1 (2021-11-10)

Bug Fixes

Constructor for Vulnerability to correctly define ratings as optional (``395a0ec` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/395a0ec14ebcba8e0849a0ced30ec4163c42fa7a>`_)
Tested with Python 3.10 (#64, ``385b835` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/385b835f44fadb0f227b6a8ac992b0c73afc6ef0>`_)
Upgrade Poetry version to workaround issue between Poetry and Python 3.10 (see: https://github.com/python-poetry/poetry/issues/4210) (#64, ``385b835` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/385b835f44fadb0f227b6a8ac992b0c73afc6ef0>`_)

v0.11.0 (2021-11-10)

Features

Typing & PEP 561 (``9144765` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/91447656c0914ceb2af2e4b7282292ec7b93f5bf>`_)

v0.10.2 (2021-10-21)

Bug Fixes

Correct way to write utf-8 encoded files (``49f9369` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/49f9369b3eba47a3a8d1bcc505546d7dfaf4c5fe>`_)

v0.10.1 (2021-10-21)

Bug Fixes

Ensure output to file is UTF-8 (``a10da20` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/a10da20865e90e9a0a5bb1e12fba9cfd23970c39>`_)
Ensure output to file is UTF-8 (``193bf64` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/193bf64cdb19bf6fb9662367402dcf7eaab8dd1a>`_)

v0.10.0 (2021-10-20)

Features

Add support for Conda (``bd29c78` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/bd29c782d39a4956f482b9e4de20d7f829beefba>`_)

v0.9.1 (2021-10-19)

v0.9.0 (2021-10-19)

Bug Fixes

Missing check for Classifiers in Environment Parser (``b7fa38e` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/b7fa38e9740bbc5b4c406410df37c3b34818010c>`_)

Features

Add support for parsing package licenses when using the Environment Parsers (``c414eaf` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/c414eafde2abaca1005a2a0af6993fcdc17897d3>`_)

v0.8.3 (2021-10-14)

Bug Fixes

Coding standards violations (``00cd1ca` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/00cd1ca20899b6861b1b959611a3556ffad36832>`_)
Handle Pipfile.lock dependencies without an index specified (``26c62fb` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/26c62fb996c4b1b2bf719e10c9072cf4fbadab9f>`_)

v0.8.2 (2021-10-14)

Bug Fixes

Add namespace and subpath support to Component to complete PackageURL Spec support (``780adeb` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/780adebe3861ef08eb1e8817a5e9e3451c0a2137>`_)

v0.8.1 (2021-10-12)

Bug Fixes

Multiple hashes being created for an externalRefernce which is not as required (``970d192` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/970d19202d13d4becbbf040b3a9fb115dd7a0795>`_)

v0.8.0 (2021-10-12)

Features

Add support for externalReferneces for Components and associated enhancements to parsers to obtain information where possible/known (``a152852` <https://github.com/CycloneDX/cyclonedx-python-lib/commit/a152852b361bbb7a69c9f7ab61ae7ea6dcffd214>`_)