3.10.0

Added support for CycloneDX Specification-1.6.

Changed

• This tool supports CycloneDX Specification-1.6 now (via #1276)

Added

• Option specVersion now supports value 1.6 to reflect CycloneDX Specification-1.6 (via #1276)
  Default value for that option is unchanged - still 1.4.

Build

• Use TypeScript v5.4.5 now, was v5.4.2 (via #1270)

---

What's Changed

• tests: integrate Angular17 by @jkowalleck in #1263
• chore(deps): bump webpack-dev-middleware from 5.3.3 to 5.3.4 in /tests/integration/webpack5-react18 by @dependabot in #1266
• feat: explicitely support CycloneDX v1.6 by @jkowalleck in #1276
• chore(deps-dev): bump typescript from 5.4.2 to 5.4.5 in the typescript group by @dependabot in #1270

Full Changelog: v3.9.2...v3.10.0

3.9.2

Build

• Use TypeScript v5.4.2 now, was v5.3.3 (via #1259)

---

What's Changed

• chore(deps-dev): bump the eslint group with 2 updates by @dependabot in #1247
• chore(deps-dev): bump c8 from 8.0.1 to 9.0.0 by @dependabot in #1250
• chore(deps): bump follow-redirects from 1.15.1 to 1.15.4 in /tests/integration/webpack5-react18 by @dependabot in #1251
• chore(deps-dev): bump follow-redirects from 1.15.2 to 1.15.4 in /tests/integration/webpack5-angular13 by @dependabot in #1252
• chore(deps-dev): bump the eslint group with 1 update by @dependabot in #1253
• chore(deps-dev): bump the eslint group with 1 update by @dependabot in #1254
• chore(deps-dev): bump ip from 1.1.8 to 1.1.9 in /tests/integration/webpack5-angular13 by @dependabot in #1256
• chore(deps-dev): bump the eslint group with 1 update by @dependabot in #1257
• chore(deps): bump follow-redirects from 1.15.4 to 1.15.6 in /tests/integration/webpack5-react18 by @dependabot in #1261
• chore(deps-dev): bump follow-redirects from 1.15.4 to 1.15.6 in /tests/integration/webpack5-angular13 by @dependabot in #1262
• chore(deps): bump softprops/action-gh-release from 1 to 2 by @dependabot in #1258
• chore(deps-dev): bump the typescript group with 1 update by @dependabot in #1259

Full Changelog: v3.9.1...v3.9.2

3.9.1

Fix

• Malformed ingested package versions are fixed (via #1246)

---

What's Changed

• fix: malformed ingested package versions are fixed by @jkowalleck in #1246

Full Changelog: v3.9.0...v3.9.1

3.9.0

Changed

• Hardened JSON imports (via #1242, #1245)

Build

• Use TypeScript v5.3.3 now, was v5.3.2 (via #1244)

---

What's Changed

• test: detailed logs in integration tests by @jkowalleck in #1240
• chore(deps-dev): bump the eslint group with 1 update by @dependabot in #1241
• feat: hardened JSON imports by @jkowalleck in #1242
• ci: test node21 by @jkowalleck in #1243
• chore(deps-dev): bump the typescript group with 1 update by @dependabot in #1244
• chore(deps-dev): bump the eslint group with 1 update by @dependabot in #1245

Full Changelog: v3.8.3...v3.9.0

3.8.3

Maintenance release.

Build

• Use TypeScript v5.3.2 now, was v5.2.2 (via #1238)

---

What's Changed

• chore(deps): bump actions/checkout from 3 to 4 by @dependabot in #1220
• chore(deps-dev): bump the eslint group with 1 update by @dependabot in #1221
• chore(deps): bump deps in integration test angular13 by @jkowalleck in #1222
• chore(deps-dev): bump the jest group with 1 update by @dependabot in #1223
• chore(deps-dev): bump the eslint group with 2 updates by @dependabot in #1225
• chore(deps): bump postcss from 8.4.28 to 8.4.31 in /tests/integration/webpack5-react18 by @dependabot in #1226
• chore(deps-dev): bump the eslint group with 2 updates by @dependabot in #1228
• docs: publish test coverage by @jkowalleck in #1229
• chore(deps): bump @babel/traverse from 7.18.5 to 7.23.2 in /tests/integration/webpack5-react18 by @dependabot in #1230
• chore(deps-dev): bump @babel/traverse from 7.22.17 to 7.23.2 in /tests/integration/webpack5-angular13 by @dependabot in #1231
• chore(deps-dev): bump the eslint group with 1 update by @dependabot in #1232
• chore(deps): bump actions/setup-node from 3 to 4 by @dependabot in #1233
• chore(deps-dev): bump the eslint group with 1 update by @dependabot in #1234
• chore(deps-dev): bump the eslint group with 2 updates by @dependabot in #1236
• chore(deps-dev): bump the typescript group with 1 update by @dependabot in #1238

Full Changelog: v3.8.2...v3.8.3

3.8.2

Maintenance release

Build

• Use TypeScript v5.2.2 now, was v5.1.6 (via #1218)

Misc

• Raised dependency @cyclonedx/cyclonedx-library@^5||^6, was @^5 (via #1214)

---

Full Changelog: v3.8.1...v3.8.2

3.8.1

Maintenance release

Misc

• Raised dependency normalize-package-data@^3||^4||^5||^6, was @^3||^4||^5 (via #1194)

---

Full Changelog: v3.8.0...v3.8.1

3.8.0

Added

• SBOM results are marked to be produced in lifecycle phase "build" (#1173 via #1188)

Misc

• Raised dependency @cyclonedx/cyclonedx-library@^5, was @^3||^4 (via #1188)

---

Full Changelog: v3.7.0...v3.8.0

3.7.0

Added support for CycloneDX Specification-1.5.

Changed

• This tool supports CycloneDX Specification-1.5 now (#1001 via #1021)
• This tool warns now, if SBOM generation is skipped due to an unsupported value for option specVersion (via #1021)
  Previous behaviour was a silent skip.

Added

• Option specVersion now supports value 1.5 to reflect CycloneDX Specification-1.5 (#1001 via #1021)
  Default value for that option is unchanged - still 1.4.

Build

• Use TypeScript v5.1.6 now, was v5.1.3 (via #1017)

Misc

• Raised dependency @cyclonedx/cyclonedx-library@^3||^4, was @^2.0.0 (#1001 via #1021)

---

Full Changelog: v3.6.1...v3.7.0

3.6.1

Maintenance release

Build

• Use TypeScript v5.1.3 now, was v5.0.4 (via #934)
• Disabled TypeScript compilerOption esModuleInterop (via #892)
• Disabled TypeScript compilerOption allowSyntheticDefaultImports (via #892)

Misc

• Improved internal type-compatibility to webpack (via #980)

---

Full Changelog: v3.6.0...v3.6.1