v4.0.0

Feature

• Release 4.0.0 #341) (8fb1b14)

Breaking

• Large portions of this library have been re-written for this release and many methods and contracts have changed. (8fb1b14)
• Model classes changed to relocated Vulnerability at Bom, not at Component (8fb1b14)
• Model classes changed to relocated Vulnerability at Bom, not at Component (8fb1b14)
• (8fb1b14)

v3.1.5

Fix

• Mak test's schema paths relative to cyclonedx package (#338) (1f0c05f)

v3.1.4

Fix

• tests: Include tests in sdist builds (#337) (936ad7d)

v3.1.3

Fix

• Serialize dependency graph for nested components (#329) (fb3f835)

v3.1.2

Fix

• Prevent errors on metadata handling for some specification versions (#330) (f08a656)

Documentation

• Typo (539b57a)
• Fix shields (#324) (555dad4)
• Fix typo (#318) (63bfb87)

v3.1.1

Fix

• Type hint for get_component_by_purl is incorrect (3f20bf0)

v3.1.0

Feature

• Out-factor SPDX compound detection (fd4d537, 2b69925)
• License factories (033bad2)

---

Note: There was no 3.0.0 release officially, but due to CI publishing issues, an unexpected 3.0.0 release was publiched to PyPi and subsequently yanked from PyPi. There are NO breaking changes between 2.7.1 and 3.1.0.

v2.7.1

What's Changed

• chore(deps-dev): bump flake8-isort from 4.1.1 to 4.1.2.post0 by @dependabot in #280
• fix: BOM validation fails when Components or Services are nested by @madpah in #276

Full Changelog: v2.7.0...v2.7.1

v2.7.0

What's Changed

• feature: support for CycloneDX schema 1.4.2 - adds vulnerability.properties to the schema by @madpah in #273

Full Changelog: v2.6.0...v2.7.0

v2.6.0

Feature

• Reduce unnessessarry type casting of set/SortedSet (#203) (089d971)