CycloneDX/cyclonedx-python-lib v11.6.0

on GitHub

v11.6.0 (2025-12-02)

Features

• Moved non‑standard implementations to Contrib area (#916, 15a9023)
  • Added
    • New sub-package contrib.
  • Changed
    • Moved non‑standard implementations to Contrib area.
  • Deprecated
    • Certain exports have been deprecated; downstream imports should be updated to the new locations.
      Note: the symbols themselves remain supported. See documentation and the "Refactored" section below for details.
    • Some (trivial) non-standard functionality was deprecated:
      • model.bom.Bom.get_component_by_purl()
      • model.bom.Bom.get_urn_uuid()
      • model.bom.Bom.has_component()
      • model.bom.Bom.get_vulnerabilities_for_bom_ref()
      • model.bom.Bom.has_vulnerabilities()
      • model.bom.Bom.urn()
  • Refactored
    • The following symbols were moved.
      The symbols are still import-able through their old location.
      • OLD -> NEW
      • builder.this.this_component() -> contrib.this.builders.this_component()
      • builder.this.this_tool() -> contrib.this.builders.this_tool()
      • exception.factory.* -> contrib.license.exceptions.*
      • factory.license.LicenseFactory -> contrib.license.factories.LicenseFactory
      • model.HashType.from_hashlib_alg() -> contrib.hash.factories.HashTypeFactory.from_hashlib_alg()
      • model.HashType.from_composite_str() -> contrib.hash.factories.HashTypeFactory.from_composite_str()
      • model.component.Component.for_file() -> contrib.component.builders.ComponentBuilder.make_for_file()
      • model.vulnerability.VulnerabilitySeverity.get_from_cvss_scores() -> contrib.vulnerability.cvss.vs_from_cvss_scores()

What's Changed

• chore(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in #915
• chore(deps-dev): update mypy requirement from 1.18.2 to 1.19.0 by @dependabot[bot] in #918
• docs: update 1.7 by @jkowalleck in #920
• feat: Moved non‑standard implementations to Contrib area by @jkowalleck in #916

Full Changelog: v11.5.0...v11.6.0