BREAKING Changes
- CLI option
--spec-versiondefaults to1.7, was1.6(#1534 via #1533) - Removed optional dependencies for optional features from package manifest (#1528 via #1529)
Validation and XML output require their respective optional peer dependencies to be installed.
Users are responsible for installing the optional peer dependencies required by the features they intend to use.
See the underlying library’s optional peer dependencies documentation.
Changed
- Validation enforcement and detection (via #1529)
Dependencies
- Bumped dependency
@cyclonedx/cyclonedx-library@^10.4.0now, was@^10.0.0(via #1529)
What's Changed
- tests: upgrade snapshots for CycloneDX-lib 10.2 by @jkowalleck in #1511
- chore(deps): bump knip from 6.31.0 to 6.41.0 in /tools/test-dependencies by @dependabot[bot] in #1525
- chore(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 by @dependabot[bot] in #1524
- chore(deps): bump actions/download-artifact from 8.0.1 to 8.0.2 by @dependabot[bot] in #1523
- chore(deps): bump actions/setup-node from 7.0.0 to 7.1.0 by @dependabot[bot] in #1522
- chore(deps): bump zizmorcore/zizmor-action from 0.6.2 to 0.6.4 by @dependabot[bot] in #1517
- chore(deps-dev): bump jest from 30.4.2 to 30.5.0 in the jest group across 1 directory by @dependabot[bot] in #1512
- chore(deps-dev): bump jest from 30.5.0 to 30.5.2 in the jest group across 1 directory by @dependabot[bot] in #1527
- chore(deps): bump zizmorcore/zizmor-action from 0.6.4 to 0.7.1 by @dependabot[bot] in #1526
- ci: use envvars, not mixin-literals by @jkowalleck in #1530
- feat: spec-version defaults to CycloneDX 1.7 by @jkowalleck in #1533
- feat!: dont install dependencies for optional features by @jkowalleck in #1529
- chore(deps): bump knip from 6.41.0 to 6.44.1 in /tools/test-dependencies by @dependabot[bot] in #1535
- chore(deps): bump zizmorcore/zizmor-action from 0.7.1 to 0.8.0 by @dependabot[bot] in #1531
Full Changelog: v6.0.1...v7.0.0