12.0.1

Fix permissions issue for GitHub OIDC

Signed-off-by: Patrick Dwyer <email@patrickdwyer.au>

12.0.0

What's Changed

• Convert a SPDX purl externalReference into the item level purl field by @dgl in #394
• Fix json serialization of rating by @andreas-hilti in #403
• Fix SPDX checksum algorithm conversion by @andreas-hilti in #407
• Make email optional when converting from SPDX by @andreas-hilti in #408
• Avoid license without name when converting SPDX by @andreas-hilti in #409
• Convert a SPDX cpe externalReference into the item level cpe field by @andreas-hilti in #410
• Merge annotations by @andreas-hilti in #411
• Fix outdated test snapshots by @coderpatros in #422
• Fix merge of definitions and declarations by @andreas-hilti in #412
• Fix empty licenses in SPDX conversion by @andreas-hilti in #405
• Update dependencies and fix thread-safety in JSON schema validation by @coderpatros in #423
• Target netstandard2.0, net8.0 and net10.0 by @coderpatros in #425
• Update readme by @andreas-hilti in #424
• chore(deps): bump actions/checkout from 3 to 6 by @dependabot[bot] in #414
• chore(deps): bump actions/setup-dotnet from 4 to 5 by @dependabot[bot] in #400

New Contributors

• @dgl made their first contribution in #394

Full Changelog: v11.0.0...v12.0.0

11.0.0

What's Changed

• Update SPDX license schemas to v3.27.0 by @nodeax in #421
• Initial implementation of v1.7 by @coderpatros in #420

Full Changelog: v10.0.2...v11.0.0

10.0.2

What's Changed

• Update SPDX license schemas to v3.26.0 by @ricjsan in #401
• Spdx license update by @coderpatros in #417

New Contributors

• @ricjsan made their first contribution in #401

Full Changelog: v10.0.1...v10.0.2

10.0.1

What's Changed

• fix(spdx): adds support for reading ReferenceCategories with hyphens by @andreas-hilti in #396
• Fix deserializing ToolChoices with empty xml elements by @andreas-hilti in #397
• Fix empty lists in xml deserialization by @andreas-hilti in #395

Full Changelog: v10.0.0...v10.0.1

10.0.0

What's Changed

• Add support for SPDX v2.3 by @CarolinaOliiveira in #353

New Contributors

• @CarolinaOliiveira made their first contribution in #353

Full Changelog: v9.0.3...v10.0.0

9.0.3

What's Changed

• Improve merge performance by @andreas-hilti in #393

Full Changelog: v9.0.2...v9.0.3

9.0.2

Update semver.txt

Signed-off-by: Michael Tsfoni <80639729+mtsfoni@users.noreply.github.com>

9.0.1

Update semver.txt

Signed-off-by: Michael Tsfoni <80639729+mtsfoni@users.noreply.github.com>

9.0.0 (CycloneDX v1.6.1)

What's Changed

• BREAKING CHANGE: Support for CycloneDX 1.6.1 by @andreas-hilti in #370
  The library has been updated to align with the CycloneDX 1.6.1 specification. This version includes refinements over 1.6.0 and may introduce changes to BOM serialization and validation behavior. Please review the 1.6.1 spec for detailed impact.
• Fix sensitiveData handling (now correctly an array) by @andreas-hilti in #379
• Fix vulnerability.status enum mapping by @andreas-hilti in #381
• Expose SerializerOptions for JSON customization by @mtsfoni in #386

Full Changelog: v8.0.3...v9.0.0