v0.9.4

Updates in this release

Fixes

• fix: improved service component processing for CycloneDX

v0.9.3

Updates in this release

Fixes

• fix: convert sbom types between SPDX and CycloneDX
• fix: update licence list (fixes #76)

v0.9.2

Updates in this release

Fixes

• fix: distributionConstraints
• fix: default licence type (fixes #75)

v0.9.1

Updates in this release

Fixes

• doc: update suported Python version (fixes #72)
• fix: add SBOM validation debug
• fix: Invalid CycloneDX SHA algorithm specified (fixes #73)

v0.9.0

Updates in this release

New features

• feat: add support for CycloneDX 1.7
• feat: add support for parsing SPDX documents in in-toto statements

Fixes

• doc: update README
• fix: update SPDX validation

v0.8.8

Updates in this release

New features

• feat: optimised CycloneDX JSON schema validation

Fixes

• chore: bump version

v0.8.7

Updates in this release

Fixes

• fix: CycloneDX validation fails (fixes #70)
• fix: detect CBOM

v0.8.6

Updates in this release

New features

• Merge pull request #65 from trueserjo/main

v0.8.5

Updates in this release

New features

• feat: Add SBOM validation (fixes #69)
• feat: Add support for protobom SPDX file from GitHub DependencyGraph REST API
• feat: Update SPDX license list to version 3.26

Fixes

• fix: handling optional modelcard data
• fix: improved handling of license expressions
• fix: license handling of non-SPDX licenses (fixes #68)
• fix: new license synonyms

v0.8.4

Updates in this release

Fixes

• fix: handle missing release_date
• fix: lifecycle value not set (fixes #66)