Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix(deps): update module github.com/cyclonedx/cyclonedx-go to v0.9.1 #4593

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

fix(deps): update module github.com/cyclonedx/cyclonedx-go to v0.9.1 #4593

wants to merge 1 commit into from
+3 −1

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Sep 22, 2023 •
edited
Loading

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
github.com/CycloneDX/cyclonedx-go v0.6.0 -> v0.9.1 age adoption passing confidence

Release Notes

CycloneDX/cyclonedx-go (github.com/CycloneDX/cyclonedx-go)

v0.9.1

Compare Source

Changelog

Fixes
Building and Packaging

v0.9.0

Compare Source

Changelog

Features
Fixes
Building and Packaging
Others

v0.8.0

Compare Source

This release ships with almost complete support for v1.5 of the CycloneDX specification.

The only exception being the extended data flow support, as used in SaaS BOMs.

Unfortunately, there are also breaking changes in this release:

  • The type of Metadata.Tools has changed from *[]Tool to *ToolsChoice, to facilitate the deprecation of Tool in the spec
    • ToolsChoice holds both legacy *[]Tool, as well as the new *[]Component and *[]Service fields
    • The Tool type, as well as the ToolsChoice.Tools field are marked as deprecated
    • During encoding and decoding, it is asserted that only one of both options can be present, in accordance with the "One of" constraint of the spec
    • When encoding to lower spec versions than v1.5 (using EncodeVersion), Components and Services are automatically converted to legacy Tools
    • It is strongly recommended to use Components and Services. However, when consuming BOMs, applications should still expect legacy Tools to be present, and handle them accordingly.

Changelog

Fixes
Building and Packaging
Others

v0.7.2

Compare Source

This is a bugfix release that ships with minimal support for the CycloneDX v1.5 specification.

Full support is being worked on and planned to be released soon. The progress may be tracked in #​90.

The reason for publishing partial support like this is to allow the consumption of v1.5 BOMs, which fails with cyclonedx-go <= v0.7.1.

Warning
The default SpecVersion has been updated to SpecVersion1_5. If your application generates BOMs, and you're not ready (or willing) to distribute BOMs following the v1.5 specification yet, consider using EncodeVersion to generate output for an older version of the spec.

Changelog

Features
Fixes
Building and Packaging
Others

v0.7.1

Compare Source

Changelog

Features
Fixes
Building and Packaging
Others

v0.7.0

Compare Source

Changelog

Features
Fixes
Building and Packaging
Documentation
Others

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from a team as a code owner September 22, 2023 07:27
@renovate renovate bot force-pushed the renovate/github.com-cyclonedx-cyclonedx-go-0.x branch 7 times, most recently from a1b68f9 to aa8f9df Compare September 29, 2023 12:06
@renovate renovate bot force-pushed the renovate/github.com-cyclonedx-cyclonedx-go-0.x branch 10 times, most recently from 5eb1d6d to c4006e4 Compare October 11, 2023 09:31
@renovate renovate bot force-pushed the renovate/github.com-cyclonedx-cyclonedx-go-0.x branch 9 times, most recently from abbdb79 to cb98f31 Compare October 19, 2023 19:08
@renovate renovate bot force-pushed the renovate/github.com-cyclonedx-cyclonedx-go-0.x branch 3 times, most recently from 9ebb98f to 61572cc Compare October 30, 2023 11:46
@renovate renovate bot force-pushed the renovate/github.com-cyclonedx-cyclonedx-go-0.x branch 10 times, most recently from c95105c to 35aec8a Compare October 29, 2024 07:47
@renovate renovate bot force-pushed the renovate/github.com-cyclonedx-cyclonedx-go-0.x branch 5 times, most recently from c8eb141 to 9431974 Compare November 6, 2024 10:55
@renovate renovate bot force-pushed the renovate/github.com-cyclonedx-cyclonedx-go-0.x branch 3 times, most recently from eb23f4c to 2d8a5dd Compare November 12, 2024 11:38
@renovate renovate bot force-pushed the renovate/github.com-cyclonedx-cyclonedx-go-0.x branch 4 times, most recently from 093b336 to b174b47 Compare November 22, 2024 13:12
@renovate renovate bot force-pushed the renovate/github.com-cyclonedx-cyclonedx-go-0.x branch 5 times, most recently from 1918b62 to 3d305d9 Compare November 27, 2024 13:02
@renovate renovate bot force-pushed the renovate/github.com-cyclonedx-cyclonedx-go-0.x branch from 3d305d9 to 30c2d85 Compare November 27, 2024 14:59
@sonarcloud SonarCloud
Copy link

sonarcloud bot commented Nov 27, 2024

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants