Skip to content

Releases: CycloneDX/cyclonedx-javascript-library

8.2.0

05 Jun 10:41

Choose a tag to compare

Added

  • factories.FromNodePackageJson.makeExternalReferences() supports "dist" field (#1247 via #1246)
  • New symbols under utils.NpmjsUtility (via #1246)
    • defaultRegistryMatcher
    • parsePackageIntegrity

What's Changed

Full Changelog: v8.1.0...v8.2.0

8.1.0

04 Jun 04:47

Choose a tag to compare

Support for Node.js v24.

Dependencies

  • Support libxmljs2@^0.35||^0.37, was @^0.35 (via #1243)

Build

  • Use TypeScript v5.8.3 now, was v5.8.2 (via #1227)
  • Use webpack v5.99.6 now, was v5.98.0 (via #1229, #1231)

Misc

  • CI/CT: test also with Node.js v24 (via #1244)

What's Changed

  • chore(deps): bump the typedoc group across 1 directory with 2 updates by @dependabot in #1222
  • style: apply neostandard to JS files by @jkowalleck in #1224
  • chore(deps): bump the eslint group across 1 directory with 4 updates by @dependabot in #1225
  • chore(deps-dev): bump typescript from 5.8.2 to 5.8.3 in the typescript group across 1 directory by @dependabot in #1227
  • chore(deps): bump typescript-eslint from 8.29.0 to 8.29.1 in /tools/code-style in the eslint group across 1 directory by @dependabot in #1228
  • chore(deps-dev): bump webpack from 5.98.0 to 5.99.5 in the webpack group across 1 directory by @dependabot in #1229
  • chore(deps): bump the eslint group across 1 directory with 2 updates by @dependabot in #1230
  • chore(deps-dev): bump npm-run-all2 from 7.0.2 to 8.0.1 by @dependabot in #1234
  • chore(deps-dev): bump mocha from 11.1.0 to 11.2.2 in the mocha group across 1 directory by @dependabot in #1233
  • chore(deps): bump the eslint group across 1 directory with 3 updates by @dependabot in #1232
  • chore(deps-dev): bump mocha from 11.2.2 to 11.3.0 in the mocha group across 1 directory by @dependabot in #1236
  • chore(deps-dev): bump mocha from 11.3.0 to 11.4.0 in the mocha group across 1 directory by @dependabot in #1238
  • chore(deps): bump the eslint group across 1 directory with 5 updates by @dependabot in #1237
  • chore: add workflow permissions by @jkowalleck in #1241
  • chore(deps-dev): bump mocha from 11.4.0 to 11.5.0 in the mocha group across 1 directory by @dependabot in #1239
  • chore(deps): bump the eslint group across 1 directory with 2 updates by @dependabot in #1242
  • ci: use node24 by @jkowalleck in #1244
  • feat: support libxmljs2 0.37 by @jkowalleck in #1243
  • chore(deps-dev): bump webpack from 5.99.5 to 5.99.6 in the webpack group across 1 directory by @dependabot in #1231
  • chore(deps): bump the eslint group across 1 directory with 3 updates by @dependabot in #1245

Full Changelog: v8.0.0...v8.1.0

8.0.1-alpha.1

26 May 11:11

Choose a tag to compare

8.0.1-alpha.1 Pre-release
Pre-release
Signed-off-by: jkowalleck <[email protected]>

8.0.0

17 Mar 08:06

Choose a tag to compare

BREAKING Changes

  • Dropped support for node<20.18.0 (#1081 via #1209)

Refactor

  • Imports of built-in modules are prefixed with node: (#1198 via #1210)

Build

  • Use TypeScript v5.8.2 now, was v5.7.2 (via #1204, #1217)
  • Use webpack v5.98.0 now, was v5.97.1 (via #1213)

What's Changed

  • chore(deps-dev): bump typescript from 5.7.2 to 5.7.3 in the typescript group across 1 directory by @dependabot in #1204
  • feat: drop support for node <20.18 by @jkowalleck in #1209
  • chore(deps-dev): bump ts-loader from 9.5.1 to 9.5.2 in the typescript group across 1 directory by @dependabot in #1206
  • refactor: prefix native module imports with node: by @jkowalleck in #1210
  • chore(deps-dev): bump webpack from 5.97.1 to 5.98.0 in the webpack group across 1 directory by @dependabot in #1213
  • chore(deps): bump the eslint group across 1 directory with 4 updates by @dependabot in #1212
  • chore(deps): bump globals from 15.15.0 to 16.0.0 in /tools/code-style by @dependabot in #1215
  • chore(deps-dev): bump typescript from 5.7.3 to 5.8.2 in the typescript group across 1 directory by @dependabot in #1217
  • chore(deps): bump the eslint group across 1 directory with 7 updates by @dependabot in #1219
  • chore: cleanup dev-deps by @jkowalleck in #1220

Full Changelog: v7.1.0...v8.0.0

8.0.0-rc.0

14 Feb 12:31

Choose a tag to compare

8.0.0-rc.0 Pre-release
Pre-release

BREAKING Changes

  • Dropped support for node<20.18.0 (#1081 via #1209)

Refactor

  • Imports of built-in modules are prefixed with node: (#1198 via #1210)

Build

  • Use TypeScript v5.7.3 now, was v5.7.2 (via #1204)
  • Use webpack v5.98.0 now, was v5.97.1 (via #1213)

What's Changed

  • chore(deps-dev): bump typescript from 5.7.2 to 5.7.3 in the typescript group across 1 directory by @dependabot in #1204
  • feat: drop support for node <20.18 by @jkowalleck in #1209
  • chore(deps-dev): bump ts-loader from 9.5.1 to 9.5.2 in the typescript group across 1 directory by @dependabot in #1206
  • refactor: prefix native module imports with node: by @jkowalleck in #1210
  • chore(deps-dev): bump webpack from 5.97.1 to 5.98.0 in the webpack group across 1 directory by @dependabot in #1213
  • chore(deps): bump the eslint group across 1 directory with 4 updates by @dependabot in #1212

Full Changelog: v7.1.0...v8.0.0-rc.0

7.1.0

09 Jan 10:01

Choose a tag to compare

Added

  • New type Models.Copyright and class Models.CopyrightRepository (via #1202)
  • New type Models.AttachmentContent (via #1202)

Changed

  • Replace usage of internals Stringable & SortableStringables with public API (#1192 via #1202)
    This is considered a non-breaking change, as the types are not changed, but made publicly available.

Style

  • Apply latest code style guide (via #1201)

Misc


What's Changed

  • chore(deps): bump typedoc from 0.26.11 to 0.27.2 in /tools/docs-gen in the typedoc group across 1 directory by @dependabot in #1186
  • chore(deps-dev): bump webpack from 5.96.1 to 5.97.1 in the webpack group across 1 directory by @dependabot in #1187
  • dont use internal types/classes in public API by @jkowalleck in #1202
  • ci: use npm11 by @jkowalleck in #1203
  • chore(deps-dev): bump webpack-cli from 5.1.4 to 6.0.1 in the webpack group across 1 directory by @dependabot in #1194
  • chore(deps-dev): bump mocha from 10.8.2 to 11.0.1 in the mocha group across 1 directory by @dependabot in #1188
  • chore(deps): bump the eslint group across 1 directory with 6 updates by @dependabot in #1201

Full Changelog: v7.0.0...v7.1.0

6.13.1

22 Dec 14:44

Choose a tag to compare

Dependencies

  • Support libxmljs2@^0.35 (via #1196)

What's Changed

Full Changelog: v6.13.0...v6.13.1

7.0.0

26 Nov 13:46

Choose a tag to compare

BREAKING changes

  • Property Models.Bom.tools is an instance of Models.Tools now (#1152 via #1163)
    Before, it was an instance of Models.ToolRepository.
  • Property Models.Vulnerability.tools is an instance of Models.Tools now (via #1163)
    Before, it was an instance of Models.ToolRepository.

Added

  • Static function Models.Tool.fromComponent() (via #1163)
  • Static function Models.Tool.fromService() (via #1163)
  • New class Models.Tools (#1152 via #1163)
  • New serialization/normalization for Models.Tools (#1152 via #1163, #1180)

Changed

  • Serializers and Bom-Normalizers will take changed Models.Bom.tools into account (#1152 via #1163)
  • Serializers and Vulnerability-Normalizers will take changed Models.Vulnerability.tools into account (via #1163)

Style

  • Apply latest code style guide (via #1170, #1181)

Dependencies

  • Support libxmljs2@^0.35 (via #1173)
  • Use packageurl-js@^2.0.1, was @>=0.0.6 <0.0.8 || ^1 (via #1142)

Build

  • Use TypeScript v5.7.2 now, was v5.6.3 (via #1182)

What's Changed

Full Changelog: v6.13.0...v7.0.0

7.0.0-beta.2

20 Nov 15:34

Choose a tag to compare

7.0.0-beta.2 Pre-release
Pre-release

What's Changed

Full Changelog: v7.0.0-beta.1...v7.0.0-beta.2

7.0.0-beta.1

19 Nov 12:34

Choose a tag to compare

7.0.0-beta.1 Pre-release
Pre-release

BREAKING changes

  • Property Models.Bom.tools is an instance of Models.Tools now (#1152 via #1163)
    Before, it was an instance of Models.ToolRepository.

Added

  • Static function Models.Tool.fromComponent() (via #1163)
  • Static function Models.Tool.fromService() (via #1163)
  • New class Models.Tools (#1152 via #1163)
  • New serialization/normalization for Models.Tools (#1152 via #1163)

Changed

  • Serializers and Bom-Normalizers will take changed Models.Bom.tools into account (#1152 via #1163)

Dependencies

  • Support libxmljs2@^0.35 (via #1173)
  • Use packageurl-js@^2.0.1, was @>=0.0.6 <0.0.8 || ^1 (via #1142)

What's Changed

Full Changelog: v6.13.0...v7.0.0-beta.1