An open API service for providing issue and pull request metadata for open source projects.

GitHub / CycloneDX/cyclonedx-python-lib issues and pull requests

#849 - chore(deps-dev): update bandit requirement from 1.8.5 to 1.8.6

Pull Request - State: closed - Opened by dependabot[bot] 18 days ago
Labels: dependencies

#848 - chore: dependency tests in CI/CT

Pull Request - State: closed - Opened by jkowalleck 22 days ago - 1 comment
Labels: dependencies, QA, chore

#847 - chore: add QA to detect missing runtime dependencies

Issue - State: closed - Opened by jkowalleck 22 days ago - 1 comment
Labels: dependencies, QA

#846 - fix: added runtime dependnecy `referencing>=0.28.4"`

Pull Request - State: closed - Opened by jkowalleck 22 days ago - 2 comments
Labels: bug

#845 - fix: add runtime dependnecy `typing_extensions>=4.6; python_version<"3.13"`

Pull Request - State: closed - Opened by jkowalleck 22 days ago - 2 comments
Labels: bug

#844 - Missing dependency: typing_extensions not listed in pyproject.toml

Issue - State: closed - Opened by eugenhoffmann 22 days ago - 2 comments
Labels: bug

#843 - fix: removed meaningless pattern checks for CycloneDX 1.2 JSON schema

Pull Request - State: closed - Opened by jkowalleck 22 days ago - 2 comments
Labels: bug

#841 - chore(deps-dev): update coverage requirement from 7.9.1 to 7.9.2

Pull Request - State: closed - Opened by dependabot[bot] 25 days ago
Labels: dependencies

#840 - feat: validators return specific error classes

Pull Request - State: closed - Opened by jkowalleck 27 days ago - 2 comments
Labels: enhancement

#839 - feat: decorate deprecated symbols

Pull Request - State: closed - Opened by KAWAHARA-souta 28 days ago - 4 comments

#838 - fix: issue `DeprecationWarnings` for deprecated properties properly

Pull Request - State: closed - Opened by KAWAHARA-souta 28 days ago - 2 comments
Labels: bug

#837 - fix: display DeprecationWarnings for deprecated properties properly

Issue - State: closed - Opened by KAWAHARA-souta 28 days ago - 1 comment
Labels: bug

#836 - [WIP] feat!: useful validation errors

Pull Request - State: open - Opened by jkowalleck 29 days ago - 1 comment
Labels: breaking change

#835 - chore(deps): update lxml requirement from >=4,<6 to >=4,<7

Pull Request - State: closed - Opened by dependabot[bot] about 1 month ago
Labels: dependencies

#834 - feat: schema based validation may return iterable of all errors

Pull Request - State: closed - Opened by e3krisztian about 1 month ago - 5 comments

#833 - chore: update precommit hook

Pull Request - State: closed - Opened by jkowalleck about 1 month ago - 1 comment
Labels: chore

#832 - chore(deps-dev): update tox requirement from 4.26.0 to 4.27.0

Pull Request - State: closed - Opened by dependabot[bot] about 1 month ago
Labels: dependencies

#831 - chore(deps-dev): update mypy requirement from 1.16.0 to 1.16.1

Pull Request - State: closed - Opened by dependabot[bot] about 1 month ago
Labels: dependencies

#830 - chore(deps-dev): update bandit requirement from 1.8.3 to 1.8.5

Pull Request - State: closed - Opened by dependabot[bot] about 1 month ago
Labels: dependencies

#829 - chore(deps-dev): update flake8 requirement from 7.2.0 to 7.3.0

Pull Request - State: closed - Opened by dependabot[bot] about 1 month ago
Labels: dependencies

#828 - feat: extend validation interface with new method to iterate over all the problems

Issue - State: open - Opened by e3krisztian about 1 month ago - 3 comments
Labels: enhancement, help wanted

#827 - Validation errors are hard to present safely to the user (missing abstraction)

Issue - State: open - Opened by e3krisztian about 1 month ago - 6 comments
Labels: enhancement, help wanted

#826 - chore(deps): bump python-semantic-release/python-semantic-release from 10.0.2 to 10.1.0

Pull Request - State: closed - Opened by dependabot[bot] about 2 months ago - 1 comment
Labels: dependencies

#825 - chore(deps-dev): update coverage requirement from 7.8.2 to 7.9.1

Pull Request - State: closed - Opened by dependabot[bot] about 2 months ago
Labels: dependencies

#824 - fix: `VulnerabilityScoreSource.get_from_vector()` for `CVSS_V3_1` and `CVSS_V4`

Pull Request - State: closed - Opened by jkowalleck about 2 months ago - 2 comments
Labels: bug

#823 - feat: Pulled SPDX license IDs v1.0-3.26.0

Pull Request - State: closed - Opened by jkowalleck about 2 months ago - 1 comment
Labels: enhancement

#822 - style: pyupgrade 3.9

Pull Request - State: closed - Opened by jkowalleck about 2 months ago - 1 comment
Labels: chore

#821 - VulnerabilityScoreSource.get_from_vector() does not return CVSS_V3_1 and CVSS_V4

Issue - State: closed - Opened by DerDakon about 2 months ago - 6 comments
Labels: question

#820 - style: shorten typehint-ignores

Pull Request - State: closed - Opened by jkowalleck about 2 months ago - 1 comment

#819 - chore(deps): bump python-semantic-release/publish-action from 9 to 10

Pull Request - State: closed - Opened by dependabot[bot] about 2 months ago
Labels: dependencies

#818 - chore(deps): bump python-semantic-release/python-semantic-release from 9.21.1 to 10.0.2

Pull Request - State: closed - Opened by dependabot[bot] about 2 months ago - 2 comments
Labels: dependencies

#817 - fix: `model.BomMetaData.component` setter typehint

Pull Request - State: closed - Opened by dependabot[bot] about 2 months ago - 1 comment
Labels: dependencies

#816 - chore(deps-dev): update coverage requirement from 7.8.0 to 7.8.2

Pull Request - State: closed - Opened by dependabot[bot] 2 months ago
Labels: dependencies

#815 - chore(deps-dev): update tox requirement from 4.25.0 to 4.26.0

Pull Request - State: closed - Opened by dependabot[bot] 2 months ago
Labels: dependencies

#814 - chore: GH workflow permissions

Pull Request - State: closed - Opened by jkowalleck 3 months ago - 1 comment
Labels: chore

#813 - chore(deps): bump python-semantic-release/python-semantic-release from 9.21.0 to 9.21.1

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago
Labels: dependencies

#812 - fix: Add missing comparator for VulnerabilityAnalysis

Pull Request - State: closed - Opened by haklir 3 months ago
Labels: bug

#811 - chore(deps-dev): update pep8-naming requirement from 0.14.1 to 0.15.1

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago - 1 comment
Labels: dependencies

#810 - feat: add support for component's evidences according to spec

Pull Request - State: closed - Opened by OxPirates 3 months ago - 12 comments
Labels: schema 1.5

#809 - feat!: drop support for Python <3.9

Pull Request - State: closed - Opened by Simoh23999 3 months ago - 5 comments
Labels: enhancement, breaking change

#806 - Bug: JSON Output Not Sorted According to CycloneDX JSON Reference

Issue - State: closed - Opened by klim-2n 4 months ago - 1 comment

#805 - feat!: drop support for end-of-life python versions

Issue - State: closed - Opened by jkowalleck 4 months ago - 2 comments
Labels: enhancement, breaking change

#804 - Importing a dependency tree seems to remove info

Issue - State: closed - Opened by robertlagrant 4 months ago - 2 comments

#803 - chore(deps-dev): update tox requirement from 4.24.2 to 4.25.0

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies

#802 - ci: test macos latest

Pull Request - State: closed - Opened by jkowalleck 4 months ago - 1 comment
Labels: CI

#801 - feat: add `models.OrganizationalEntity.bom_ref`

Pull Request - State: open - Opened by Yowgf 5 months ago - 2 comments

#799 - model.contact.OrganizationalEntity missing bom_ref attribute

Issue - State: open - Opened by Yowgf 5 months ago - 3 comments
Labels: enhancement, help wanted, schema 1.6

#798 - chore(deps-dev): update tox requirement from 4.24.1 to 4.24.2

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago
Labels: dependencies

#797 - chore(deps): bump python-semantic-release/python-semantic-release from 9.1.1 to 9.21.0

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 2 comments
Labels: dependencies

#796 - chore: use 'python-semantic-release/publish-action'

Pull Request - State: open - Opened by indiVar0508 5 months ago

#795 - fix: improved comparison functionality of `model.VulnerabilityAnalysis`

Pull Request - State: closed - Opened by jkowalleck 5 months ago - 1 comment
Labels: bug

#794 - feat: VulnerabilityAnalysis properties for issued/updated datetime

Pull Request - State: closed - Opened by indiVar0508 5 months ago - 1 comment
Labels: enhancement

#792 - fix!: `VulnerabilityReference` all props mandatory

Pull Request - State: closed - Opened by jkowalleck 5 months ago - 1 comment
Labels: bug, breaking change

#791 - feat: `VulnerabilityAnalysis` properties for issued/updated datetime

Issue - State: closed - Opened by jkowalleck 5 months ago - 1 comment
Labels: enhancement, schema 1.5

#790 - fix: make VulnerabilityReference arguments mandatory

Issue - State: closed - Opened by indiVar0508 5 months ago - 5 comments
Labels: bug, help wanted, breaking change

#789 - chore(deps): bump python-semantic-release/python-semantic-release from 9.1.1 to 9.20.0

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 1 comment
Labels: dependencies

#788 - chore(deps-dev): update flake8 requirement from 7.1.1 to 7.1.2

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago
Labels: dependencies

#787 - tags from document are not exported to json files

Issue - State: closed - Opened by ycollet 5 months ago - 6 comments
Labels: question

#786 - feat: avoid raising `NoPropertiesProvidedException` for optional parameters

Pull Request - State: closed - Opened by indiVar0508 5 months ago - 7 comments
Labels: enhancement

#785 - chore(deps): update py-serializable requirement from ^1.1.1 to >=1.1.1,<3.0.0

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 1 comment
Labels: dependencies

#784 - chore(deps): bump python-semantic-release/python-semantic-release from 9.1.1 to 9.19.1

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 1 comment
Labels: dependencies

#783 - docs: extended instructions for "contributing"

Pull Request - State: closed - Opened by jkowalleck 6 months ago - 1 comment
Labels: documentation

#782 - tests: revisit `spdx.is_expression()`

Pull Request - State: closed - Opened by jkowalleck 6 months ago - 2 comments
Labels: QA

#781 - SPDX: revisit `is_expression`

Issue - State: closed - Opened by jkowalleck 6 months ago - 2 comments
Labels: question, QA

#780 - refactor: streamline hash compare 2

Pull Request - State: closed - Opened by jkowalleck 6 months ago - 4 comments

#779 - refactor: rename `spdx.is_compund_expression` -> `spdx.is_expression`

Pull Request - State: closed - Opened by jkowalleck 6 months ago - 3 comments
Labels: breaking change

#778 - tests: simplify tests for `crypto_refs`

Pull Request - State: closed - Opened by jkowalleck 6 months ago - 1 comment
Labels: QA

#777 - feat!: 9.0.1

Pull Request - State: closed - Opened by jkowalleck 6 months ago - 2 comments
Labels: bug, enhancement, dependencies, breaking change

#776 - feat: no longer throw unexpected `NoPropertiesProvidedException`

Issue - State: closed - Opened by jkowalleck 6 months ago - 3 comments
Labels: enhancement

#775 - chore(deps)!: `py-serializable==^1.1.1` -> `^2.0.0`

Pull Request - State: closed - Opened by jkowalleck 6 months ago - 6 comments
Labels: dependencies, breaking change

#774 - chore(deps): bump python-semantic-release/python-semantic-release from 9.1.1 to 9.18.1

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago - 1 comment
Labels: dependencies

#772 - feat: allow empty `OrganizationalContact` object

Pull Request - State: closed - Opened by Churro 6 months ago - 2 comments
Labels: enhancement

#770 - chore: tools shebang

Pull Request - State: closed - Opened by jkowalleck 6 months ago - 1 comment
Labels: chore

#769 - chore(deps): bump python-semantic-release/python-semantic-release from 9.1.1 to 9.17.0

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago - 1 comment
Labels: dependencies

#768 - feat: allow empty `OrganizationalEntity` object

Pull Request - State: closed - Opened by Churro 6 months ago - 2 comments

#767 - feat: add `cyclonedx.model.crypto.ProtocolProperties.crypto_refs`

Pull Request - State: closed - Opened by indiVar0508 6 months ago - 15 comments
Labels: enhancement, schema 1.6

#766 - Wrong input should result into an exception

Issue - State: open - Opened by Joerki 6 months ago - 2 comments
Labels: breaking change

#765 - SPDX is_compound_expression does not strictly check for compound expression

Issue - State: closed - Opened by Joerki 6 months ago - 4 comments

#763 - docs: responsibilities & capabilities

Pull Request - State: closed - Opened by jkowalleck 6 months ago - 1 comment
Labels: documentation

#761 - chore(deps-dev): update tox requirement from 4.23.2 to 4.24.1

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago
Labels: dependencies

#760 - feat: improve deprecation warnings - PEP-387

Issue - State: open - Opened by jkowalleck 6 months ago
Labels: enhancement

#759 - docs: modernize docstrings for CDX1.6

Pull Request - State: closed - Opened by jkowalleck 6 months ago - 1 comment
Labels: documentation

#758 - chore(deps): bump python-semantic-release/python-semantic-release from 9.1.1 to 9.16.1

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago - 1 comment
Labels: dependencies

#757 - feat: couple classes and their serializes

Pull Request - State: closed - Opened by jkowalleck 6 months ago - 1 comment
Labels: enhancement

#756 - feat: complex type become their own serializers

Issue - State: closed - Opened by jkowalleck 6 months ago
Labels: enhancement

#755 - refactor!: streamline comparison/hashing functions

Pull Request - State: closed - Opened by jkowalleck 6 months ago - 3 comments
Labels: enhancement, breaking change

#754 - feat!: BomRef affect equality/comparisson

Pull Request - State: closed - Opened by jkowalleck 6 months ago - 3 comments
Labels: enhancement, breaking change

#753 - feat!: make `bom-ref` part of equality checks

Issue - State: closed - Opened by jkowalleck 6 months ago - 4 comments
Labels: enhancement, breaking change

#752 - Unable to add a child component with valid(duplicate?) bom-ref

Issue - State: closed - Opened by krishnendu 7 months ago - 9 comments
Labels: question

#751 - chore(deps-dev): update mypy requirement from 1.13.0 to 1.14.1

Pull Request - State: closed - Opened by dependabot[bot] 7 months ago
Labels: dependencies

#750 - chore(deps-dev): update mypy requirement from 1.13.0 to 1.14.0

Pull Request - State: closed - Opened by dependabot[bot] 7 months ago - 1 comment
Labels: dependencies

#749 - chore(deps): bump python-semantic-release/python-semantic-release from 9.1.1 to 9.15.2

Pull Request - State: closed - Opened by dependabot[bot] 7 months ago - 1 comment
Labels: dependencies

#748 - chore(deps-dev): update flake8-bugbear requirement from 24.10.31 to 24.12.12

Pull Request - State: closed - Opened by dependabot[bot] 8 months ago
Labels: dependencies