2 Commits

Author SHA1 Message Date
Wang Mingyu
b1303254ff
python3-cyclonedx-python-lib: upgrade 11.7.0 -> 11.8.0
Changelog:
=============
- chore: extract glob for pyupgrade to separate script for cross-platform compatibility
- docs: update CDX summary
- chore: fix test coverage reporting
- chore(deps-dev): update tomli requirement from 2.3.0 to 2.4.1
- chore(release): use own GH app for releasing
- chore(ci): pin GitHub Actions to immutable SHAs while preserving tag tracking
- chore: add zizmor workflow to harden GitHub Actions security
- Update PULL_REQUEST_TEMPLATE.md
- chore: Update CONTRIBUTING.md
- chore(ci): comments for pinned actions
- feat: add support CycloneDX 1.7.1 & 1.6.2 & 1.5.1
- chore(deps): bump actions/create-github-app-token from 3.1.1 to 3.2.0
- chore(deps): bump actions/download-artifact from 7.0.0 to 8.0.1
- chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.1
- feat: pull SPDX license IDs v1.1-3.28.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:01 -07:00
Samuli Piippo
b6a6d9fd86
python3-cyclonedx-python-lib: add recipe
OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard
that provides advanced supply chain capabilities for cyber risk
reduction.

This Python package provides data models, validators and more,
to help you create/render/read CycloneDX documents.

Signed-off-by: Samuli Piippo <samuli.piippo@qt.io>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-12 01:06:59 -07:00