8.0.0-rc.0

BREAKING Changes

• Dropped support for node<=20.18.0 (#1081 via #1209)

Refactor

• Imports of built-in modules are prefixed with node: (#1198 via #1210)

Build

• Use TypeScript v5.7.3 now, was v5.7.2 (via #1204)
• Use webpack v5.98.0 now, was v5.97.1 (via #1213)

---

What's Changed

• chore(deps-dev): bump typescript from 5.7.2 to 5.7.3 in the typescript group across 1 directory by @dependabot in #1204
• feat: drop support for node <20.18 by @jkowalleck in #1209
• chore(deps-dev): bump ts-loader from 9.5.1 to 9.5.2 in the typescript group across 1 directory by @dependabot in #1206
• refactor: prefix native module imports with node: by @jkowalleck in #1210
• chore(deps-dev): bump webpack from 5.97.1 to 5.98.0 in the webpack group across 1 directory by @dependabot in #1213
• chore(deps): bump the eslint group across 1 directory with 4 updates by @dependabot in #1212

Full Changelog: v7.1.0...v8.0.0-rc.0

7.1.0

Added

• New type Models.Copyright and class Models.CopyrightRepository (via #1202)
• New type Models.AttachmentContent (via #1202)

Changed

• Replace usage of internals Stringable & SortableStringables with public API (#1192 via #1202)
  This is considered a non-breaking change, as the types are not changed, but made publicly available.

Style

• Apply latest code style guide (via #1201)

Misc

• Support npm11 (#1191 via #1203)

---

What's Changed

• chore(deps): bump typedoc from 0.26.11 to 0.27.2 in /tools/docs-gen in the typedoc group across 1 directory by @dependabot in #1186
• chore(deps-dev): bump webpack from 5.96.1 to 5.97.1 in the webpack group across 1 directory by @dependabot in #1187
• dont use internal types/classes in public API by @jkowalleck in #1202
• ci: use npm11 by @jkowalleck in #1203
• chore(deps-dev): bump webpack-cli from 5.1.4 to 6.0.1 in the webpack group across 1 directory by @dependabot in #1194
• chore(deps-dev): bump mocha from 10.8.2 to 11.0.1 in the mocha group across 1 directory by @dependabot in #1188
• chore(deps): bump the eslint group across 1 directory with 6 updates by @dependabot in #1201

Full Changelog: v7.0.0...v7.1.0

6.13.1

Dependencies

• Support libxmljs2@^0.35 (via #1196)

---

What's Changed

• chore(deps): libxmljs2 0.35 by @jkowalleck in #1196

Full Changelog: v6.13.0...v6.13.1

7.0.0

BREAKING changes

• Property Models.Bom.tools is an instance of Models.Tools now (#1152 via #1163)
  Before, it was an instance of Models.ToolRepository.
• Property Models.Vulnerability.tools is an instance of Models.Tools now (via #1163)
  Before, it was an instance of Models.ToolRepository.

Added

• Static function Models.Tool.fromComponent() (via #1163)
• Static function Models.Tool.fromService() (via #1163)
• New class Models.Tools (#1152 via #1163)
• New serialization/normalization for Models.Tools (#1152 via #1163, #1180)

Changed

• Serializers and Bom-Normalizers will take changed Models.Bom.tools into account (#1152 via #1163)
• Serializers and Vulnerability-Normalizers will take changed Models.Vulnerability.tools into account (via #1163)

Style

• Apply latest code style guide (via #1170, #1181)

Dependencies

• Support libxmljs2@^0.35 (via #1173)
• Use packageurl-js@^2.0.1, was @>=0.0.6 <0.0.8 || ^1 (via #1142)

Build

• Use TypeScript v5.7.2 now, was v5.6.3 (via #1182)

---

What's Changed

• style: modernize eslint & apply code-style cb9013d691 by @jkowalleck in #1170
• feat: tools as Components & Services by @jkowalleck in #1163
• chore(deps): bump the eslint group across 1 directory with 4 updates by @dependabot in #1172
• chore(deps): libxmljs2 0.35 by @jkowalleck in #1173
• tests: prefix suites by @jkowalleck in #1174
• chore(deps): bump packageurl-js from 1.2.1 to 2.0.1 by @dependabot in #1142
• ci: test node 23 by @jkowalleck in #1175
• chore(deps): bump typescript-eslint from 8.14.0 to 8.15.0 in /tools/code-style in the eslint group across 1 directory by @dependabot in #1178
• chore: fix release setups by @jkowalleck in #1179
• fix: tools' services/components omit empty by @jkowalleck in #1180
• chore(deps-dev): bump typescript from 5.6.3 to 5.7.2 in the typescript group across 1 directory by @dependabot in #1182
• chore(deps): bump the eslint group across 1 directory with 3 updates by @dependabot in #1181

Full Changelog: v6.13.0...v7.0.0

7.0.0-beta.2

What's Changed

• fix: tools' services/components omit empty by @jkowalleck in #1180

Full Changelog: v7.0.0-beta.1...v7.0.0-beta.2

7.0.0-beta.1

BREAKING changes

• Property Models.Bom.tools is an instance of Models.Tools now (#1152 via #1163)
  Before, it was an instance of Models.ToolRepository.

Added

• Static function Models.Tool.fromComponent() (via #1163)
• Static function Models.Tool.fromService() (via #1163)
• New class Models.Tools (#1152 via #1163)
• New serialization/normalization for Models.Tools (#1152 via #1163)

Changed

• Serializers and Bom-Normalizers will take changed Models.Bom.tools into account (#1152 via #1163)

Dependencies

• Support libxmljs2@^0.35 (via #1173)
• Use packageurl-js@^2.0.1, was @>=0.0.6 <0.0.8 || ^1 (via #1142)

---

What's Changed

• style: modernize eslint & apply code-style cb9013d691 by @jkowalleck in #1170
• feat: tools as Components & Services by @jkowalleck in #1163
• chore(deps): bump the eslint group across 1 directory with 4 updates by @dependabot in #1172
• chore(deps): libxmljs2 0.35 by @jkowalleck in #1173
• tests: prefix suites by @jkowalleck in #1174
• chore(deps): bump packageurl-js from 1.2.1 to 2.0.1 by @dependabot in #1142
• ci: test node 23 by @jkowalleck in #1175
• chore(deps): bump typescript-eslint from 8.14.0 to 8.15.0 in /tools/code-style in the eslint group across 1 directory by @dependabot in #1178
• chore: fix release setups by @jkowalleck in #1179

Full Changelog: v6.13.0...v7.0.0-beta.1

6.13.0

Added

• Support CycloneDX 1.6.1 (#1176 via #1177)

---

What's Changed

• feat: CDX 1.6.1 by @jkowalleck in #1177

Full Changelog: v6.12.0...v6.13.0

6.12.0

Added

• Support for services (#1164 via #1165)
• New class Models.Service (#1164 via #1165)
• New class Models.ServiceRepository (#1164 via #1165)
• Class Models.Bom got new property services (#1164 via #1165)
• Serializers and Bom-Normalizers will take Models.Bom.services into account (#1164 via #1165)

Build

• Use webpack v5.96.1 now, was v.95.0 (via #1159)

6.11.1

Fixed

• Encode quotation marks in URLs (#1154 via #1155)

Build

• Use TypeScript v5.6.3 now, was v5.5.3 (via #1130. #1144, #1150)
• Use webpack v5.95.0 now, was v5.93.0 (via #1138, #1147)

---

What's Changed

• chore(deps-dev): bump mocha from 10.6.0 to 10.7.0 in the mocha group across 1 directory by @dependabot in #1131
• chore(deps-dev): bump typescript from 5.5.3 to 5.5.4 in the typescript group across 1 directory by @dependabot in #1130
• chore(deps-dev): bump mocha from 10.7.0 to 10.7.3 in the mocha group across 1 directory by @dependabot in #1134
• chore(deps-dev): bump webpack from 5.93.0 to 5.94.0 in the webpack group across 1 directory by @dependabot in #1138
• chore(deps-dev): bump webpack from 5.94.0 to 5.95.0 in the webpack group across 1 directory by @dependabot in #1147
• chore(deps-dev): bump typescript from 5.5.4 to 5.6.2 in the typescript group across 1 directory by @dependabot in #1144
• fix: encode quotation mark in URLs by @jkowalleck in #1155
• chore(deps-dev): bump typescript from 5.6.2 to 5.6.3 in the typescript group across 1 directory by @dependabot in #1150

Full Changelog: v6.11.0...v6.11.1

6.11.0

Changed

• Factories.FromNodePackageJson.ExternalReferenceFactory.makeVcs() tries to canonicalize git-URLs (#1119 via #1120)

Fixed

• Improved URL sanitizer (via #1121)

Build

• Use webpack v5.93.0 now, was v5.92.1 (via #1122)

---

What's Changed

• chore: install rimraf4 on older systems by @jkowalleck in #1118
• fis: escape uri all by @jkowalleck in #1121
• chore(deps): bump eslint-plugin-jsdoc from 48.5.0 to 48.7.0 in /tools/code-style by @dependabot in #1127
• chore(deps): bump @eslint/js from 9.6.0 to 9.7.0 in /tools/code-style by @dependabot in #1126
• chore(deps): bump typescript-eslint from 7.15.0 to 7.16.0 in /tools/code-style by @dependabot in #1125
• chore(deps): bump the eslint group across 1 directory with 2 updates by @dependabot in #1128
• chore(deps-dev): bump webpack from 5.92.1 to 5.93.0 in the webpack group across 1 directory by @dependabot in #1122
• feat: try to canonicalize git-URLs by @jkowalleck in #1120

Full Changelog: v6.10.1...v6.11.0