BREAKING Changes
- CLI option
--spec-version
defaults to1.6
, was1.5
(#222 via #251) - Emit
$.metadata.tools
as components (#221 via #254)
This affects only CycloneDX spec-version 1.5 and later. - Emitted
.purl
values might be partially url-encoded (via #254)
This is caused by changes on underlying 3rd-party dependencypackageurl-js
. - Create dir for output file if not exists (#253 via #255)
This is only a breaking change if you relied on non-existent result paths to cause errors.
Dependencies
- Upgraded runtime-dependency
@cyclonedx/cyclonedx-library@7.1.0
, was@6.13.1
(via #254)
What's Changed
- chore(deps): lock file maintenance by @renovate in #250
- feat!: emit tools as
metadata.tools.components
by @jkowalleck in #254 - feat!: default to CDX 1.6 by @jkowalleck in #251
- feat!: create outpur dir if not exist by @jkowalleck in #255
Full Changelog: v1.1.0...v2.0.0