Releases: CycloneDX/cyclonedx-python
Releases · CycloneDX/cyclonedx-python
Release list
v7.3.1
v7.3.1 (2026-07-23)
Bug Fixes
Documentation
What's Changed
- docs: usage
cyclonedx-py environmenthelp page add-Sby @jkowalleck in #1033 - docs: update docs by @jkowalleck in #1034
- chore(deps-dev): Update uv requirement from 0.10.10 to 0.11.6 by @dependabot[bot] in #1039
- chore(ci): pin GitHub Actions to immutable commit SHAs by @jkowalleck with @Copilot in #1043
- chore: harden all GitHub workflows using zizmor by @jkowalleck with @Copilot in #1054
- chore(deps-dev): Update uv requirement from 0.11.6 to 0.11.8 by @dependabot[bot] in #1051
- chore(ci): comments for pinned actions by @jkowalleck in #1061
- chore(deps): Bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 by @dependabot[bot] in #1068
- chore(deps): Bump snok/install-poetry from 1.4.1 to 1.4.2 by @dependabot[bot] in #1063
- chore(deps): Bump actions/checkout from 6.0.2 to 7.0.0 by @dependabot[bot] in #1067
- chore(deps-dev): Update uv requirement from 0.11.8 to 0.11.17 by @dependabot[bot] in #1062
- chore(deps): Bump actions/setup-python from 6.2.0 to 6.3.0 by @dependabot[bot] in #1069
- fix: improve error message for non-PEP 621 pyproject.toml by @jkowalleck in #1080
New Contributors
- @jkowalleck with @Copilot made their first contribution in #1043
Full Changelog: v7.3.0...v7.3.1
v7.3.0
v7.3.0 (2026-03-30)
Features
What's Changed
- chore(deps-dev): Update uv requirement from 0.10.2 to 0.10.7 by @dependabot[bot] in #1023
- chore(deps-dev): Update uv requirement from 0.10.7 to 0.10.9 by @dependabot[bot] in #1025
- chore(deps-dev): Update uv requirement from 0.10.9 to 0.10.10 by @dependabot[bot] in #1026
- feat: add -S flag to skip
*.pthevaluation during environment analysis by @jkowalleck in #1032
Full Changelog: v7.2.2...v7.3.0
v7.2.2
v7.2.2 (2026-02-19)
Documentation
What's Changed
- chore(deps-dev): Update uv requirement from 0.9.5 to 0.9.7 by @dependabot[bot] in #989
- chore(deps-dev): Update uv requirement from 0.9.7 to 0.9.8 by @dependabot[bot] in #992
- chore(deps-dev): Update uv requirement from 0.9.8 to 0.9.9 by @dependabot[bot] in #994
- chore(deps): Bump actions/checkout from 5 to 6 by @dependabot[bot] in #998
- chore(deps-dev): Update mypy requirement from 1.18.2 to 1.19.0 by @dependabot[bot] in #1000
- chore(deps-dev): Update uv requirement from 0.9.9 to 0.9.13 by @dependabot[bot] in #1001
- docs: modernize RTF setup by @jkowalleck in #1002
- chore(deps): Bump actions/download-artifact from 6 to 7 by @dependabot[bot] in #1005
- chore(deps): Bump actions/upload-artifact from 5 to 6 by @dependabot[bot] in #1004
- chore(deps-dev): Update mypy requirement from 1.19.0 to 1.19.1 by @dependabot[bot] in #1008
- chore(deps): Update pyupgrade version to 3.21.2 by @jkowalleck in #1010
- chore(ci): modernize GH ci by @jkowalleck in #1016
- chore(deps-dev): Update uv requirement from 0.9.13 to 0.9.28 by @dependabot[bot] in #1017
- chore(deps): Update packaging requirement from ^22 || ^23 || ^24 || ^25 to ^22 || ^23 || ^24 || ^25 || ^26 by @dependabot[bot] in #1015
- chore(deps-dev): Update uv requirement from 0.9.28 to 0.10.0 by @dependabot[bot] in #1018
- chore(deps-dev): Update uv requirement from 0.10.0 to 0.10.2 by @dependabot[bot] in #1019
Full Changelog: v7.2.1...v7.2.2
v7.2.1
v7.2.1 (2025-10-29)
Maintenance release.
Documentation
What's Changed
- docs: basic support for CycloneDX 1.7 by @jkowalleck in #984
- chore(deps): Bump actions/download-artifact from 5 to 6 by @dependabot[bot] in #985
- chore(deps): Bump actions/upload-artifact from 4 to 5 by @dependabot[bot] in #986
- chore(deps-dev): Update uv requirement from 0.9.3 to 0.9.5 by @dependabot[bot] in #987
- tests: more output for testbed inits by @jkowalleck in #988
Full Changelog: v7.2.0...v7.2.1
v7.2.0
v7.2.0 (2025-10-16)
Documentation
- Add Changelog to project urls (
5f38d75)
Features
What's Changed
- chore(deps): Bump actions/setup-python from 5 to 6 by @dependabot[bot] in #963
- chore(deps-dev): Update tox requirement from 4.29.0 to 4.30.2 by @dependabot[bot] in #965
- chore(deps-dev): Update uv requirement from 0.8.14 to 0.8.15 by @dependabot[bot] in #964
- chore(deps-dev): Update flake8-logging requirement from 1.7.0 to 1.8.0 by @dependabot[bot] in #969
- chore(deps-dev): Update uv requirement from 0.8.15 to 0.8.17 by @dependabot[bot] in #968
- chore(deps-dev): Update mypy requirement from 1.17.1 to 1.18.1 by @dependabot[bot] in #967
- chore(deps-dev): Update mypy requirement from 1.18.1 to 1.18.2 by @dependabot[bot] in #972
- chore(deps-dev): Update uv requirement from 0.8.17 to 0.8.19 by @dependabot[bot] in #973
- chore(deps-dev): Update uv requirement from 0.8.19 to 0.8.22 by @dependabot[bot] in #975
- chore(deps-dev): Update coverage requirement from 7.10.6 to 7.10.7 by @dependabot[bot] in #974
- chore(deps-dev): Update isort requirement from 6.0.1 to 6.1.0 by @dependabot[bot] in #976
- chore(deps-dev): Update tox requirement from 4.30.2 to 4.30.3 by @dependabot[bot] in #977
- chore(deps-dev): Update uv requirement from 0.8.22 to 0.9.2 by @dependabot[bot] in #980
- chore(deps-dev): Update pyupgrade requirement from 3.20.0 to 3.21.0 by @dependabot[bot] in #981
- feat: support Python 3.14 by @jkowalleck in #982
- chore(deps): Bump python from 3.13-slim to 3.14-slim by @dependabot[bot] in #979
- chore(deps-dev): Update uv requirement from 0.9.2 to 0.9.3 by @dependabot[bot] in #983
Full Changelog: v7.1.0...v7.2.0
v7.1.0
v7.1.0 (2025-09-02)
Documentation
- Fix changelog (
1e6574f)
Features
What's Changed
- chore(deps-dev): Update mypy requirement from 1.16.1 to 1.17.0 by @dependabot[bot] in #935
- chore(deps-dev): Update uv requirement from 0.7.20 to 0.8.0 by @dependabot[bot] in #934
- chore(deps): Bump actions/checkout from 4 to 5 by @dependabot[bot] in #951
- chore(deps): Bump actions/download-artifact from 4 to 5 by @dependabot[bot] in #950
- test: fix slow tests and add timing reports by @jkowalleck in #962
- feat: support runtime-dependency
cyclonedx-python-libv11 by @jkowalleck in #938 - chore(deps-dev): Update uv requirement from 0.8.0 to 0.8.14 by @dependabot[bot] in #961
- chore(deps-dev): Update coverage requirement from 7.9.2 to 7.10.6 by @dependabot[bot] in #960
- chore(deps-dev): Update mypy requirement from 1.17.0 to 1.17.1 by @dependabot[bot] in #945
- chore(deps-dev): Update tox requirement from 4.27.0 to 4.29.0 by @dependabot[bot] in #959
- chore(deps-dev): Update deptry requirement from 0.23.0 to 0.23.1 by @dependabot[bot] in #944
Full Changelog: v7.0.0...v7.1.0
v7.0.0
v7.0.0 (2025-07-14)
BREAKING Changes
- Finalize PEP639, auto-enable it, remove CLI switch
environment --PEP-639(#928,6b81028)- Handling of PEP 639 changed, as the specification changed during finalization.
- Handling of PEP 639 is always enabled, as Python Packing specification 2.4 recognizes it.
- CLI parameter
environment --PEP-639was removed.
- Remove deprecated CLI switches
--schema-versionand--outfile, use--spec-versionand--output-fileinstead (#892,2be98e5)
What's Changed
- chore: test for missing dependencies by @jkowalleck in #930
- chore(deps-dev): Update bandit requirement from 1.8.5 to 1.8.6 by @dependabot[bot] in #932
- feat!: finalize PEP639, auto-enable it, remove CLI switch
environment --PEP-639by @jkowalleck in #928 - feat!: remove deprecated CLI switches
--schema-versionand--outfile, use--spec-versionand--output-fileinstead by @virgo-o in #892 - chore(deps-dev): Update uv requirement from 0.7.19 to 0.7.20 by @dependabot[bot] in #933
Full Changelog: v6.1.3...v7.0.0
v7.0.1-alpha.2
v7.0.0-alpha.1
v6.1.3
v6.1.3 (2025-07-08)
Bug Fixes
What's Changed
- chore(deps-dev): Update uv requirement from 0.7.13 to 0.7.16 by @dependabot in #922
- style: make long-text indents smaller by @jkowalleck in #924
- chore(deps-dev): Update coverage requirement from 7.9.1 to 7.9.2 by @dependabot in #926
- chore(deps-dev): Update uv requirement from 0.7.16 to 0.7.19 by @dependabot in #927
- fix: license file detection according to PEP621 by @jkowalleck in #929
Full Changelog: v6.1.2...v6.1.3