search

i-doit / knowledge-base

i-doit docs
http://kb.i-doit.com
Creative Commons Attribution Share Alike 4.0 International
11 stars 6 forks source link

chore(deps): bump cyclonedx-bom from 4.6.1 to 5.1.0 #776

Closed dependabot[bot] closed 1 month ago

dependabot[bot] commented 1 month ago

Bumps cyclonedx-bom from 4.6.1 to 5.1.0.

Release notes

Sourced from cyclonedx-bom's releases.

v5.1.0 (2024-10-23)

Feature

  • feat: add Python 3.13 support (#818)

What's Changed

Full Changelog: https://github.com/CycloneDX/cyclonedx-python/compare/v5.0.0...v5.1.0

v5.0.0 (2024-10-15)

Breaking

  • feat!: v5.0.0 (#797)

BREAKING Changes

  • Emitted metadata tool name is cyclonedx-py, was cyclonedx-bom.
  • Emitted metadata tools are up to non-deprecated CycloneDX specification.
  • No longer emit deprecated or undocumented properties in namespace cdx:poetry (see previous release 4.6.0 for official replacements).
    • cdx:poetry:source:package:reference
    • cdx:poetry:package:source:resolved_reference
    • cdx:poetry:package:source:vcs:requested_revision
    • cdx:poetry:package:source:vcs:commit_id

The mentioned changes are considered "breaking" for processes that relied on the respective data structures. Migration paths are self-explanatory.

Dependencies

  • Requires cyclonedx-python-lib>=8.0.0,<9 now, was >=7.3.0,<8.0.0,!=7.3.1.

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> (34cf6e3)

Documentation

  • docs(chaneglog): omit chore/ci/refactor/style/test/build (#813)

... (truncated)

Changelog

Sourced from cyclonedx-bom's changelog.

v5.1.0 (2024-10-23)

Feature

  • feat: add Python 3.13 support (#818)

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> (f4eb79e)

v5.0.0 (2024-10-15)

Breaking

  • feat!: v5.0.0 (#797)

BREAKING Changes

  • Emitted metadata tool name is cyclonedx-py, was cyclonedx-bom.
  • Emitted metadata tools are up to non-deprecated CycloneDX specification.
  • No longer emit deprecated or undocumented properties in namespace cdx:poetry (see previous release 4.6.0 for official replacements).
    • cdx:poetry:source:package:reference
    • cdx:poetry:package:source:resolved_reference
    • cdx:poetry:package:source:vcs:requested_revision
    • cdx:poetry:package:source:vcs:commit_id

The mentioned changes are considered &#34;breaking&#34; for processes that relied on the respective data structures. Migration paths are self-explanatory.

Dependencies

  • Requires cyclonedx-python-lib&gt;=8.0.0,&lt;9 now, was &gt;=7.3.0,&lt;8.0.0,!=7.3.1.

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> (34cf6e3)

Documentation

  • docs(chaneglog): omit chore/ci/refactor/style/test/build (#813)

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> (6707959)

Commits
  • f1538be chore(release): 5.1.0
  • f4eb79e feat: add Python 3.13 support (#818)
  • d0b5997 refactor: streamline constants (#820)
  • f64ccaf chore: run tox w/o sdist (#819)
  • 0feede2 chore(deps-dev): Update tox requirement from 4.21.2 to 4.23.0 (#814)
  • 88c5269 chore(deps-dev): Update mypy requirement from 1.11.2 to 1.12.0 (#815)
  • 44eea0b tests: requirements with VCS -- docs
  • 425dbae tests: requirements with url and git node id (#817)
  • 6309294 chore(docs): link python test snapshots docs
  • 6bbd320 chore(release): 5.0.0
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 1 month ago

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.