v3.1.0

Feature

• Out-factor SPDX compound detection (fd4d537, 2b69925)
• License factories (033bad2)

---

Note: There was no 3.0.0 release officially, but due to CI publishing issues, an unexpected 3.0.0 release was publiched to PyPi and subsequently yanked from PyPi. There are NO breaking changes between 2.7.1 and 3.1.0.

v2.7.1

What's Changed

• chore(deps-dev): bump flake8-isort from 4.1.1 to 4.1.2.post0 by @dependabot in #280
• fix: BOM validation fails when Components or Services are nested by @madpah in #276

Full Changelog: v2.7.0...v2.7.1

v2.7.0

What's Changed

• feature: support for CycloneDX schema 1.4.2 - adds vulnerability.properties to the schema by @madpah in #273

Full Changelog: v2.6.0...v2.7.0

v2.6.0

Feature

• Reduce unnessessarry type casting of set/SortedSet (#203) (089d971)

v2.5.2

Fix

• Add expected lower-than comparators for OrganizationalEntity and VulnerabilityCredits (#248) (0046ee1)

v2.5.1

Fix

• Add missing Vulnerability comparator for sorting (#246) (c3f3d0d)

v2.5.0

Feature

• Use SortedSet in model to improve reproducibility - this will provide predictable ordering of various items in generated CycloneDX documents - thanks to @RodneyRichardson (8a1c404)

Documentation

• Fix typo "This is out" -> "This is our" (ef0278a)

v2.4.0

Feature

• deps: Remove unused typing-extensions constraints (2ce358a)

v2.3.0

Feature

• Add support for Dependency Graph in Model and output serialisation (ea34513)

v2.2.0

Feature

• Bump XML schemas to latest fix version for 1.2-1.4 - see: (bd2e756)
• Bump JSON schemas to latest fix verison for 1.2 and 1.3 - see: (bd6a088)