Releases: CycloneDX/cyclonedx-javascript-library
Releases · CycloneDX/cyclonedx-javascript-library
6.9.4-beta.0
Signed-off-by: jkowalleck <[email protected]>
6.9.3-beta.1
Signed-off-by: release bot <[email protected]>
6.9.3-beta.0
v6.9.3-beta.0 6.9.3-beta.0\n\nSigned-off-by: release bot <[email protected]>
6.9.2-beta.0
v6.9.2-beta.0 6.9.2-beta.0
6.9.0
Changed
- Updated SPDX license list to
v3.24.0
(via #1077)
What's Changed
- feat: update SPDX license list to
v3.24.0
by @jkowalleck in #1077
Full Changelog: v6.8.2...v6.9.0
6.8.2
Fixed
- Added
Factories.PackageUrlFactory
's generic type's default back in (via #1076)
What's Changed
- fix:
PackageUrlFactory
generic default by @jkowalleck in #1076
Full Changelog: v6.8.1...v6.8.2
6.8.1
Fixed
- Hardened
Factories.FromNodePackageJson.PackageUrlFactory
's default package repository detection (#1073 via #1074)
What's Changed
- chore(deps-dev): bump npm-run-all2 from 5.0.2 to 6.1.2 by @dependabot in #1071
- fix: harden
Factories.FromNodePackageJson.PackageUrlFactory
's default package repository detection by @jkowalleck in #1074
Full Changelog: v6.8.0...v6.8.1
6.8.0
Added
- Explicitly export own first-level submodules via package manifest (#87 via #1066)
When used with bundlers/packers downstream, this might enable better tree shaking due to scoped imports.
Refactor
- Ease internal tree shaking (via #1066)
What's Changed
- feat: NodeJS exports submodules as subpaths by @jkowalleck in #1066
- chore: modernize
npm-run-all
by @jkowalleck in #1069 - chore(deps) bumped some dev-deps by @jkowalleck in #1067
- chore: use
rimraf
instead of own by @jkowalleck in #1068
Full Changelog: v6.7.2...v6.8.0
6.7.2
Changed
- The provided XML validation capabilities were explicitly hardened (via #1064; concerns #1061)
This is considered a security measure concerning XML external entity (XXE) injection.
What's Changed
- refactor: XML validator explicitely harden against XXE injections by @jkowalleck in #1064
Full Changelog: v6.7.1...v6.7.2
6.7.1
Reverted v6.7.0, back to v6.6.1 -- fixes SecurityAdvisory GHSA-38gf-rh2w-gmj7
(Release v6.7.0 got yanked for security reasons, and should not be used. Please upgrade to ^6.7.1
)
What's Changed
Full Changelog: v6.6.1...v6.7.1