Skip to content

Releases: CycloneDX/cyclonedx-javascript-library

6.9.4-beta.0

23 May 16:14
Compare
Choose a tag to compare
6.9.4-beta.0 Pre-release
Pre-release
Signed-off-by: jkowalleck <[email protected]>

6.9.3-beta.1

23 May 16:04
Compare
Choose a tag to compare
6.9.3-beta.1 Pre-release
Pre-release
Signed-off-by: release bot <[email protected]>

6.9.3-beta.0

23 May 15:57
Compare
Choose a tag to compare
6.9.3-beta.0 Pre-release
Pre-release
v6.9.3-beta.0

6.9.3-beta.0\n\nSigned-off-by: release bot <[email protected]>

6.9.2-beta.0

23 May 15:38
Compare
Choose a tag to compare
6.9.2-beta.0 Pre-release
Pre-release
v6.9.2-beta.0

6.9.2-beta.0

6.9.0

23 May 05:45
Compare
Choose a tag to compare

Changed

  • Updated SPDX license list to v3.24.0 (via #1077)

What's Changed

Full Changelog: v6.8.2...v6.9.0

6.8.2

21 May 17:10
Compare
Choose a tag to compare

Fixed

  • Added Factories.PackageUrlFactory's generic type's default back in (via #1076)

What's Changed

Full Changelog: v6.8.1...v6.8.2

6.8.1

21 May 11:43
Compare
Choose a tag to compare

Fixed

  • Hardened Factories.FromNodePackageJson.PackageUrlFactory's default package repository detection (#1073 via #1074)

What's Changed

  • chore(deps-dev): bump npm-run-all2 from 5.0.2 to 6.1.2 by @dependabot in #1071
  • fix: hardenFactories.FromNodePackageJson.PackageUrlFactory's default package repository detection by @jkowalleck in #1074

Full Changelog: v6.8.0...v6.8.1

6.8.0

14 May 11:08
Compare
Choose a tag to compare

Added

  • Explicitly export own first-level submodules via package manifest (#87 via #1066)
    When used with bundlers/packers downstream, this might enable better tree shaking due to scoped imports.

Refactor

  • Ease internal tree shaking (via #1066)

What's Changed

Full Changelog: v6.7.2...v6.8.0

6.7.2

08 May 16:36
Compare
Choose a tag to compare

Changed

  • The provided XML validation capabilities were explicitly hardened (via #1064; concerns #1061)
    This is considered a security measure concerning XML external entity (XXE) injection.

What's Changed

  • refactor: XML validator explicitely harden against XXE injections by @jkowalleck in #1064

Full Changelog: v6.7.1...v6.7.2

6.7.1

07 May 18:11
Compare
Choose a tag to compare

Reverted v6.7.0, back to v6.6.1 -- fixes SecurityAdvisory GHSA-38gf-rh2w-gmj7
(Release v6.7.0 got yanked for security reasons, and should not be used. Please upgrade to ^6.7.1)


What's Changed

Full Changelog: v6.6.1...v6.7.1