8.0.0 (CycloneDX v1.6)

What's Changed

• IMPORTANT - BREAKING PROTOBUF SERIALIZATION BUGFIX: The previous version of this library contained an issue in the serialization and deserialization of timestamps with protobuf, resulting in an incorrect offset being applied to all timestamps. This has been resolved in the current release. However, deserializing a protobuf file that was serialized with the prior version of the library will now reveal the actual offset.
• BREAKING CHANGE: Support for CycloneDX 1.6 by @andreas-hilti & @mtsfoni in #288
  • The update for version 1.6 includes multiple fixes for smaller, previously unreported issues that cannot be listed individually. If you experienced problems with earlier versions, they may now be resolved.
  • The model has been updated in accordance with CycloneDX 1.6. For a detailed breakdown of the changes, please refer to the CycloneDX 1.6 standard documentation.
• Fix xml deserialization of licenses with namespace prefix by @andreas-hilti in #350
• Add net 7 and make STJ conditional by @thompson-tomo in #283
• Fix AccessMode such that it is optional by @andreas-hilti in #358

New Contributors

• @thompson-tomo made their first contribution in #283

Full Changelog: v7.1.0...v8.0.0

7.1.0

What's Changed

• Improve merge performance by @andreas-hilti in #300
• Fix metadata tools components by @andreas-hilti in #304
• Update SPDX license schemas to v3.24.0 by @nodeax in #305
• Use invariant culture when de-/serializing DateTime by @andreas-hilti in #312

Full Changelog: v7.0.2...v7.1.0

7.0.2

What's Changed

• Addressing CVE-2024-30105 by bumping System.Text.Json from 7.0.2 to 8.0.4 by @dependabot in #309

Full Changelog: v7.0.1...v7.0.2

7.0.1

What's Changed

• fix: xml (de-)serialization for multiple licenses by @andreas-hilti and @mtsfoni in #301

Full Changelog: v7.0.0...v7.0.1

7.0.0

What's Changed

• Breaking: fix: remove redundant enum WorkflowTaskType by @jimklimov in #259
• fix: JSON validation fails on timestamp wither longer fractional digits by @andreas-hilti in #272
• fix: xml serialization order inside component was wrong by @andreas-hilti in #246
• fix: serialization of enum EvidenceFieldType resulted in values starting with capital letters by @andreas-hilti in #289
• chore: update SPDX license schemas to v3.23 by @nodeax in #281
• fix: serialization of enums VolumeMode and DataType by @andreas-hilti in #290
• fix: tools serialization (for versions < 1.5) by @andreas-hilti in #291
• fix: wrong XML-element order in evidence by @mtsfoni in #295
• fix: ScoreMethod.CVSSV31 serialization by @dzsibi in #261

New Contributors

• @mtsfoni made their first contribution in #286
• @jimklimov made their first contribution in #259
• @nodeax made their first contribution in #281
• @dzsibi made their first contribution in #261

Full Changelog: v6.0.0...v7.0.0

6.0.0

Major version - adds support for v1.5 and includes numerous enhanceme…

…nts and fixes

5.4.0

v5.4.0

Feature release - improved validation output and merging

5.3.2

v5.3.2

Maintenance release - dependency version bumps

5.3.1

v5.3.1

Bugfix release - add properties to vulnerabilities

5.3.0

v5.3.0

Feature release