Repository navigation
Releases
Releases · CycloneDX/cyclonedx-python
v8.0.1
v8.0.0
Immutable
release. Only release title and notes can be modified.
v8.0.0 (2026-11-04)
Features
What's Changed
- chore(deps): Bump pypa/gh-action-pypi-publish from 1.14.2 to 1.14.3 by @dependabot[bot] in #1135
- ci: fix py3.9 on ubuntu by @jkowalleck in #1141
- chore(deps): Bump zizmorcore/zizmor-action from 0.7.1 to 0.8.0 by @dependabot[bot] in #1137
- chore(deps): Bump actions/setup-python from 7.0.0 to 7.1.0 by @dependabot[bot] in #1138
- chore(deps): Bump docker/login-action from 4.6.0 to 4.7.0 by @dependabot[bot] in #1139
- chore(deps-dev): Update uv requirement from 0.13.4 to 0.13.6 by @dependabot[bot] in #1140
- feat(environment)!: with
-E/-Sand no<python>, probe the current interpreter by @juliosuas in #1134 - chore(deps): Bump Gr1N/setup-poetry from 9 to 10 by @dependabot[bot] in #1142
Full Changelog: v7.6.0...v8.0.0
v7.6.0
v7.6.0 (2026-10-28)
Features
What's Changed
- feat(environment): add option -E to ignore parent PYTHON* env vars by @juliosuas in #1106
- tests: fix pipenv runner by @jkowalleck in #1132
- chore(deps-dev): Update uv requirement from 0.12.17 to 0.13.4 by @dependabot[bot] in #1133
- chore(deps): Bump zizmorcore/zizmor-action from 0.6.4 to 0.7.1 by @dependabot[bot] in #1130
- chore(deps): Bump actions/upload-artifact from 7.0.1 to 7.0.2 by @dependabot[bot] in #1125
- chore(deps): Bump actions/download-artifact from 8.0.1 to 8.0.2 by @dependabot[bot] in #1124
- chore(deps): Bump python-semantic-release/publish-action from 10.5.3 to 10.7.0 by @dependabot[bot] in #1114
- chore(deps): Bump python-semantic-release/python-semantic-release from 10.0.2 to 10.7.0 by @dependabot[bot] in #1113
New Contributors
- @juliosuas made their first contribution in #1106
Full Changelog: v7.5.0...v7.6.0
v7.5.0
v7.5.0 (2026-09-29)
Features
What's Changed
- chore: fix dep constriants by @jkowalleck in #1111
- feat(deps): support
chardetv7 by @tamird in #1110 - chore(deps-dev): Update uv requirement from 0.12.10 to 0.12.17 by @dependabot[bot] in #1108
- chore(deps): Bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4 by @dependabot[bot] in #1103
New Contributors
Full Changelog: v7.4.0...v7.5.0
v7.4.0
v7.4.0 (2026-09-15)
Features
What's Changed
- chore(deps): Bump zizmorcore/zizmor-action from 0.5.7 to 0.6.1 by @dependabot[bot] in #1088
- chore(deps): Bump actions/setup-python from 6.3.0 to 7.0.0 by @dependabot[bot] in #1085
- chore(deps): Bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in #1082
- chore(deps): Bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.1 by @dependabot[bot] in #1087
- chore(deps-dev): Update uv requirement from 0.11.17 to 0.11.32 by @dependabot[bot] in #1089
- chore(deps): Bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 by @dependabot[bot] in #1091
- chore(deps-dev): Update uv requirement from 0.11.32 to 0.12.10 by @dependabot[bot] in #1101
- chore(deps): Bump pypa/gh-action-pypi-publish from 1.14.1 to 1.14.2 by @dependabot[bot] in #1090
- chore(deps): Bump docker/login-action from 3.7.0 to 4.6.0 by @dependabot[bot] in #1092
- feat: respect env var
SOURCE_DATE_EPOCHwhen generating reproducible output by @Yusuf-Gadelrab in #1084 - chore(deps): Bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 by @dependabot[bot] in #1100
- chore(deps): Bump python from 3.14-slim to 3.14.6-slim by @dependabot[bot] in #1065
- chore(deps): Bump actions/upload-artifact from 6.0.0 to 7.0.1 by @dependabot[bot] in #1048
- chore(deps): Bump actions/download-artifact from 7.0.0 to 8.0.1 by @dependabot[bot] in #1046
New Contributors
- @Yusuf-Gadelrab made their first contribution in #1084
Full Changelog: v7.3.1...v7.4.0
v7.3.1
v7.3.1 (2026-07-23)
Bug Fixes
Documentation
What's Changed
- docs: usage
cyclonedx-py environmenthelp page add-Sby @jkowalleck in #1033 - docs: update docs by @jkowalleck in #1034
- chore(deps-dev): Update uv requirement from 0.10.10 to 0.11.6 by @dependabot[bot] in #1039
- chore(ci): pin GitHub Actions to immutable commit SHAs by @jkowalleck with @Copilot in #1043
- chore: harden all GitHub workflows using zizmor by @jkowalleck with @Copilot in #1054
- chore(deps-dev): Update uv requirement from 0.11.6 to 0.11.8 by @dependabot[bot] in #1051
- chore(ci): comments for pinned actions by @jkowalleck in #1061
- chore(deps): Bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 by @dependabot[bot] in #1068
- chore(deps): Bump snok/install-poetry from 1.4.1 to 1.4.2 by @dependabot[bot] in #1063
- chore(deps): Bump actions/checkout from 6.0.2 to 7.0.0 by @dependabot[bot] in #1067
- chore(deps-dev): Update uv requirement from 0.11.8 to 0.11.17 by @dependabot[bot] in #1062
- chore(deps): Bump actions/setup-python from 6.2.0 to 6.3.0 by @dependabot[bot] in #1069
- fix: improve error message for non-PEP 621 pyproject.toml by @jkowalleck in #1080
New Contributors
- @jkowalleck with @Copilot made their first contribution in #1043
Full Changelog: v7.3.0...v7.3.1
v7.3.0
v7.3.0 (2026-03-30)
Features
What's Changed
- chore(deps-dev): Update uv requirement from 0.10.2 to 0.10.7 by @dependabot[bot] in #1023
- chore(deps-dev): Update uv requirement from 0.10.7 to 0.10.9 by @dependabot[bot] in #1025
- chore(deps-dev): Update uv requirement from 0.10.9 to 0.10.10 by @dependabot[bot] in #1026
- feat: add -S flag to skip
*.pthevaluation during environment analysis by @jkowalleck in #1032
Full Changelog: v7.2.2...v7.3.0
v7.2.2
v7.2.2 (2026-02-19)
Documentation
What's Changed
- chore(deps-dev): Update uv requirement from 0.9.5 to 0.9.7 by @dependabot[bot] in #989
- chore(deps-dev): Update uv requirement from 0.9.7 to 0.9.8 by @dependabot[bot] in #992
- chore(deps-dev): Update uv requirement from 0.9.8 to 0.9.9 by @dependabot[bot] in #994
- chore(deps): Bump actions/checkout from 5 to 6 by @dependabot[bot] in #998
- chore(deps-dev): Update mypy requirement from 1.18.2 to 1.19.0 by @dependabot[bot] in #1000
- chore(deps-dev): Update uv requirement from 0.9.9 to 0.9.13 by @dependabot[bot] in #1001
- docs: modernize RTF setup by @jkowalleck in #1002
- chore(deps): Bump actions/download-artifact from 6 to 7 by @dependabot[bot] in #1005
- chore(deps): Bump actions/upload-artifact from 5 to 6 by @dependabot[bot] in #1004
- chore(deps-dev): Update mypy requirement from 1.19.0 to 1.19.1 by @dependabot[bot] in #1008
- chore(deps): Update pyupgrade version to 3.21.2 by @jkowalleck in #1010
- chore(ci): modernize GH ci by @jkowalleck in #1016
- chore(deps-dev): Update uv requirement from 0.9.13 to 0.9.28 by @dependabot[bot] in #1017
- chore(deps): Update packaging requirement from ^22 || ^23 || ^24 || ^25 to ^22 || ^23 || ^24 || ^25 || ^26 by @dependabot[bot] in #1015
- chore(deps-dev): Update uv requirement from 0.9.28 to 0.10.0 by @dependabot[bot] in #1018
- chore(deps-dev): Update uv requirement from 0.10.0 to 0.10.2 by @dependabot[bot] in #1019
Full Changelog: v7.2.1...v7.2.2
v7.2.1
v7.2.1 (2025-10-29)
Maintenance release.
Documentation
What's Changed
- docs: basic support for CycloneDX 1.7 by @jkowalleck in #984
- chore(deps): Bump actions/download-artifact from 5 to 6 by @dependabot[bot] in #985
- chore(deps): Bump actions/upload-artifact from 4 to 5 by @dependabot[bot] in #986
- chore(deps-dev): Update uv requirement from 0.9.3 to 0.9.5 by @dependabot[bot] in #987
- tests: more output for testbed inits by @jkowalleck in #988
Full Changelog: v7.2.0...v7.2.1
v7.2.0
v7.2.0 (2025-10-16)
Documentation
- Add Changelog to project urls (
5f38d75)
Features
What's Changed
- chore(deps): Bump actions/setup-python from 5 to 6 by @dependabot[bot] in #963
- chore(deps-dev): Update tox requirement from 4.29.0 to 4.30.2 by @dependabot[bot] in #965
- chore(deps-dev): Update uv requirement from 0.8.14 to 0.8.15 by @dependabot[bot] in #964
- chore(deps-dev): Update flake8-logging requirement from 1.7.0 to 1.8.0 by @dependabot[bot] in #969
- chore(deps-dev): Update uv requirement from 0.8.15 to 0.8.17 by @dependabot[bot] in #968
- chore(deps-dev): Update mypy requirement from 1.17.1 to 1.18.1 by @dependabot[bot] in #967
- chore(deps-dev): Update mypy requirement from 1.18.1 to 1.18.2 by @dependabot[bot] in #972
- chore(deps-dev): Update uv requirement from 0.8.17 to 0.8.19 by @dependabot[bot] in #973
- chore(deps-dev): Update uv requirement from 0.8.19 to 0.8.22 by @dependabot[bot] in #975
- chore(deps-dev): Update coverage requirement from 7.10.6 to 7.10.7 by @dependabot[bot] in #974
- chore(deps-dev): Update isort requirement from 6.0.1 to 6.1.0 by @dependabot[bot] in #976
- chore(deps-dev): Update tox requirement from 4.30.2 to 4.30.3 by @dependabot[bot] in #977
- chore(deps-dev): Update uv requirement from 0.8.22 to 0.9.2 by @dependabot[bot] in #980
- chore(deps-dev): Update pyupgrade requirement from 3.20.0 to 3.21.0 by @dependabot[bot] in #981
- feat: support Python 3.14 by @jkowalleck in #982
- chore(deps): Bump python from 3.13-slim to 3.14-slim by @dependabot[bot] in #979
- chore(deps-dev): Update uv requirement from 0.9.2 to 0.9.3 by @dependabot[bot] in #983
Full Changelog: v7.1.0...v7.2.0