Merge pull request #759 from Shnatsel/release-cyclonedx-bom-0.7.0

release cyclonedx-bom 0.7.0
CycloneDX · Aug 6, 2024 · 76d0b09 · 76d0b09
2 parents 03a7d27 + da3607e
commit 76d0b09
Show file tree

Hide file tree

Showing 4 changed files with 12 additions and 3 deletions.
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/cargo-cyclonedx/Cargo.toml b/cargo-cyclonedx/Cargo.toml
@@ -25,7 +25,7 @@ anyhow = "1.0.75"
 cargo-lock = "9.0.0"
 cargo_metadata = "0.18.1"
 clap = { version = "4.4.11", features = ["derive"] }
-cyclonedx-bom = { version = "0.6.1", path = "../cyclonedx-bom" }
+cyclonedx-bom = { version = "0.7.0", path = "../cyclonedx-bom" }
 env_logger = "0.10.0"
 log = "0.4.20"
 once_cell = "1.18.0"

diff --git a/cyclonedx-bom/CHANGELOG.md b/cyclonedx-bom/CHANGELOG.md
@@ -5,6 +5,15 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## 0.7.0 - 2024-08-06
+
+### Changed
+
+ - Made model types `pub` instead of `pub(crate)`, which allows client code to write more fields in SBOMs ([#758])
+ - Removed `#[non_exhaustive]` from `SpecVersion`, which was a source of bugs in client code ([#749])
+ - Switched from `packageurl` to `purl` crate as the PURL implementation ([#746])
+ - Removed JSON schema validation from the public API and moved `jsonschema` to dev-dependencies to combat dependency bloat ([#750])
+
 ## 0.6.1 - 2024-06-04
 
 ### Added

diff --git a/cyclonedx-bom/Cargo.toml b/cyclonedx-bom/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "cyclonedx-bom"
-version = "0.6.1"
+version = "0.7.0"
 description = "CycloneDX Software Bill of Materials Library"
 categories = ["encoding", "parser-implementations"]
 keywords = ["sbom", "bom", "components", "dependencies", "owasp"]