Skip to content

4.0.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 17 Feb 12:06
· 17 commits to master since this release
Immutable release. Only release title and notes can be modified.
v4.0.0
c95a371
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

⚠️ BREAKING changes

  • Removed deprecated symbols
  • Changed constructor of CycloneDX\Contrib\License\Factories\LicenseFactory
  • Changed dependencies

Removed

  • Class CycloneDX\Core\Factories\LicenseFactory (#571 via #587)
    Use CycloneDX\Contrib\License\Factories\LicenseFactory instead.
  • Class CycloneDX\Core\Utils\BomUtility (#571 via #587)
    Use CycloneDX\Contrib\Bom\Utils\BomUtils instead.
  • Method CycloneDX\Core\Validation\BaseValidator::getSpec() (#590 via #591)

Changed

  • CycloneDX\Contrib\License\Factories\LicenseFactory::__construct() parameters are no longer autopopulated (#571 via #587)
    Downstream implementations have to populate the parameters on their own, now.
  • CycloneDX\Core\Models\Component::setPackageUrl() accepts ?string (#571 via #588)
    Downstream implementations may use package-url/packageurl-php for generation.
  • CycloneDX\Core\Models\Component::getPackageUrl() returns ?string (#571 via #588)
    Downstream implementations may use package-url/packageurl-php for parsing.
  • CycloneDX\Core\Validation\BaseValidator::__construct() parameter is type CycloneDX\Core\Spec\Version (#590 via #591)
    Was internal type CycloneDX\Core\Spec\_SpecProtocol.

Dependencies

  • No longer depends on, but suggests composer/spdx-licenses:^1.5 (#571 via #587)
    May be used when utilizing CycloneDX\Contrib\License\Factories\LicenseFactory.
  • No longer depend on, but suggests package-url/packageurl-php (#571 via #588)
    May be used for parsing and crafting PackageURL strings downstream.

What's Changed

  • BC: removed deprecated symbols by @jkowalleck in #587
  • BC: PackageUrl as string by @jkowalleck in #588
  • Feat/base validator store version by @jkowalleck in #591
  • tools(deps-dev): Update friendsofphp/php-cs-fixer requirement from 3.92.3 to 3.92.5 in /tools/php-cs-fixer by @dependabot[bot] in #592
  • chore(deps): bump phpunit for github.com/advisories/GHSA-vvj3-c3rp-c85p by @jkowalleck in #598
  • tools(deps-dev): Update vimeo/psalm requirement from 6.14.3 to 6.15.0 in /tools/psalm by @dependabot[bot] in #595
  • tools(deps-dev): Update icanhazstring/composer-unused requirement from 0.9.5 to 0.9.6 in /tools/composer-unused by @dependabot[bot] in #596
  • tools(deps-dev): Update ergebnis/composer-normalize requirement from 2.48.2 to 2.49.0 in /tools/composer-normalize by @dependabot[bot] in #599
  • BC: v4.0.0 by @jkowalleck in #589
  • chore: prep v4.0.0 by @jkowalleck in #604
  • tools(deps-dev): Update vimeo/psalm requirement from 6.15.0 to 6.15.1 in /tools/psalm by @dependabot[bot] in #602
  • tools(deps-dev): Update ergebnis/composer-normalize requirement from 2.49.0 to 2.50.0 in /tools/composer-normalize by @dependabot[bot] in #601
  • tools(deps-dev): Update friendsofphp/php-cs-fixer requirement from 3.92.5 to 3.94.0 in /tools/php-cs-fixer by @dependabot[bot] in #600
  • docs: hint for parsing PURL by @jkowalleck in #605

Full Changelog: v3.10.0...v4.0.0

Contributors

jkowalleck and dependabot
Assets 3
Loading