4.1.0

Added

• Support CycloneDX 1.7.1 (#633 via #634)
• Support CycloneDX 1.6.2 (via #634)
• Support CycloneDX 1.5.1 (via #634)
• Pulled SPDX license IDs v1.1-3.28.0 (#607 via #635)

---

What's Changed

• tools(deps-dev): Update friendsofphp/php-cs-fixer requirement from 3.94.0 to 3.94.2 in /tools/php-cs-fixer by @dependabot[bot] in #606
• docs: summarize CDX by @jkowalleck in #610
• Update commit command for signed-off commits by @jkowalleck in #613
• Delete .github/FUNDING.yml by @jkowalleck in #614
• chore(ci): pin GitHub Action references to immutable SHAs while preserving tag tracking by @Copilot in #618
• tools(deps-dev): Update vimeo/psalm requirement from 6.15.1 to 6.16.1 in /tools/psalm by @dependabot[bot] in #611
• Clarify issue resolution instructions in PR template by @jkowalleck in #627
• Update CONTRIBUTING.md by @jkowalleck in #628
• feat: add support CycloneDX 1.7.1 & 1.6.2 & 1.5.1 by @jkowalleck in #634
• gh-actions(deps): Bump actions/upload-artifact from 6.0.0 to 7.0.1 by @dependabot[bot] in #623
• gh-actions(deps): Bump actions/download-artifact from 7.0.0 to 8.0.1 by @dependabot[bot] in #624
• tools(deps-dev): Update ergebnis/composer-normalize requirement from 2.50.0 to 2.52.0 in /tools/composer-normalize by @dependabot[bot] in #629
• tools(deps-dev): Update friendsofphp/php-cs-fixer requirement from 3.94.2 to 3.95.3 in /tools/php-cs-fixer by @dependabot[bot] in #632
• gh-actions(deps): Bump softprops/action-gh-release from 2.6.2 to 3.0.0 by @dependabot[bot] in #619
• gh-actions(deps): Bump shivammathur/setup-php from 728c6c6b8cf02c2e48117716a91ee48313958a19 to v2.37.1 by @dependabot[bot] in #621
• Pulled SPDX license IDs v1.1-3.28.0 by @jkowalleck in #635
• chore: prep v4.1.0 by @jkowalleck in #636

New Contributors

• @Copilot made their first contribution in #618

Full Changelog: v4.0.0...v4.1.0