4.0.0

BREAKING Changes

• Option specVersion defaults to "1.6", was "1.4" (#1329 via #1333)
• Emit $.metadata.tools as components (#1330 via #1331)
  This affects only CycloneDX spec-version 1.5 and later.
• Emitted .purl values might be partially url-encoded (via #1331)
  This is caused by changes on underlying 3rd-party dependency packageurl-js.

Added

• Emit "webpack" as part of $.metadata.tools (via #1354)

Dependencies

• Upgraded runtime-dependency @cyclonedx/cyclonedx-library@^7.0.0, was @^6.11.0 (via #1331)

Build

• Use TypeScript v5.7.3 now, was v5.6.3 (via #1351)

---

What's Changed

• chore(deps-dev): bump typescript from 5.6.3 to 5.7.3 in the typescript group across 1 directory by @dependabot in #1351
• feat: tools as components by @jkowalleck in #1331
• feat!: emit defaults to CycloneDX1.6 by @jkowalleck in #1333
• feat: emit webpack as metadata.tools by @jkowalleck in #1354

Full Changelog: v3.17.0...v4.0.0