5.0.1

Maintenance release

Full Changelog: v5.0.0...v5.0.1

5.0.0

BREAKING Changes

• Dropped support for node<20.18.0 (#1362 via #1365)

Documentation

• Fixed docs of default values (via #1369)

Dependencies

• Upgraded runtime-dependency @cyclonedx/cyclonedx-library@^8.0.0, was @^7.0.0 (via #1367)
• Upgraded runtime-dependency normalize-package-data@^7.0.0, was @^3||^4||^5||^6 (via #1368)

Build

• Use TypeScript v5.8.2 now, was v5.7.3 (via #1376)

---

What's Changed

• refactor: call addRootComponentExtRefs() only once by @jkowalleck in #1358
• feat!: 5.0 by @jkowalleck in #1365
• chore(dev-deps): bump CS by @jkowalleck in #1375
• build: use TS@5.8.3 by @jkowalleck in #1376

Full Changelog: v4.0.1...v5.0.0

5.0.0-rc.2

Signed-off-by: jkowalleck <jkowalleck@users.noreply.github.com>

4.0.1

Fixed

• Prevent multiple, duplicate build-system entries (#1356 via #1355)

---

What's Changed

• fix: prevent multiple, duplicate build-system entries by @jeremylong in #1355

Full Changelog: v4.0.0...v4.0.1

4.0.0

BREAKING Changes

• Option specVersion defaults to "1.6", was "1.4" (#1329 via #1333)
• Emit $.metadata.tools as components (#1330 via #1331)
  This affects only CycloneDX spec-version 1.5 and later.
• Emitted .purl values might be partially url-encoded (via #1331)
  This is caused by changes on underlying 3rd-party dependency packageurl-js.

Added

• Emit "webpack" as part of $.metadata.tools (via #1354)

Dependencies

• Upgraded runtime-dependency @cyclonedx/cyclonedx-library@^7.0.0, was @^6.11.0 (via #1331)

Build

• Use TypeScript v5.7.3 now, was v5.6.3 (via #1351)

---

What's Changed

• chore(deps-dev): bump typescript from 5.6.3 to 5.7.3 in the typescript group across 1 directory by @dependabot in #1351
• feat: tools as components by @jkowalleck in #1331
• feat!: emit defaults to CycloneDX1.6 by @jkowalleck in #1333
• feat: emit webpack as metadata.tools by @jkowalleck in #1354

Full Changelog: v3.17.0...v4.0.0

3.17.0

Added

• Configuration option for rootComponentVCS (#1344 via #1350)

---

What's Changed

• feat: add rootComponentVCS configuration by @jeremylong in #1350

Full Changelog: v3.16.0...v3.17.0

3.16.0

Added

• Configuration option for rootComponentBuildSystem (#1344 via #1349)

---

What's Changed

• build: do not bundle sourvcemaps by @jkowalleck in #1341
• build: do not emit comments by @jkowalleck in #1342
• feat: add rootComponentBuildSystem configuration by @jeremylong in #1349

New Contributors

• @jeremylong made their first contribution in #1349

Full Changelog: v3.15.1...v3.16.0

3.15.1

Fixed

• Properly detect license evidences like LICEN[CS]E.{Apache,BSD,GPL,MIT} (#1337 via #1339)

---

What's Changed

• refactor: remove unnessessary lowercase by @jkowalleck in #1327
• fix: Properly detect license evidences like LICEN[CS]E.{Apache,BSD,GPL,MIT} by @jkowalleck in #1339

Full Changelog: v3.15.0...v3.15.1

3.15.0

• Added
  • Extended license evidence collection to also find *.LICEN[CS]E files (#1321 via #1322)
• Build
  • Use TypeScript v5.6.3 now, was v5.6.2 (via #1320)

---

What's Changed

• tests: modernize-1.6 by @jkowalleck in #1317
• refactor: type of CycloneDxWebpackPluginOptions.collectEvidence inherited by @jkowalleck in #1318
• docs: example uses specVersion:1.6 and collectEvidence:true by @jkowalleck in #1319
• tests: yarn setup not modify intended version by @jkowalleck in #1323
• feat: license evidence *.licen[cs]e by @jkowalleck in #1322
• chore(deps-dev): bump typescript from 5.6.2 to 5.6.3 in the typescript group by @dependabot in #1320

Full Changelog: v3.14.0...v3.15.0

3.14.0

Added

• Feature for collecting (license) evidence (#676 via #1309, #1312)
  Controlled with option collectEvidence, disabled by default.

Build

• Use TypeScript v5.6.2 now, was v5.5.3 (via #1302, #1306)

---

What's Changed

• chore(deps-dev): bump typescript from 5.5.3 to 5.5.4 in the typescript group by @dependabot in #1302
• chore(deps-dev): bump typescript from 5.5.4 to 5.6.2 in the typescript group by @dependabot in #1306
• feat: collect evidences for license by @Frozen-byte in #1309
• refactor: helpers by @jkowalleck in #1313
• fix: pollish evidence gathering by @jkowalleck in #1312
• chore(dev-deps): bump some eslint by @jkowalleck in #1314
• chore: migrate to npm-run-all2 by @jkowalleck in #1315

New Contributors

• @Frozen-byte made their first contribution in #1309

Full Changelog: v3.13.0...v3.14.0