5.1.0

Changed

• Utilizes license file gatherer of @cyclonedx/cyclonedx-library, previously used own implementation (via #1398)

Dependencies

• Upgraded runtime-dependency @cyclonedx/cyclonedx-library@^8.4.0, was @^8.0.0 (via #1398)

Build

• Use TypeScript v5.8.3 now, was v5.8.2 (via #1382)

---

What's Changed

• refactor: group output targets in plugin by @jkowalleck in #1377
• chore(deps): bump the eslint group across 1 directory with 4 updates by @dependabot in #1378
• chore: cleanup eslint by @jkowalleck in #1379
• style: apply neostandard to JS files by @jkowalleck in #1380
• chore(deps): bump the eslint group across 1 directory with 3 updates by @dependabot in #1381
• tests: regression test for issue #1384 by @jkowalleck in #1385
• chore(deps): bump the eslint group across 1 directory with 3 updates by @dependabot in #1383
• chore(deps-dev): bump typescript from 5.8.2 to 5.8.3 in the typescript group across 1 directory by @dependabot in #1382
• chore(deps): bump typescript-eslint from 8.29.0 to 8.29.1 in /tools/code-style in the eslint group across 1 directory by @dependabot in #1386
• chore(deps): bump the eslint group across 1 directory with 3 updates by @dependabot in #1387
• chore(deps-dev): bump npm-run-all2 from 7.0.2 to 8.0.1 by @dependabot in #1389
• chore(deps): bump the eslint group across 1 directory with 4 updates by @dependabot in #1388
• chore(deps): bump the eslint group across 1 directory with 6 updates by @dependabot in #1391
• chore: add workflow permissions by @jkowalleck in #1392
• chore(deps): bump the eslint group across 1 directory with 3 updates by @dependabot in #1393
• ci: use node24 by @jkowalleck in #1394
• feat: use CDX-library's license evidence gathering by @jkowalleck in #1398
• chore(deps-dev): bump jest from 29.7.0 to 30.0.0 in the jest group across 1 directory by @dependabot in #1399
• chore(deps): bump the eslint group across 1 directory with 5 updates by @dependabot in #1400

Full Changelog: v5.0.1...v5.1.0

5.0.2-alpha.0

Signed-off-by: jkowalleck <[email protected]>

5.0.1

Maintenance release

Full Changelog: v5.0.0...v5.0.1

5.0.0

BREAKING Changes

• Dropped support for node<20.18.0 (#1362 via #1365)

Documentation

• Fixed docs of default values (via #1369)

Dependencies

• Upgraded runtime-dependency @cyclonedx/cyclonedx-library@^8.0.0, was @^7.0.0 (via #1367)
• Upgraded runtime-dependency normalize-package-data@^7.0.0, was @^3||^4||^5||^6 (via #1368)

Build

• Use TypeScript v5.8.2 now, was v5.7.3 (via #1376)

---

What's Changed

• refactor: call addRootComponentExtRefs() only once by @jkowalleck in #1358
• feat!: 5.0 by @jkowalleck in #1365
• chore(dev-deps): bump CS by @jkowalleck in #1375
• build: use [email protected] by @jkowalleck in #1376

Full Changelog: v4.0.1...v5.0.0

5.0.0-rc.2

Signed-off-by: jkowalleck <[email protected]>

4.0.1

Fixed

• Prevent multiple, duplicate build-system entries (#1356 via #1355)

---

What's Changed

• fix: prevent multiple, duplicate build-system entries by @jeremylong in #1355

Full Changelog: v4.0.0...v4.0.1

4.0.0

BREAKING Changes

• Option specVersion defaults to "1.6", was "1.4" (#1329 via #1333)
• Emit $.metadata.tools as components (#1330 via #1331)
  This affects only CycloneDX spec-version 1.5 and later.
• Emitted .purl values might be partially url-encoded (via #1331)
  This is caused by changes on underlying 3rd-party dependency packageurl-js.

Added

• Emit "webpack" as part of $.metadata.tools (via #1354)

Dependencies

• Upgraded runtime-dependency @cyclonedx/cyclonedx-library@^7.0.0, was @^6.11.0 (via #1331)

Build

• Use TypeScript v5.7.3 now, was v5.6.3 (via #1351)

---

What's Changed

• chore(deps-dev): bump typescript from 5.6.3 to 5.7.3 in the typescript group across 1 directory by @dependabot in #1351
• feat: tools as components by @jkowalleck in #1331
• feat!: emit defaults to CycloneDX1.6 by @jkowalleck in #1333
• feat: emit webpack as metadata.tools by @jkowalleck in #1354

Full Changelog: v3.17.0...v4.0.0

3.17.0

Added

• Configuration option for rootComponentVCS (#1344 via #1350)

---

What's Changed

• feat: add rootComponentVCS configuration by @jeremylong in #1350

Full Changelog: v3.16.0...v3.17.0

3.16.0

Added

• Configuration option for rootComponentBuildSystem (#1344 via #1349)

---

What's Changed

• build: do not bundle sourvcemaps by @jkowalleck in #1341
• build: do not emit comments by @jkowalleck in #1342
• feat: add rootComponentBuildSystem configuration by @jeremylong in #1349

New Contributors

• @jeremylong made their first contribution in #1349

Full Changelog: v3.15.1...v3.16.0

3.15.1

Fixed

• Properly detect license evidences like LICEN[CS]E.{Apache,BSD,GPL,MIT} (#1337 via #1339)

---

What's Changed

• refactor: remove unnessessary lowercase by @jkowalleck in #1327
• fix: Properly detect license evidences like LICEN[CS]E.{Apache,BSD,GPL,MIT} by @jkowalleck in #1339

Full Changelog: v3.15.0...v3.15.1