Skip to content

feat: upgrade CycloneDX lib 10.0.0#1503

Merged
jkowalleck merged 11 commits intomasterfrom
feat/cyclonedx-lib-10.0.0
Mar 3, 2026
Merged

feat: upgrade CycloneDX lib 10.0.0#1503
jkowalleck merged 11 commits intomasterfrom
feat/cyclonedx-lib-10.0.0

Conversation

@jkowalleck
Copy link
Member

@jkowalleck jkowalleck commented Feb 27, 2026

Description

  • Fixed
    • Qualified PackageURLs
  • Changed
    • Take care of PackageURL generation ourselves, now
      Previously, this was done at best-effort by a 3rd-party library.
  • Dependencies
    • Upgraded runtime-dependency @cyclonedx/cyclonedx-library@^10.0.0 now, was @^9.2.0
    • Added runtime-dependency packageurl-js@^2.0.1
    • Added runtime-dependency spdx-expression-parse@^3.0.1||^4.0.0

Resolves or fixes issue:

AI Tool Disclosure

  • My contribution does not include any AI-generated content
  • My contribution includes AI-generated content, as disclosed below:
    • AI Tools: [e.g. GitHub CoPilot, ChatGPT, JetBrains Junie etc.]
    • LLMs and versions: [e.g. GPT-4.1, Claude Haiku 4.5, Gemini 2.5 Pro etc.]
    • Prompts: [Summarize the key prompts or instructions given to the AI tools]

Affirmation

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
@jkowalleck jkowalleck requested a review from a team as a code owner February 27, 2026 09:25
@jkowalleck jkowalleck added enhancement New feature or request dependencies Pull requests that update a dependency file labels Feb 27, 2026
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
@jkowalleck jkowalleck marked this pull request as draft February 27, 2026 10:53
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
@jkowalleck jkowalleck marked this pull request as ready for review March 3, 2026 11:04
@codacy-production
Copy link

codacy-production bot commented Mar 3, 2026

Coverage summary from Codacy

See diff coverage on Codacy

Coverage variation Diff coverage
-0.04% 95.08% (target: 80.00%)
Coverage variation details
Coverable lines Covered lines Coverage
Common ancestor commit (dd6c795) 760 711 93.55%
Head commit (48822fc) 863 (+103) 807 (+96) 93.51% (-0.04%)

Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: <coverage of head commit> - <coverage of common ancestor commit>

Diff coverage details
Coverable lines Covered lines Diff coverage
Pull request (#1503) 183 174 95.08%

Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: <covered lines added or modified>/<coverable lines added or modified> * 100%

See your quality gate settings    Change summary preferences

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
@jkowalleck jkowalleck merged commit cd52c37 into master Mar 3, 2026
17 of 18 checks passed
@jkowalleck jkowalleck deleted the feat/cyclonedx-lib-10.0.0 branch March 3, 2026 12:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant