Docs

• Usage with Vue (via #1519)

What's Changed

• docs: usage with Vue by @jkowalleck in #1519

Full Changelog: v5.3.1...v5.3.2

Fixed

• Reproducible BomRef values (via #1511)
• Properly generate PackageURLs for private packages (via #1514)

What's Changed

• ci: tets multiple os by @jkowalleck in #1512
• fix: reproducible bom refs by @jkowalleck in #1511
• chore(ci): mark experimental tests by @jkowalleck in #1513
• fix: PackageURL for private packages by @jkowalleck in #1514

Full Changelog: v5.3.0...v5.3.1

Fixed

• Qualified PackageURLs (via #1503)

Changed

• Take care of PackageURL generation ourselves, now (via #1503)
  Previously, this was done at best-effort by a 3rd-party library.

Dependencies

• Upgraded runtime-dependency @cyclonedx/cyclonedx-library@^10.0.0 now, was @^9.2.0 (via #1503)
• Added runtime-dependency packageurl-js@^2.0.1 (via #1503)
• Added runtime-dependency spdx-expression-parse@^3.0.1||^4.0.0 (via #1503)

What's Changed

• chore(deps): bump actions/download-artifact from 6 to 7 by @dependabot[bot] in #1488
• chore(deps): bump actions/upload-artifact from 5 to 6 by @dependabot[bot] in #1487
• chore(deps): bump knip from 5.70.2 to 5.80.2 in /tools/test-dependencies by @dependabot[bot] in #1495
• chore(deps): bump knip from 5.80.2 to 5.81.0 in /tools/test-dependencies by @dependabot[bot] in #1496
• chore(deps): bump knip from 5.81.0 to 5.82.1 in /tools/test-dependencies by @dependabot[bot] in #1498
• chore(deps): bump knip from 5.82.1 to 5.83.1 in /tools/test-dependencies by @dependabot[bot] in #1499
• ci: test node25 by @jkowalleck in #1509
• feat: upgrade CycloneDX lib 10.0.0 by @jkowalleck in #1503
• chore(deps-dev): bump c8 from 10.1.3 to 11.0.0 by @dependabot[bot] in #1507
• chore(deps): bump knip from 5.83.1 to 5.85.0 in /tools/test-dependencies by @dependabot[bot] in #1508
• Chore/test trusted publishing by @jkowalleck in #1510

Full Changelog: v5.2.4...v5.3.0

Dependencies

• Upgraded runtime-dependency @xmlbuilder2@^3.0.2||^4.0.3, was @^3.0.2 (via [#441])

What's Changed

• docs: enrich example simple by @jkowalleck in #1473
• chore(deps): bump knip from 5.69.0 to 5.69.1 in /tools/test-dependencies by @dependabot[bot] in #1476
• chore(deps): bump the eslint group across 1 directory with 3 updates by @dependabot[bot] in #1475
• ci: fix npm version by @jkowalleck in #1477
• chore(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in #1478
• chore(deps): bump knip from 5.69.1 to 5.70.2 in /tools/test-dependencies by @dependabot[bot] in #1484
• chore(deps): bump the eslint group across 1 directory with 3 updates by @dependabot[bot] in #1479
• chore(deps): bump xmlbuilder2 from 3.1.1 to 4.0.1 by @dependabot[bot] in #1483

Full Changelog: v5.2.3...v5.2.4

Fixed

• Explicitly prevent self-references in dependency graph (via #1472)

What's Changed

• chore(deps): bump knip from 5.68.0 to 5.69.0 in /tools/test-dependencies by @dependabot[bot] in #1466
• fix: explicitely prevent self-references in dependency graph by @jkowalleck in #1472

Full Changelog: v5.2.2...v5.2.3

Fixed

• Prevent Component duplications (#1418 via #1456)

Docs

• Correct default value of option specVersion (via #1460)

What's Changed

• docs: fix defaultValue of specVersion by @jkowalleck in #1460
• refactor: fix internal type override by @jkowalleck in #1461
• chore(deps): bump the eslint group across 1 directory with 4 updates by @dependabot[bot] in #1458
• chore(deps): bump knip from 5.66.4 to 5.68.0 in /tools/test-dependencies by @dependabot[bot] in #1459
• fix: prevent component duplication by @jkowalleck in #1456
• refactor: remove structuredClonePolyfill by @jkowalleck in #1463
• tests: move testbeds by @jkowalleck in #1464

Full Changelog: v5.2.1...v5.2.2

Fixed

• Typing for plugin options of enums support literals, too (via #1455)

What's Changed

• tests: testbeds enforce package managers by @jkowalleck in #1454
• chore(deps): bump knip from 5.66.3 to 5.66.4 in /tools/test-dependencies by @dependabot[bot] in #1453
• chore(deps): bump the eslint group across 1 directory with 3 updates by @dependabot[bot] in #1452
• fix: fixed some typing for plugin options by @jkowalleck in #1455

Full Changelog: v5.2.0...v5.2.1

Added

• Basic support for CycloneDX 1.7 (via #1451)

Build

• Use TypeScript v5.9.3 now, was v5.9.2 (via #1438)

What's Changed

• chore(deps): bump the eslint group across 1 directory with 5 updates by @dependabot[bot] in #1435
• chore(deps): bump knip from 5.63.1 to 5.64.1 in /tools/test-dependencies by @dependabot[bot] in #1437
• chore(deps): bump the eslint group across 1 directory with 3 updates by @dependabot[bot] in #1436
• chore(deps-dev): bump jest from 30.1.3 to 30.2.0 in the jest group across 1 directory by @dependabot[bot] in #1440
• chore(deps): bump knip from 5.64.1 to 5.64.3 in /tools/test-dependencies by @dependabot[bot] in #1441
• chore(deps-dev): bump typescript from 5.9.2 to 5.9.3 in the typescript group across 1 directory by @dependabot[bot] in #1438
• chore(deps): bump the eslint group across 1 directory with 5 updates by @dependabot[bot] in #1442
• chore: package-manager-cache: false by @jkowalleck in #1443
• chore(deps): bump the eslint group across 1 directory with 4 updates by @dependabot[bot] in #1444
• chore(deps): bump knip from 5.64.3 to 5.66.0 in /tools/test-dependencies by @dependabot[bot] in #1446
• chore(deps): bump actions/download-artifact from 5 to 6 by @dependabot[bot] in #1447
• chore(deps): bump actions/upload-artifact from 4 to 5 by @dependabot[bot] in #1448
• chore(deps): bump knip from 5.66.0 to 5.66.3 in /tools/test-dependencies by @dependabot[bot] in #1450
• chore(deps): bump the eslint group across 1 directory with 2 updates by @dependabot[bot] in #1449
• feat: support CycloneDX 1.7 by @jkowalleck in #1451

Full Changelog: v5.1.1...v5.2.0

Maintenance release

Runtime Dependencies

• Support @cyclonedx/cyclonedx-library@^9.0.0, was ^8.4.0 (via #1433)

Build

• Use TypeScript v5.9.2 now, was v5.8.3 (via #1416)

What's Changed

• refactor: normalizePackageManifest type assert by @jkowalleck in #1403
• chore(deps-dev): bump jest from 30.0.0 to 30.0.2 in the jest group across 1 directory by @dependabot[bot] in #1402
• chore(deps): bump the eslint group across 1 directory with 4 updates by @dependabot[bot] in #1401
• chore(deps): bump the eslint group across 1 directory with 4 updates by @dependabot[bot] in #1404
• chore(deps-dev): bump jest from 30.0.2 to 30.0.3 in the jest group across 1 directory by @dependabot[bot] in #1405
• chore(deps-dev): bump jest from 30.0.3 to 30.0.4 in the jest group across 1 directory by @dependabot[bot] in #1407
• chore: QA tool to detect missing dependencies by @jkowalleck in #1409
• chore(deps): bump neostandard from 0.12.1 to 0.12.2 in /tools/code-style by @dependabot[bot] in #1408
• chore(deps): bump the eslint group across 1 directory with 5 updates by @dependabot[bot] in #1410
• chore(deps): bump knip from 5.61.3 to 5.62.0 in /tools/test-dependencies by @dependabot[bot] in #1412
• chore(deps): bump eslint-plugin-jsdoc from 51.3.4 to 51.4.1 in /tools/code-style in the eslint group across 1 directory by @dependabot[bot] in #1411
• chore(deps-dev): bump jest from 30.0.4 to 30.0.5 in the jest group across 1 directory by @dependabot[bot] in #1414
• chore(deps): bump the eslint group across 1 directory with 5 updates by @dependabot[bot] in #1417
• chore(deps): bump the eslint group across 1 directory with 4 updates by @dependabot[bot] in #1420
• chore(deps): bump actions/download-artifact from 4 to 5 by @dependabot[bot] in #1419
• chore(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in #1423
• chore(deps): bump knip from 5.62.0 to 5.63.0 in /tools/test-dependencies by @dependabot[bot] in #1424
• chore(deps): bump the eslint group across 1 directory with 5 updates by @dependabot[bot] in #1427
• chore(deps-dev): bump typescript from 5.8.3 to 5.9.2 in the typescript group across 1 directory by @dependabot[bot] in #1416
• chore(deps): support normalize-package-data ^8.0.0 by @dependabot[bot] in #1415
• chore(deps-dev): bump jest from 30.0.5 to 30.1.1 in the jest group across 1 directory by @dependabot[bot] in #1426
• chore(deps): bump actions/setup-node from 4 to 5 by @dependabot[bot] in #1428
• chore(deps): bump the eslint group across 1 directory with 4 updates by @dependabot[bot] in #1429
• chore(deps-dev): bump jest from 30.1.2 to 30.1.3 in the jest group across 1 directory by @dependabot[bot] in #1430
• chore(deps): bump knip from 5.63.0 to 5.63.1 in /tools/test-dependencies by @dependabot[bot] in #1431
• chore(deps): bump the eslint group across 1 directory with 3 updates by @dependabot[bot] in #1432
• feat: support cyclonedx-library v9.0.0 by @jkowalleck in #1433

Full Changelog: v5.1.0...v5.1.1