All pull requests

Pull requests

• chore(deps): bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4

  dependencies
  #1047·dependabot[bot] opened Sep 19, 2026·

  ·
  1

• chore(deps): update sphinx-autoapi requirement from <4,>=3 to >=3.8.1,<4

  dependencies
  #1042·dependabot[bot] opened Sep 5, 2026·

  ·
  2

• chore(deps): bump python-semantic-release/python-semantic-release from 10.0.2 to 10.6.2

  dependencies
  #1041·dependabot[bot] opened Sep 5, 2026·

  ·
  2

• chore(deps): bump python-semantic-release/publish-action from 10.5.3 to 10.6.2

  dependencies
  #1040·dependabot[bot] opened Sep 5, 2026·

  ·
  2

• feat: add cyclonedx.model.dependency.Dependency.provides

  enhancementschema 1.6
  #1036·saquibsaifee opened Sep 1, 2026·

  ·
  1

  10

• feat: add support for Bom.annotations

  enhancementschema 1.5
  #1035·saquibsaifee opened Sep 1, 2026·

  ·
  3

• feat: add support for Data object for Service properties

  enhancementschema 1.6
  #1034·saquibsaifee opened Aug 31, 2026·

  ·
  1

  4

• perf: cache dependency refs to skip redundant registration in validate()

  performance
  #1033·saquibsaifee opened Aug 31, 2026·

  ·
  5

• feat: Add version_range property to Component for CycloneDX v1.7

  enhancementschema 1.7
  #1032·nulano opened Aug 28, 2026·

  ·
  15

• feat(crypto): CBOM model metadata

  enhancementschema 1.7
  #1016·qkaiser opened Jul 14, 2026·

  ·
  8

• feat(crypto): support standardized algorithm identifiers

  enhancementschema 1.7
  #1015·qkaiser opened Jul 14, 2026·

  ·
  5

• chore(deps): update sphinx requirement from <9,>=8 to >=8.1.3,<9

  dependencies
  #1009·dependabot[bot] opened Jun 27, 2026·

  ·
  3

• perf: speed up dependency registration in Bom.validate()

  performance
  #1007·inspired-geek opened Jun 23, 2026·

  ·
  1

  5

• chore(deps-dev): update xmldiff requirement from 2.7.0 to 3.0

  dependencies
  #1005·dependabot[bot] opened Jun 20, 2026·

  ·
  1

• feat: Implement JSF (JSON Signature Format) signature support

  enhancementschema 1.4
  #994·wiebe-vandendriessche opened Jun 9, 2026·

  ·
  2

  16

• Add Pyright to QA tooling and Python CI

  #987·jkowalleck with CopilotAI opened Jun 5, 2026·

  ·
  2

  

• feat: add support for Service.trustZone

  enhancementschema 1.5
  #980·VanL opened May 19, 2026·

  ·
  22

• docs: link own github

  documentation
  #962·jkowalleck opened Apr 15, 2026·

  ·
  3

• feat: license.licensing implementation

  enhancementschema 1.5
  #948·lmco-shuynh opened Mar 16, 2026·

  ·
  10

• feat(validation): improve user-facing schema validation errors

  #940·saquibsaifee opened Feb 28, 2026·

  ·
  1

  6

• refactor!: remove packageurl-python dependency

  breaking changerefactor
  #939·saquibsaifee opened Feb 28, 2026·

  ·
  16

• feat!: implement ModelValidator and remove Bom.validate()

  breaking changeenhancement
  #935·saquibsaifee opened Feb 15, 2026·

  ·
  1

  4

• feat!: de/serialize with cattrs

  breaking change
  #934·jkugler opened Feb 5, 2026·

  ·
  7

• feat: Add support for Component modelCard field

  enhancementschema 1.5
  #914·wiebe-vandendriessche opened Nov 18, 2025·

  ·
  1

  88

• [IDEA] feat!: discriminate every BomRef as promissed

  breaking changeenhancementidea
  #861·jkowalleck opened Jul 23, 2025·

  ·
  1