3.15.1

Fixed

• Properly detect license evidences like LICEN[CS]E.{Apache,BSD,GPL,MIT} (#1337 via #1339)

---

What's Changed

• refactor: remove unnessessary lowercase by @jkowalleck in #1327
• fix: Properly detect license evidences like LICEN[CS]E.{Apache,BSD,GPL,MIT} by @jkowalleck in #1339

Full Changelog: v3.15.0...v3.15.1

3.15.0

• Added
  • Extended license evidence collection to also find *.LICEN[CS]E files (#1321 via #1322)
• Build
  • Use TypeScript v5.6.3 now, was v5.6.2 (via #1320)

---

What's Changed

• tests: modernize-1.6 by @jkowalleck in #1317
• refactor: type of CycloneDxWebpackPluginOptions.collectEvidence inherited by @jkowalleck in #1318
• docs: example uses specVersion:1.6 and collectEvidence:true by @jkowalleck in #1319
• tests: yarn setup not modify intended version by @jkowalleck in #1323
• feat: license evidence *.licen[cs]e by @jkowalleck in #1322
• chore(deps-dev): bump typescript from 5.6.2 to 5.6.3 in the typescript group by @dependabot in #1320

Full Changelog: v3.14.0...v3.15.0

3.14.0

Added

• Feature for collecting (license) evidence (#676 via #1309, #1312)
  Controlled with option collectEvidence, disabled by default.

Build

• Use TypeScript v5.6.2 now, was v5.5.3 (via #1302, #1306)

---

What's Changed

• chore(deps-dev): bump typescript from 5.5.3 to 5.5.4 in the typescript group by @dependabot in #1302
• chore(deps-dev): bump typescript from 5.5.4 to 5.6.2 in the typescript group by @dependabot in #1306
• feat: collect evidences for license by @Frozen-byte in #1309
• refactor: helpers by @jkowalleck in #1313
• fix: pollish evidence gathering by @jkowalleck in #1312
• chore(dev-deps): bump some eslint by @jkowalleck in #1314
• chore: migrate to npm-run-all2 by @jkowalleck in #1315

New Contributors

• @Frozen-byte made their first contribution in #1309

Full Changelog: v3.13.0...v3.14.0

3.13.0

Dependencies

• Upgraded runtime-dependency @cyclonedx/cyclonedx-library@^6.11.0, was @^6.6.0 (via #1300)
  This was done to incorporate non-breaking upstream changes and fixes.

Build

• Use TypeScript v5.5.3 now, was v5.4.5 (via #1296)

---

What's Changed

• tests: testbed vue2 cli by @jkowalleck in #1297
• tests: package manifest repository by @jkowalleck in #1299
• deps: cyclonedx library 6.11.0 by @jkowalleck in #1300
• chore(deps-dev): bump typescript from 5.4.5 to 5.5.3 in the typescript group across 1 directory by @dependabot in #1296

Full Changelog: v3.12.0...v3.13.0

3.12.0

Changed

• Improved package detection (#1284 via #1286)

---

What's Changed

• tests: yarn setup by @jkowalleck in #1288
• feat: enhance package.json finder by @reey in #1286
• chore(deb-deps): bump some deps by @jkowalleck in #1290

New Contributors

• @reey made their first contribution in #1286

Full Changelog: v3.11.0...v3.12.0

3.11.0

Added

• Licenses acknowledgement might be populated (#1274 via #1281)

Misc

• Raised dependency @cyclonedx/cyclonedx-library@^6.6.0, was @^6.5.0 (via #1281)

---

What's Changed

• chore(ci): use node 22 by @jkowalleck in #1278
• Ci/modernize artifact action by @jkowalleck in #1279
• feat: license acknowledgement by @jkowalleck in #1281

Full Changelog: v3.10.0...v3.11.0

3.10.0

Added support for CycloneDX Specification-1.6.

Changed

• This tool supports CycloneDX Specification-1.6 now (via #1276)

Added

• Option specVersion now supports value 1.6 to reflect CycloneDX Specification-1.6 (via #1276)
  Default value for that option is unchanged - still 1.4.

Build

• Use TypeScript v5.4.5 now, was v5.4.2 (via #1270)

---

What's Changed

• tests: integrate Angular17 by @jkowalleck in #1263
• chore(deps): bump webpack-dev-middleware from 5.3.3 to 5.3.4 in /tests/integration/webpack5-react18 by @dependabot in #1266
• feat: explicitely support CycloneDX v1.6 by @jkowalleck in #1276
• chore(deps-dev): bump typescript from 5.4.2 to 5.4.5 in the typescript group by @dependabot in #1270

Full Changelog: v3.9.2...v3.10.0

3.9.2

Build

• Use TypeScript v5.4.2 now, was v5.3.3 (via #1259)

---

What's Changed

• chore(deps-dev): bump the eslint group with 2 updates by @dependabot in #1247
• chore(deps-dev): bump c8 from 8.0.1 to 9.0.0 by @dependabot in #1250
• chore(deps): bump follow-redirects from 1.15.1 to 1.15.4 in /tests/integration/webpack5-react18 by @dependabot in #1251
• chore(deps-dev): bump follow-redirects from 1.15.2 to 1.15.4 in /tests/integration/webpack5-angular13 by @dependabot in #1252
• chore(deps-dev): bump the eslint group with 1 update by @dependabot in #1253
• chore(deps-dev): bump the eslint group with 1 update by @dependabot in #1254
• chore(deps-dev): bump ip from 1.1.8 to 1.1.9 in /tests/integration/webpack5-angular13 by @dependabot in #1256
• chore(deps-dev): bump the eslint group with 1 update by @dependabot in #1257
• chore(deps): bump follow-redirects from 1.15.4 to 1.15.6 in /tests/integration/webpack5-react18 by @dependabot in #1261
• chore(deps-dev): bump follow-redirects from 1.15.4 to 1.15.6 in /tests/integration/webpack5-angular13 by @dependabot in #1262
• chore(deps): bump softprops/action-gh-release from 1 to 2 by @dependabot in #1258
• chore(deps-dev): bump the typescript group with 1 update by @dependabot in #1259

Full Changelog: v3.9.1...v3.9.2

3.9.1

Fix

• Malformed ingested package versions are fixed (via #1246)

---

What's Changed

• fix: malformed ingested package versions are fixed by @jkowalleck in #1246

Full Changelog: v3.9.0...v3.9.1

3.9.0

Changed

• Hardened JSON imports (via #1242, #1245)

Build

• Use TypeScript v5.3.3 now, was v5.3.2 (via #1244)

---

What's Changed

• test: detailed logs in integration tests by @jkowalleck in #1240
• chore(deps-dev): bump the eslint group with 1 update by @dependabot in #1241
• feat: hardened JSON imports by @jkowalleck in #1242
• ci: test node21 by @jkowalleck in #1243
• chore(deps-dev): bump the typescript group with 1 update by @dependabot in #1244
• chore(deps-dev): bump the eslint group with 1 update by @dependabot in #1245

Full Changelog: v3.8.3...v3.9.0