Sun Feb 20 21:23:44 2022 UTC ()
py-cyclonedx-python-lib: update to 1.3.0.

1.3.0 (2022-01-24)
Feature

    bom-ref for Component and Vulnerability default to a UUID (#142) (3953bb6)

1.2.0 (2022-01-24)
Feature

    Add CPE to component (#138) (269ee15)

1.1.1 (2022-01-19)
Fix

    Bump dependencies (#136) (18ec498)

1.1.0 (2022-01-13)
Feature

    Add support for bom.metadata.component (#118) (1ac31f4)

1.0.0 (2022-01-13)

Support for CycloneDX schema version 1.4 (#108)
Breaking Changes

Support for CycloneDX 1.4. This includes:

    Support for tools having externalReferences
    Allowing version for a Component to be optional in 1.4
    Support for releaseNotes per Component
    Support for the core schema implementation of Vulnerabilities (VEX)

Features

    $schema is now included in JSON BOMs
    Concrete Parsers how now been moved into downstream projects to keep this libraries focus on modelling and outputting CycloneDX - see https://github.com/CycloneDX/cyclonedx-python

Fixes

    Unit tests now include schema validation (we've left schema validation out of the core library due to dependency bloat)
    Ensure schema is adhered to in 1.0
    URIs are now used throughout the library through a new XsUri class to provide URI validation

Other

    Documentation is now hosted on readthedocs.org (https://cyclonedx-python-library.readthedocs.io/)
    Added reference to release of this library on Anaconda

0.12.3 (2021-12-15)
Fix

    Removed requirements-parser as dependency (temp) as not available for Python 3 as Wheel (#98) (3677d9f)

0.12.2 (2021-12-09)
Fix

    Tightened dependency packageurl-python (#95) (eb4ae5c)

0.12.1 (2021-12-09)
Fix

    Further loosened dependency definitions (8bef6ec)

0.12.0 (2021-12-09)
Feature

    Loosed dependency versions to make this library more consumable (55f10fb)


(wiz)
diff -r1.3 -r1.4 pkgsrc/security/py-cyclonedx-python-lib/Makefile
diff -r1.1 -r1.2 pkgsrc/security/py-cyclonedx-python-lib/PLIST
diff -r1.1 -r1.2 pkgsrc/security/py-cyclonedx-python-lib/distinfo
diff -r1.1 -r1.2 pkgsrc/security/py-cyclonedx-python-lib/patches/patch-setup.py
cvs diff -r1.3 -r1.4 pkgsrc/security/py-cyclonedx-python-lib/Makefile (expand / switch to unified diff)

--- pkgsrc/security/py-cyclonedx-python-lib/Makefile 2022/01/04 20:54:40 1.3
+++ pkgsrc/security/py-cyclonedx-python-lib/Makefile 2022/02/20 21:23:44 1.4
@@ -1,25 +1,30 @@ @@ -1,25 +1,30 @@
1# $NetBSD: Makefile,v 1.3 2022/01/04 20:54:40 wiz Exp $ 1# $NetBSD: Makefile,v 1.4 2022/02/20 21:23:44 wiz Exp $
2 2
3DISTNAME= cyclonedx-python-lib-0.11.1 3DISTNAME= cyclonedx-python-lib-1.3.0
4PKGNAME= ${PYPKGPREFIX}-${DISTNAME} 4PKGNAME= ${PYPKGPREFIX}-${DISTNAME}
5PKGREVISION= 1 
6CATEGORIES= security python 5CATEGORIES= security python
7MASTER_SITES= ${MASTER_SITE_PYPI:=c/cyclonedx-python-lib/} 6MASTER_SITES= ${MASTER_SITE_PYPI:=c/cyclonedx-python-lib/}
8 7
9MAINTAINER= pkgsrc-users@NetBSD.org 8MAINTAINER= pkgsrc-users@NetBSD.org
10HOMEPAGE= https://github.com/CycloneDX/cyclonedx-python-lib 9HOMEPAGE= https://github.com/CycloneDX/cyclonedx-python-lib
11COMMENT= Python library for generating CycloneDX SBOMs 10COMMENT= Python library for generating CycloneDX SBOMs
12LICENSE= apache-2.0 11LICENSE= apache-2.0
13 12
14DEPENDS+= ${PYPKGPREFIX}-packageurl-[0-9]*:../../devel/py-packageurl 13DEPENDS+= ${PYPKGPREFIX}-packageurl>=0.9:../../devel/py-packageurl
15DEPENDS+= ${PYPKGPREFIX}-requirements-parser-[0-9]*:../../devel/py-requirements-parser 14DEPENDS+= ${PYPKGPREFIX}-setuptools>=47.0.0:../../devel/py-setuptools
16DEPENDS+= ${PYPKGPREFIX}-setuptools-[0-9]*:../../devel/py-setuptools 15DEPENDS+= ${PYPKGPREFIX}-toml>=0.10.0:../../textproc/py-toml
17DEPENDS+= ${PYPKGPREFIX}-toml-[0-9]*:../../textproc/py-toml 16DEPENDS+= ${PYPKGPREFIX}-types-setuptools>=57.0.0:../../devel/py-types-setuptools
18DEPENDS+= ${PYPKGPREFIX}-types-setuptools-[0-9]*:../../devel/py-types-setuptools 17DEPENDS+= ${PYPKGPREFIX}-types-toml>=0.10.0:../../devel/py-types-toml
19DEPENDS+= ${PYPKGPREFIX}-types-toml-[0-9]*:../../devel/py-types-toml 
20TEST_DEPENDS+= ${PYPKGPREFIX}-test-[0-9]*:../../devel/py-test 18TEST_DEPENDS+= ${PYPKGPREFIX}-test-[0-9]*:../../devel/py-test
21 19
22PYTHON_VERSIONS_INCOMPATIBLE= 27 20PYTHON_VERSIONS_INCOMPATIBLE= 27
23 21
 22.include "../../lang/python/pyversion.mk"
 23
 24.if ${PYPKGPREFIX} == "py37"
 25DEPENDS+= ${PYPKGPREFIX}-importlib-metadata>=3.4:../../devel/py-importlib-metadata
 26DEPENDS+= ${PYPKGPREFIX}-typing-extensions>=3.10:../../devel/py-typing-extensions
 27.endif
 28
24.include "../../lang/python/egg.mk" 29.include "../../lang/python/egg.mk"
25.include "../../mk/bsd.pkg.mk" 30.include "../../mk/bsd.pkg.mk"
cvs diff -r1.1 -r1.2 pkgsrc/security/py-cyclonedx-python-lib/PLIST (expand / switch to unified diff)

--- pkgsrc/security/py-cyclonedx-python-lib/PLIST 2021/12/07 18:05:29 1.1
+++ pkgsrc/security/py-cyclonedx-python-lib/PLIST 2022/02/20 21:23:44 1.2
@@ -1,80 +1,79 @@ @@ -1,80 +1,79 @@
1@comment $NetBSD: PLIST,v 1.1 2021/12/07 18:05:29 wiz Exp $ 1@comment $NetBSD: PLIST,v 1.2 2022/02/20 21:23:44 wiz Exp $
2${PYSITELIB}/cyclonedx/__init__.py 2${PYSITELIB}/cyclonedx/__init__.py
3${PYSITELIB}/cyclonedx/__init__.pyc 3${PYSITELIB}/cyclonedx/__init__.pyc
4${PYSITELIB}/cyclonedx/__init__.pyo 4${PYSITELIB}/cyclonedx/__init__.pyo
5${PYSITELIB}/cyclonedx/exception/__init__.py 5${PYSITELIB}/cyclonedx/exception/__init__.py
6${PYSITELIB}/cyclonedx/exception/__init__.pyc 6${PYSITELIB}/cyclonedx/exception/__init__.pyc
7${PYSITELIB}/cyclonedx/exception/__init__.pyo 7${PYSITELIB}/cyclonedx/exception/__init__.pyo
8${PYSITELIB}/cyclonedx/exception/parser.py 8${PYSITELIB}/cyclonedx/exception/model.py
9${PYSITELIB}/cyclonedx/exception/parser.pyc 9${PYSITELIB}/cyclonedx/exception/model.pyc
10${PYSITELIB}/cyclonedx/exception/parser.pyo 10${PYSITELIB}/cyclonedx/exception/model.pyo
 11${PYSITELIB}/cyclonedx/exception/output.py
 12${PYSITELIB}/cyclonedx/exception/output.pyc
 13${PYSITELIB}/cyclonedx/exception/output.pyo
11${PYSITELIB}/cyclonedx/model/__init__.py 14${PYSITELIB}/cyclonedx/model/__init__.py
12${PYSITELIB}/cyclonedx/model/__init__.pyc 15${PYSITELIB}/cyclonedx/model/__init__.pyc
13${PYSITELIB}/cyclonedx/model/__init__.pyo 16${PYSITELIB}/cyclonedx/model/__init__.pyo
14${PYSITELIB}/cyclonedx/model/bom.py 17${PYSITELIB}/cyclonedx/model/bom.py
15${PYSITELIB}/cyclonedx/model/bom.pyc 18${PYSITELIB}/cyclonedx/model/bom.pyc
16${PYSITELIB}/cyclonedx/model/bom.pyo 19${PYSITELIB}/cyclonedx/model/bom.pyo
17${PYSITELIB}/cyclonedx/model/component.py 20${PYSITELIB}/cyclonedx/model/component.py
18${PYSITELIB}/cyclonedx/model/component.pyc 21${PYSITELIB}/cyclonedx/model/component.pyc
19${PYSITELIB}/cyclonedx/model/component.pyo 22${PYSITELIB}/cyclonedx/model/component.pyo
 23${PYSITELIB}/cyclonedx/model/impact_analysis.py
 24${PYSITELIB}/cyclonedx/model/impact_analysis.pyc
 25${PYSITELIB}/cyclonedx/model/impact_analysis.pyo
 26${PYSITELIB}/cyclonedx/model/issue.py
 27${PYSITELIB}/cyclonedx/model/issue.pyc
 28${PYSITELIB}/cyclonedx/model/issue.pyo
 29${PYSITELIB}/cyclonedx/model/release_note.py
 30${PYSITELIB}/cyclonedx/model/release_note.pyc
 31${PYSITELIB}/cyclonedx/model/release_note.pyo
20${PYSITELIB}/cyclonedx/model/vulnerability.py 32${PYSITELIB}/cyclonedx/model/vulnerability.py
21${PYSITELIB}/cyclonedx/model/vulnerability.pyc 33${PYSITELIB}/cyclonedx/model/vulnerability.pyc
22${PYSITELIB}/cyclonedx/model/vulnerability.pyo 34${PYSITELIB}/cyclonedx/model/vulnerability.pyo
23${PYSITELIB}/cyclonedx/output/__init__.py 35${PYSITELIB}/cyclonedx/output/__init__.py
24${PYSITELIB}/cyclonedx/output/__init__.pyc 36${PYSITELIB}/cyclonedx/output/__init__.pyc
25${PYSITELIB}/cyclonedx/output/__init__.pyo 37${PYSITELIB}/cyclonedx/output/__init__.pyo
26${PYSITELIB}/cyclonedx/output/json.py 38${PYSITELIB}/cyclonedx/output/json.py
27${PYSITELIB}/cyclonedx/output/json.pyc 39${PYSITELIB}/cyclonedx/output/json.pyc
28${PYSITELIB}/cyclonedx/output/json.pyo 40${PYSITELIB}/cyclonedx/output/json.pyo
29${PYSITELIB}/cyclonedx/output/schema.py 41${PYSITELIB}/cyclonedx/output/schema.py
30${PYSITELIB}/cyclonedx/output/schema.pyc 42${PYSITELIB}/cyclonedx/output/schema.pyc
31${PYSITELIB}/cyclonedx/output/schema.pyo 43${PYSITELIB}/cyclonedx/output/schema.pyo
 44${PYSITELIB}/cyclonedx/output/serializer/__init__.py
 45${PYSITELIB}/cyclonedx/output/serializer/__init__.pyc
 46${PYSITELIB}/cyclonedx/output/serializer/__init__.pyo
 47${PYSITELIB}/cyclonedx/output/serializer/json.py
 48${PYSITELIB}/cyclonedx/output/serializer/json.pyc
 49${PYSITELIB}/cyclonedx/output/serializer/json.pyo
32${PYSITELIB}/cyclonedx/output/xml.py 50${PYSITELIB}/cyclonedx/output/xml.py
33${PYSITELIB}/cyclonedx/output/xml.pyc 51${PYSITELIB}/cyclonedx/output/xml.pyc
34${PYSITELIB}/cyclonedx/output/xml.pyo 52${PYSITELIB}/cyclonedx/output/xml.pyo
35${PYSITELIB}/cyclonedx/parser/__init__.py 53${PYSITELIB}/cyclonedx/parser/__init__.py
36${PYSITELIB}/cyclonedx/parser/__init__.pyc 54${PYSITELIB}/cyclonedx/parser/__init__.pyc
37${PYSITELIB}/cyclonedx/parser/__init__.pyo 55${PYSITELIB}/cyclonedx/parser/__init__.pyo
38${PYSITELIB}/cyclonedx/parser/conda.py 
39${PYSITELIB}/cyclonedx/parser/conda.pyc 
40${PYSITELIB}/cyclonedx/parser/conda.pyo 
41${PYSITELIB}/cyclonedx/parser/environment.py 
42${PYSITELIB}/cyclonedx/parser/environment.pyc 
43${PYSITELIB}/cyclonedx/parser/environment.pyo 
44${PYSITELIB}/cyclonedx/parser/pipenv.py 
45${PYSITELIB}/cyclonedx/parser/pipenv.pyc 
46${PYSITELIB}/cyclonedx/parser/pipenv.pyo 
47${PYSITELIB}/cyclonedx/parser/poetry.py 
48${PYSITELIB}/cyclonedx/parser/poetry.pyc 
49${PYSITELIB}/cyclonedx/parser/poetry.pyo 
50${PYSITELIB}/cyclonedx/parser/requirements.py 
51${PYSITELIB}/cyclonedx/parser/requirements.pyc 
52${PYSITELIB}/cyclonedx/parser/requirements.pyo 
53${PYSITELIB}/cyclonedx/py.typed 56${PYSITELIB}/cyclonedx/py.typed
54${PYSITELIB}/cyclonedx/schema/bom-1.0.xsd 57${PYSITELIB}/cyclonedx/schema/bom-1.0.xsd
55${PYSITELIB}/cyclonedx/schema/bom-1.1.xsd 58${PYSITELIB}/cyclonedx/schema/bom-1.1.xsd
56${PYSITELIB}/cyclonedx/schema/bom-1.2-strict.schema.json 59${PYSITELIB}/cyclonedx/schema/bom-1.2-strict.schema.json
57${PYSITELIB}/cyclonedx/schema/bom-1.2.schema.json 60${PYSITELIB}/cyclonedx/schema/bom-1.2.schema.json
58${PYSITELIB}/cyclonedx/schema/bom-1.2.xsd 61${PYSITELIB}/cyclonedx/schema/bom-1.2.xsd
59${PYSITELIB}/cyclonedx/schema/bom-1.3-strict.schema.json 62${PYSITELIB}/cyclonedx/schema/bom-1.3-strict.schema.json
60${PYSITELIB}/cyclonedx/schema/bom-1.3.proto 63${PYSITELIB}/cyclonedx/schema/bom-1.3.proto
61${PYSITELIB}/cyclonedx/schema/bom-1.3.schema.json 64${PYSITELIB}/cyclonedx/schema/bom-1.3.schema.json
62${PYSITELIB}/cyclonedx/schema/bom-1.3.xsd 65${PYSITELIB}/cyclonedx/schema/bom-1.3.xsd
 66${PYSITELIB}/cyclonedx/schema/bom-1.4.schema.json
 67${PYSITELIB}/cyclonedx/schema/bom-1.4.xsd
63${PYSITELIB}/cyclonedx/schema/ext/bom-descriptor-0.9.xsd 68${PYSITELIB}/cyclonedx/schema/ext/bom-descriptor-0.9.xsd
64${PYSITELIB}/cyclonedx/schema/ext/bom-descriptor-1.0.xsd 69${PYSITELIB}/cyclonedx/schema/ext/bom-descriptor-1.0.xsd
65${PYSITELIB}/cyclonedx/schema/ext/dependency-graph-1.0.xsd 70${PYSITELIB}/cyclonedx/schema/ext/dependency-graph-1.0.xsd
66${PYSITELIB}/cyclonedx/schema/ext/vulnerability-1.0-SNAPSHOT.schema.json 71${PYSITELIB}/cyclonedx/schema/ext/vulnerability-1.0-SNAPSHOT.schema.json
67${PYSITELIB}/cyclonedx/schema/ext/vulnerability-1.0.xsd 72${PYSITELIB}/cyclonedx/schema/ext/vulnerability-1.0.xsd
68${PYSITELIB}/cyclonedx/schema/spdx.schema.json 73${PYSITELIB}/cyclonedx/schema/spdx.schema.json
69${PYSITELIB}/cyclonedx/schema/spdx.xsd 74${PYSITELIB}/cyclonedx/schema/spdx.xsd
70${PYSITELIB}/cyclonedx/utils/__init__.py 
71${PYSITELIB}/cyclonedx/utils/__init__.pyc 
72${PYSITELIB}/cyclonedx/utils/__init__.pyo 
73${PYSITELIB}/cyclonedx/utils/conda.py 
74${PYSITELIB}/cyclonedx/utils/conda.pyc 
75${PYSITELIB}/cyclonedx/utils/conda.pyo 
76${PYSITELIB}/${EGG_INFODIR}/PKG-INFO 75${PYSITELIB}/${EGG_INFODIR}/PKG-INFO
77${PYSITELIB}/${EGG_INFODIR}/SOURCES.txt 76${PYSITELIB}/${EGG_INFODIR}/SOURCES.txt
78${PYSITELIB}/${EGG_INFODIR}/dependency_links.txt 77${PYSITELIB}/${EGG_INFODIR}/dependency_links.txt
79${PYSITELIB}/${EGG_INFODIR}/requires.txt 78${PYSITELIB}/${EGG_INFODIR}/requires.txt
80${PYSITELIB}/${EGG_INFODIR}/top_level.txt 79${PYSITELIB}/${EGG_INFODIR}/top_level.txt
cvs diff -r1.1 -r1.2 pkgsrc/security/py-cyclonedx-python-lib/distinfo (expand / switch to unified diff)

--- pkgsrc/security/py-cyclonedx-python-lib/distinfo 2021/12/07 18:05:29 1.1
+++ pkgsrc/security/py-cyclonedx-python-lib/distinfo 2022/02/20 21:23:44 1.2
@@ -1,6 +1,6 @@ @@ -1,6 +1,6 @@
1$NetBSD: distinfo,v 1.1 2021/12/07 18:05:29 wiz Exp $ 1$NetBSD: distinfo,v 1.2 2022/02/20 21:23:44 wiz Exp $
2 2
3BLAKE2s (cyclonedx-python-lib-0.11.1.tar.gz) = 8e639a7dba82ed7588e0e4cacfd22878048d6c8efc3f0f1703a68056138a32df 3BLAKE2s (cyclonedx-python-lib-1.3.0.tar.gz) = faef53b42112a10089fa350852bbdac88453113085989cd9a0452e5c9bba932a
4SHA512 (cyclonedx-python-lib-0.11.1.tar.gz) = ed92383fce3d98bd8ed28c1591fc92f3670f6450106fdb4898622bef3c79d0b1140c5878dc5436fbb3a3bcfffff7245744d4e9e505685925f24fef2be847a39c 4SHA512 (cyclonedx-python-lib-1.3.0.tar.gz) = d14b3c426a337bf3d4d7deb1a22dccddc15adde51220e48db613e16c60432cc3cc47ec88b5fde76684c808fa1f98cbcd60d67e2cab1c708401ffb11254564afc
5Size (cyclonedx-python-lib-0.11.1.tar.gz) = 98048 bytes 5Size (cyclonedx-python-lib-1.3.0.tar.gz) = 134990 bytes
6SHA1 (patch-setup.py) = 1d077726a87994685b9035afb379d80dc6c4c6d3 6SHA1 (patch-setup.py) = 3033f49a66cee7048c4c91d2122591684b46bb8c
cvs diff -r1.1 -r1.2 pkgsrc/security/py-cyclonedx-python-lib/patches/Attic/patch-setup.py (expand / switch to unified diff)

--- pkgsrc/security/py-cyclonedx-python-lib/patches/Attic/patch-setup.py 2021/12/07 18:05:29 1.1
+++ pkgsrc/security/py-cyclonedx-python-lib/patches/Attic/patch-setup.py 2022/02/20 21:23:44 1.2
@@ -1,25 +1,18 @@ @@ -1,25 +1,18 @@
1$NetBSD: patch-setup.py,v 1.1 2021/12/07 18:05:29 wiz Exp $ 1$NetBSD: patch-setup.py,v 1.2 2022/02/20 21:23:44 wiz Exp $
2 2
3Be less restrictive in dependencies. 3Be less restrictive in dependencies.
4 4
5--- setup.py.orig 2021-11-10 15:42:02.183635700 +0000 5--- setup.py.orig 2022-01-24 13:30:26.931830600 +0000
6+++ setup.py 6+++ setup.py
7@@ -13,12 +13,12 @@ package_data = \ 7@@ -15,9 +15,9 @@ package_data = \
8 {'': ['*'], 'cyclonedx': ['schema/*', 'schema/ext/*']} 
9  
10 install_requires = \ 8 install_requires = \
11-['packageurl-python>=0.9.4,<0.10.0', 9 ['packageurl-python>=0.9',
12- 'requirements_parser>=0.2.0,<0.3.0', 10 'setuptools>=47.0.0',
13- 'setuptools>=50.3.2,<51.0.0', 11- 'toml>=0.10.0,<0.11.0',
14- 'toml>=0.10.2,<0.11.0', 12+ 'toml>=0.10.0',
15- 'types-setuptools>=57.4.2,<58.0.0', 13 'types-setuptools>=57.0.0',
16- 'types-toml>=0.10.1,<0.11.0'] 14- 'types-toml>=0.10.0,<0.11.0']
17+['packageurl-python>=0.9.4', 15+ 'types-toml>=0.10.0']
18+ 'requirements_parser>=0.2.0', 
19+ 'setuptools>=50.3.2', 
20+ 'toml>=0.10.2', 
21+ 'types-setuptools>=57.4.2', 
22+ 'types-toml>=0.10.1'] 
23  16
24 extras_require = \ 17 extras_require = \
25 {':python_version >= "3.6" and python_version < "3.8"': ['importlib-metadata>=4.8.1,<5.0.0', 18 {':python_version < "3.8"': ['importlib-metadata>=3.4',