1.1.0

Added

• Capability to gather license text evidences (#33 via #193)
  This feature can be controlled via CLI switch --gather-license-texts.
  This feature is experimental. This feature is disabled per default.

Dependencies

• Upgraded runtime-dependency @cyclonedx/[email protected], was @6.11.0 (via #206, #237)
  This was done to incorporate non-breaking upstream changes and fixes.
• Upgraded runtime-dependency [email protected], was @6.0.1 (via #141)
  This was done to incorporate non-breaking upstream changes and fixes.
• Removed unused runtime dependency packageurl-js (via #220)

Build

• Use TypeScript v5.7.3 now, was v5.5.3 (via #160, #178, #233, #212, #244)
• Use @yarnpkg/builder v4.2.0 now, was v4.1.1 (via #164, #172)

---

What's Changed

• chore(deps-dev): Bump mocha from 10.6.0 to 10.7.0 in the mocha group by @dependabot in #161
• chore(deps-dev): Bump typescript from 5.5.3 to 5.5.4 in the typescript group by @dependabot in #160
• chore(deps-dev): Bump @yarnpkg/builder from 4.1.1 to 4.1.2 by @dependabot in #164
• chore(deps-dev): Bump mocha from 10.7.0 to 10.7.3 in the mocha group by @dependabot in #166
• chore: dependabot group @yarnpkg by @jkowalleck in #171
• chore(deps-dev): Bump @yarnpkg/builder from 4.1.2 to 4.2.0 in the yarn group by @dependabot in #172
• chore(deps): bump normalize-package-data from 6.0.1 to 6.0.2 by @dependabot in #141
• chore(deps-dev): bump typescript from 5.5.4 to 5.6.2 in the typescript group by @dependabot in #178
• chore: pin flict==2.1.14 by @jkowalleck in #197
• chore(ci): dont upgrade yarn unexpectedly by @jkowalleck in #200
• Switch to a TypeScript version that is compatible with the used ESLint version. by @AugustusKling in #199
• chore: Configure Renovate by @renovate in #202
• chore: disable dependabot by @jkowalleck in #211
• chore(deps): update dependency mocha to v10.8.2 by @renovate in #207
• chore(deps): update yarn to v4.5.1 by @renovate in #205
• chore(deps): update eslint by @renovate in #215
• chore: revisit release process by @jkowalleck in #216
• chore(deps): remove dep packageurl-js by @jkowalleck in #220
• Extraction of license text from files. by @AugustusKling in #193
• chore: bring back yarn.lock by @jkowalleck in #198
• chore(deps): lock file maintenance by @renovate in #232
• fix(deps): update dependency @cyclonedx/cyclonedx-library to v6.13.0 by @renovate in #206
• chore(deps): update yarn to v4.5.3 by @renovate in #223
• chore(deps): use TS 5.6.2 - again by @jkowalleck in #233
• chore(deps): update dependency typescript to v5.7.2 by @renovate in #212
• chore(deps): update dependency c8 to v10.1.3 by @renovate in #234
• chore(deps): lock file maintenance by @renovate in #235
• fix(deps): update dependency @cyclonedx/cyclonedx-library to v6.13.1 by @renovate in #237
• refactor: structuredClonePolyfill to helpers by @jkowalleck in #239
• fix(deps): update yarn by @renovate in #241
• chore(deps): update dependency fast-glob to v3.3.3 by @renovate in #243
• chore(deps): lock file maintenance by @renovate in #238
• chore(deps): update dependency typescript to v5.7.3 by @renovate in #244
• chore(deps): lock file maintenance by @renovate in #245
• ci: fix license checks by @jkowalleck in #247
• ci: use node 22/23 by @jkowalleck in #248

New Contributors

• @renovate made their first contribution in #202

Full Changelog: v1.0.2...v1.1.0

---

1.1.0-rc.1

Signed-off-by: jkowalleck <[email protected]>

1.0.2

Dependencies

• Upgraded runtime-dependency @cyclonedx/[email protected], was @6.10.0 (via #151, #157)
  This was done to incorporate non-breaking upstream changes and fixes.

Build

• Use TypeScript v5.5.3 now, was v5.5.2 (via #149)

---

What's Changed

• chore(deps-dev): Bump mocha from 10.5.2 to 10.6.0 in the mocha group by @dependabot in #150
• chore(deps): Bump @cyclonedx/cyclonedx-library from 6.10.0 to 6.10.1 by @dependabot in #151
• tests: fixerFix by @jkowalleck in #153
• tests: package manifest repository by @jkowalleck in #156
• chore(deps-dev): Bump typescript from 5.5.2 to 5.5.3 in the typescript group by @dependabot in #149
• chore(deps): Bump @cyclonedx/cyclonedx-library from 6.10.1 to 6.11.0 by @dependabot in #157

Full Changelog: v1.0.1...v1.0.2

---

1.0.1

Fixed

• Writing output-files on Windows systems (#145 via #146)

---

What's Changed

• chore: maybe enable publishing provenance by @jkowalleck in #144
• fix: windows output-file handling by @jkowalleck in #146
• chore(deps-dev): Bump mocha from 10.5.1 to 10.5.2 in the mocha group by @dependabot in #147

Full Changelog: v1.0.0...v1.0.1

---

1.0.0

First release (#8 via #6)

Responsibilities

• Provide a yarn (berry) plugin that generates CycloneDX SBOM for current workspace
• Provide a CLI wrapper for said plugin

Capabilities

• Support yarn (berry) v3 and v4
• Can output in XML and JSON format according to CycloneDX v1.2 - v1.6 spec
• Can omit dev-dependencies
• Can generate reproducible results

---

Big shoutout to all contributors:

• @AugustusKling
• @jkowalleck
• @rart

---

1.0.0-rc.8

Docs

• Enhanced the installation docs
• Fixed some typos here and there

---

What's Changed

• chore(deps-dev): Bump c8 from 9.1.0 to 10.1.2 by @dependabot in #131
• chore(deps-dev): Bump typescript from 5.4.5 to 5.5.2 in the typescript group by @dependabot in #135
• ci(dogfooding): add windows and macos runner by @jkowalleck in #137

Full Changelog: v1.0.0-rc.7...v1.0.0-rc.8

1.0.0-rc.7

Misc

• Refactored node imports (via #127)
• Revisited release pipeline

---

What's Changed

• build: use yarn publish by @jkowalleck in #126
• refactor: imports by @jkowalleck in #127

Full Changelog: v1.0.0-rc.5...v1.0.0-rc.7

1.0.0-rc.6

Signed-off-by: jkowalleck <[email protected]>

1.0.0-rc.5

Misc

• Added more tests (via #123, #124, #125)

---

What's Changed

• tests: more tests by @jkowalleck in #123
• tests: more tests by @jkowalleck in #124
• tests: more tests by @jkowalleck in #125

Full Changelog: v1.0.0-rc.2...v1.0.0-rc.5

1.0.0-rc.2

Added

• Support for yarn3 (#122 via #121)

Style

• Some refactoring here and there

Docs

• Some typo fixes and modernization here and there

---

What's Changed

• feat: support yarn3 by @jkowalleck in #121

Full Changelog: v1.0.0-rc.0...v1.0.0-rc.2