feat: add cyclonedx.model.dependency.Dependency.provides

[uzairchhapra]

Fixes #691

[uzairchhapra]

@jkowalleck PR is ready for review.
I am not too sure about the test cases so any guidance here would help. Thanks!

[jkowalleck]

thank you for your contribution, @uzairchhapra .

the implementation looks promising.

Regarding tests, we tend to go with an integration-test snapshot-solution, over detailed unit tests.
Please add new fixtures to https://github.com/CycloneDX/cyclonedx-python-lib/blob/main/tests/_data/models.py. your new function must start with get_bom_.
After adding new test data, please recreate the snapshots as described here: https://github.com/CycloneDX/cyclonedx-python-lib/blob/main/tests/_data/snapshots/README.md

[jkowalleck]

instead of adding a new parameter here, how about adding a new method instead: register_provision(self, target: Dependable, provides: Optional[Iterable[Dependable]] = None).

what do you think about this?
this would fit the original architectural plans better.

[uzairchhapra]

I'll give this a try

[jkowalleck]

please rename to get_bom_with_provides.

---

there is no intention to have models for certain CDX versions only.
In fact, it is intended to test the serialization with a target that is expected to omit certain parts.

[jkowalleck]

@uzairchhapra, I just wanted to ask how things are going.
Do you need any help with one of the open discussions/points?

[uzairchhapra]

@uzairchhapra, I just wanted to ask how things are going. Do you need any help with one of the open discussions/points?

Apologies for the delayed response. I will get to this this weekend. If I remember correctly, I was stuck in making the test function work get_bom_v1_6_with_provides. I see my PR has some conflicts now, so will try to address that too.