9.4.0

Added

• New entry points for /Contrib and known submodules (via #1343)
  See package.json::exports for details.

Changes

• Moved non‑standard implementations to Contrib area (#1344 via #1343)

Deprecated

• Certain exports have been deprecated; downstream imports should be updated to the new locations (#1344 via #1343)
  Note: the symbols themselves remain supported. See documentation and the "Refactored" section below for details.

Refactor

• The following symbols were moved. (#1344 via #1343)
  The symbols are still import-able through their old location.
  • OLD -> NEW
  • Builders.FromNodePackageJson -> Contrib.FromNodePackageJson.Builders
  • Factories.FromNodePackageJson -> Contrib.FromNodePackageJson.Factories
  • Factories.LicenseFactory -> Contrib.License.Factories.LicenseFactory
  • Factories.PackageUrlFactory -> Contrib.PackageUrl.Factories.PackageUrlFactory
  • Types.assertNodePackageJson -> Contrib.FromNodePackageJson.Types.assertNodePackageJson
  • Types.isNodePackageJson -> Contrib.FromNodePackageJson.Types.isNodePackageJson
  • Types.NodePackageJson -> Contrib.FromNodePackageJson.Types.NodePackageJson
  • Utils.BomUtility -> Contrib.Bom.Utils
  • Utils.LicenseUtility -> Contrib.License.Utils
  • Utils.NpmjsUtility -> Contrib.FromNodePackageJson.Utils

Style

• Applied latest code style (via #1341)

Build

• Use webpack v5.103.0 now, was v5.102.1 (via #1340)

---

What's Changed

• docs: examplesfor CDX17 by @jkowalleck in #1326
• chore(deps): bump actions/download-artifact from 5 to 6 by @dependabot[bot] in #1327
• chore(deps): bump actions/upload-artifact from 4 to 5 by @dependabot[bot] in #1328
• chore(deps): bump the eslint group across 1 directory with 2 updates by @dependabot[bot] in #1329
• chore(deps): bump knip from 5.66.1 to 5.66.3 in /tools/test-dependencies by @dependabot[bot] in #1330
• chore(deps): bump the eslint group across 1 directory with 2 updates by @dependabot[bot] in #1331
• chore(deps): bump knip from 5.66.3 to 5.66.4 in /tools/test-dependencies by @dependabot[bot] in #1332
• chore(deps): bump the eslint group across 1 directory with 3 updates by @dependabot[bot] in #1333
• chore(deps-dev): bump mocha from 11.7.4 to 11.7.5 in the mocha group across 1 directory by @dependabot[bot] in #1334
• chore(deps): bump knip from 5.66.4 to 5.68.0 in /tools/test-dependencies by @dependabot[bot] in #1335
• chore(deps): bump knip from 5.68.0 to 5.69.1 in /tools/test-dependencies by @dependabot[bot] in #1337
• chore: eslint config fix by @jkowalleck in #1338
• chore(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in #1339
• chore(deps): bump knip from 5.69.1 to 5.70.2 in /tools/test-dependencies by @dependabot[bot] in #1347
• chore(deps-dev): bump webpack from 5.102.1 to 5.103.0 in the webpack group across 1 directory by @dependabot[bot] in #1340
• chore(deps): bump the eslint group across 1 directory with 4 updates by @dependabot[bot] in #1341
• chore(deps): bump knip from 5.70.2 to 5.71.0 in /tools/test-dependencies by @dependabot[bot] in #1349
• feat: Moved non‑standard implementations to Contrib area by @jkowalleck in #1343

Full Changelog: v9.2.0...v9.4.0

9.2.0

Added

• Support CycloneDX 1.7 (#1325 via #1324)

---

What's Changed

• feat: basic support for CycloneDX 1.7 by @jkowalleck in #1324

Full Changelog: v9.1.0...v9.2.0

9.1.0

• Dependencies
  • Support optional peer dependency xmlbuilder2@^3.0.2||^4.0.0, was xmlbuilder2@^3.0.2 (via #1321)
• Build
  • Use TypeScript v5.9.3 now, was v5.9.2 (via #1308)
  • Use webpack v5.102.0 now, was v5.101.3 (via #1309)

---

What's Changed

• chore(deps-dev): bump memfs from 4.39.0 to 4.42.0 by @dependabot[bot] in #1303
• chore(deps): bump the eslint group across 1 directory with 4 updates by @dependabot[bot] in #1302
• chore(deps): bump knip from 5.63.1 to 5.64.1 in /tools/test-dependencies by @dependabot[bot] in #1306
• chore(deps-dev): bump memfs from 4.42.0 to 4.46.1 by @dependabot[bot] in #1305
• chore(deps): bump the eslint group across 1 directory with 3 updates by @dependabot[bot] in #1304
• chore: package-manager-cache: false by @jkowalleck in #1315
• ci: fix install of deps by @jkowalleck in #1316
• chore(deps): bump knip from 5.64.1 to 5.65.0 in /tools/test-dependencies by @dependabot[bot] in #1317
• chore(deps-dev): bump mocha from 11.7.2 to 11.7.4 in the mocha group across 1 directory by @dependabot[bot] in #1310
• chore(deps): bump the eslint group across 1 directory with 4 updates by @dependabot[bot] in #1314
• chore(deps-dev): bump typescript from 5.9.2 to 5.9.3 in the typescript group across 1 directory by @dependabot[bot] in #1308
• chore(deps-dev): bump webpack from 5.101.3 to 5.102.0 in the webpack group across 1 directory by @dependabot[bot] in #1309
• chore(deps): bump @eslint/js from 9.37.0 to 9.38.0 in /tools/code-style in the eslint group across 1 directory by @dependabot[bot] in #1318
• chore(deps): bump knip from 5.65.0 to 5.66.0 in /tools/test-dependencies by @dependabot[bot] in #1320
• feat: support xmlbuilder2 v4 by @jkowalleck in #1321
• chore(deps): bump knip from 5.66.0 to 5.66.1 in /tools/test-dependencies by @dependabot[bot] in #1323
• chore(deps): bump eslint-plugin-jsdoc from 61.1.4 to 61.1.5 in /tools/code-style in the eslint group across 1 directory by @dependabot[bot] in #1322

Full Changelog: v9.0.0...v9.1.0

9.0.0

BREAKING Changes

• Optional dependencies became optional peer dependencies (via #1295)

Added

• Give downstream users control over optional dependencies (#1294 via #1295)

---

What's Changed

• docs: how we manage shipped files by @jkowalleck in #1296
• feat!: give downstream users control over optional dependencies by @GauBen in #1295
• chore(deps-dev): bump memfs from 4.38.2 to 4.39.0 by @dependabot[bot] in #1298
• chore(deps): bump the eslint group across 1 directory with 4 updates by @dependabot[bot] in #1299
• tests: examplesare not part of projects eslint checks by @jkowalleck in #1300

New Contributors

• @GauBen made their first contribution in #1295

Full Changelog: v8.6.0...v9.0.0

9.0.0-rc.3

Signed-off-by: jkowalleck <jkowalleck@users.noreply.github.com>

8.6.0

Changed

• Pulled SPDX license IDs v1.0-3.27.0 (via #1293)

---

What's Changed

• chore(deps-dev): bump webpack from 5.100.2 to 5.101.3 in the webpack group across 1 directory by @dependabot[bot] in #1289
• chore(deps): bump actions/setup-node from 4 to 5 by @dependabot[bot] in #1290
• chore(deps): bump the eslint group across 1 directory with 2 updates by @dependabot[bot] in #1291
• chore(deps): bump knip from 5.63.0 to 5.63.1 in /tools/test-dependencies by @dependabot[bot] in #1292
• feat: Updating SPDX license list to 3.27.0 by @jkowalleck in #1293

Full Changelog: v8.5.1...v8.6.0

8.5.1

Build

• Use TypeScript v5.9.2 now, was v5.8.3 (via #1285)
• Use webpack v5.101.3 now, was v5.99.9 (via #1262, #1267, #1283)

---

What's Changed

• chore(deps-dev): bump webpack from 5.99.9 to 5.100.1 in the webpack group across 1 directory by @dependabot[bot] in #1262
• chore(deps): bump neostandard from 0.12.1 to 0.12.2 in /tools/code-style by @dependabot[bot] in #1261
• chore(deps): bump the eslint group across 1 directory with 4 updates by @dependabot[bot] in #1260
• chore: QA tool to detect missing dependencies by @jkowalleck in #1264
• chore(deps): bump typescript-eslint from 8.36.0 to 8.37.0 in /tools/code-style in the eslint group across 1 directory by @dependabot[bot] in #1265
• chore(deps): bump knip from 5.61.3 to 5.62.0 in /tools/test-dependencies by @dependabot[bot] in #1268
• chore(deps): bump eslint-plugin-jsdoc from 51.3.4 to 51.4.1 in /tools/code-style in the eslint group across 1 directory by @dependabot[bot] in #1266
• chore(deps-dev): bump webpack from 5.100.1 to 5.100.2 in the webpack group across 1 directory by @dependabot[bot] in #1267
• chore(deps-dev): bump memfs from 4.17.2 to 4.34.0 by @dependabot[bot] in #1274
• chore(deps): bump the eslint group across 1 directory with 4 updates by @dependabot[bot] in #1272
• chore(deps): bump the eslint group across 1 directory with 3 updates by @dependabot[bot] in #1275
• chore(deps): bump actions/download-artifact from 4 to 5 by @dependabot[bot] in #1277
• chore(deps-dev): bump memfs from 4.34.0 to 4.36.0 by @dependabot[bot] in #1276
• chore(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in #1279
• chore(deps): bump knip from 5.62.0 to 5.63.0 in /tools/test-dependencies by @dependabot[bot] in #1282
• chore(deps): bump the eslint group across 1 directory with 4 updates by @dependabot[bot] in #1286
• chore(deps-dev): bump memfs from 4.36.0 to 4.38.2 by @dependabot[bot] in #1284
• chore(deps-dev): bump the typescript group across 1 directory with 2 updates by @dependabot[bot] in #1285
• chore(deps): bump the eslint group across 1 directory with 2 updates by @dependabot[bot] in #1287
• chore(deps-dev): bump mocha from 11.7.1 to 11.7.2 in the mocha group across 1 directory by @dependabot[bot] in #1288

Full Changelog: v8.5.0...v8.5.1

8.5.0

Added

• Public export types.NodePackageJson, which is the input type for various factories and builders (via #1263)

---

What's Changed

• chore(deps-dev): bump mocha from 11.5.0 to 11.7.0 in the mocha group across 1 directory by @dependabot[bot] in #1254
• chore(deps): bump the eslint group across 1 directory with 6 updates by @dependabot[bot] in #1257
• chore(deps): bump the eslint group across 1 directory with 3 updates by @dependabot[bot] in #1258
• chore(deps-dev): bump mocha from 11.7.0 to 11.7.1 in the mocha group across 1 directory by @dependabot[bot] in #1259
• feat: public export of type NodePackageJson by @jkowalleck in #1263

Full Changelog: v8.4.0...v8.5.0

8.4.0

Fixed

• Type exports for the web (via #1252)

Added

• New class Utils.LicenseUtility.LicenseEvidenceGatherer (#1162 via #1249)

---

What's Changed

• build: tsconfig skipLibCheck: true by @jkowalleck in #1250
• fix: type export for web by @jkowalleck in #1252
• feat: add license file gatherer utility by @jkowalleck in #1249

Full Changelog: v8.3.0...v8.4.0

8.4.0-rc.0

Signed-off-by: jkowalleck <jkowalleck@users.noreply.github.com>