Sourced from cyclonedx-bom's releases.

v7.0.0 (2025-07-14)

BREAKING Changes

• Finalize PEP639, auto-enable it, remove CLI switch environment --PEP-639 (#928, 6b81028)
  • Handling of PEP 639 changed, as the specification changed during finalization.
  • Handling of PEP 639 is always enabled, as Python Packing specification 2.4 recognizes it.
  • CLI parameter environment --PEP-639 was removed.
• Remove deprecated CLI switches --schema-version and --outfile, use --spec-version and --output-file instead (#892, 2be98e5)

---

What's Changed

• chore: test for missing dependencies by @​jkowalleck in CycloneDX/cyclonedx-python#930
• chore(deps-dev): Update bandit requirement from 1.8.5 to 1.8.6 by @​dependabot[bot] in CycloneDX/cyclonedx-python#932
• feat!: finalize PEP639, auto-enable it, remove CLI switch environment --PEP-639 by @​jkowalleck in CycloneDX/cyclonedx-python#928
• feat!: remove deprecated CLI switches --schema-version and --outfile, use --spec-version and --output-file instead by @​virgo-o in CycloneDX/cyclonedx-python#892
• chore(deps-dev): Update uv requirement from 0.7.19 to 0.7.20 by @​dependabot[bot] in CycloneDX/cyclonedx-python#933

Full Changelog: https://github.com/CycloneDX/cyclonedx-python/compare/v6.1.3...v7.0.0

v7.0.0-alpha.1 (2025-07-09)

• see CycloneDX/cyclonedx-python#928

---

Detailed Changes: v6.1.3...v7.0.0-alpha.1

v6.1.3 (2025-07-08)

Bug Fixes

• License file detection according to PEP621 (#929, 28dcbf7)

---

What's Changed

• chore(deps-dev): Update uv requirement from 0.7.13 to 0.7.16 by @​dependabot in CycloneDX/cyclonedx-python#922
• style: make long-text indents smaller by @​jkowalleck in CycloneDX/cyclonedx-python#924
• chore(deps-dev): Update coverage requirement from 7.9.1 to 7.9.2 by @​dependabot in CycloneDX/cyclonedx-python#926
• chore(deps-dev): Update uv requirement from 0.7.16 to 0.7.19 by @​dependabot in CycloneDX/cyclonedx-python#927
• fix: license file detection according to PEP621 by @​jkowalleck in CycloneDX/cyclonedx-python#929

Full Changelog: https://github.com/CycloneDX/cyclonedx-python/compare/v6.1.2...v6.1.3

v6.1.2 (2025-06-26)

... (truncated)

Sourced from cyclonedx-bom's changelog.

v7.0.0 (2025-07-14)

BREAKING Changes

• Finalize PEP639, auto-enable it, remove CLI switch environment --PEP-639 (#928, 6b81028)

• Remove deprecated CLI switches --schema-version and --outfile, use --spec-version and --output-file instead (#892, 2be98e5)

v6.1.3 (2025-07-08)

Bug Fixes

• License file detection according to PEP621 (#929, 28dcbf7)

v6.1.2 (2025-06-26)

Bug Fixes

• Make pep621 license detections type-aware (#920, 0c9aeac)

Documentation

• Formatting and reorder of code style instructions. (15ac2cd)

• License file *.rst are NOT type text - they are binary (#911, 168f81d)

v6.1.1 (2025-05-12)

Bug Fixes

• Maintenance (e3c168b)

v6.1.0 (2025-05-12)

... (truncated)

• a980d02 chore(release): 7.0.0
• df97008 chore(deps-dev): Update uv requirement from 0.7.19 to 0.7.20 (#933)
• 2be98e5 feat!: remove deprecated CLI switches --schema-version and --outfile, use...
• 6b81028 feat!: finalize PEP639, auto-enable it, remove CLI switch `environment --PEP-...
• 5c783cd chore(deps-dev): Update bandit requirement from 1.8.5 to 1.8.6 (#932)
• dab6052 Revert "chore(release): 7.0.1-alpha.1"
• ec64c8c chore(release): 7.0.1-alpha.1
• b7a8f64 chore: fix tox for deptry
• f5430a2 chore: test for missing dependencies (#930)
• 93158ff chore(release): 6.1.3
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)