{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":92700249,"defaultBranch":"master","name":"specification","ownerLogin":"CycloneDX","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2017-05-29T02:22:06.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/29029855?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1714804770.0","currentOid":""},"activityList":{"items":[{"before":null,"after":"8a488c8a018af194af12fc6bae9e47d599fef4eb","ref":"refs/heads/dependabot/pip/docgen/json/json-schema-for-humans-1.0.0","pushedAt":"2024-05-04T06:39:30.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"chore(deps): bump json-schema-for-humans in /docgen/json\n\nBumps [json-schema-for-humans](https://github.com/coveooss/json-schema-for-humans) from 0.47 to 1.0.0.\n- [Release notes](https://github.com/coveooss/json-schema-for-humans/releases)\n- [Changelog](https://github.com/coveooss/json-schema-for-humans/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/coveooss/json-schema-for-humans/compare/v0.47...v1.0.0)\n\n---\nupdated-dependencies:\n- dependency-name: json-schema-for-humans\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"chore(deps): bump json-schema-for-humans in /docgen/json"}},{"before":"76b524381b830ab3bb9ca9092d650f3bdd8843a0","after":null,"ref":"refs/heads/dependabot/npm_and_yarn/tools/src/test/js/ajv-formats-3.0.1","pushedAt":"2024-04-26T12:08:29.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":"9899d5cb13e3f380cc35c36829525188472f5ce3","after":"8e131b1688ccfe41e1bfdd4b3280f33dcc06d04c","ref":"refs/heads/master","pushedAt":"2024-04-26T12:08:22.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"jkowalleck","name":"Jan Kowalleck","path":"/jkowalleck","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2765863?s=80&v=4"},"commit":{"message":"chore(deps): bump ajv-formats from 2.1.1 to 3.0.1 in /tools/src/test/js (#430)\n\nBumps [ajv-formats](https://github.com/ajv-validator/ajv-formats) from\r\n2.1.1 to 3.0.1.\r\n<details>\r\n<summary>Release notes</summary>\r\n<p><em>Sourced from <a\r\nhref=\"https://github.com/ajv-validator/ajv-formats/releases\">ajv-formats's\r\nreleases</a>.</em></p>\r\n<blockquote>\r\n<h2>v3.0.0-rc.0</h2>\r\n<p>Formats <code>time</code> and <code>date-time</code> now require\r\ntimezone, as per JSON Schema specification / <a\r\nhref=\"http://tools.ietf.org/html/rfc3339#section-5.6\">RFC3339</a>.\r\nAdded formats <code>iso-time</code> and <code>iso-date-time</code> that\r\nhave optional timezone, they can be used for backwards compatibility.\r\nKeywords <code>formatMaximum</code> and <code>formatMinimum</code> for\r\n<code>time</code> and <code>date-time</code> format now take into\r\naccount timezone (both for time and for date), the previous comparison\r\nlogic that ignored timezone is preserved for <code>iso-time</code> and\r\n<code>iso-date-time</code> formats.</p>\r\n</blockquote>\r\n</details>\r\n<details>\r\n<summary>Commits</summary>\r\n<ul>\r\n<li><a\r\nhref=\"https://github.com/ajv-validator/ajv-formats/commit/1fb3fa7d967f919ff924bb34aef73a2f39ab0de3\"><code>1fb3fa7</code></a>\r\nfix: build missing in 3.0.0 - bump to 3.0.1 (<a\r\nhref=\"https://redirect.github.com/ajv-validator/ajv-formats/issues/93\">#93</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/ajv-validator/ajv-formats/commit/e1a8bddf015fe90fe9aed181f5d630e2aca37904\"><code>e1a8bdd</code></a>\r\nchore: update version to 3.0.0 for publishing (<a\r\nhref=\"https://redirect.github.com/ajv-validator/ajv-formats/issues/92\">#92</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/ajv-validator/ajv-formats/commit/4dd65447575b35d0187c6b125383366969e6267e\"><code>4dd6544</code></a>\r\n3.0.0-rc.0</li>\r\n<li><a\r\nhref=\"https://github.com/ajv-validator/ajv-formats/commit/8b424f1e11d23f556cc12f1b9fd16a37286cf326\"><code>8b424f1</code></a>\r\nformatMaximum/Minimum take timezone into account for time and date-time\r\nforma...</li>\r\n<li><a\r\nhref=\"https://github.com/ajv-validator/ajv-formats/commit/37d7538eec3e4e7e1455e71d5eda07e97f7c489b\"><code>37d7538</code></a>\r\nadd formats iso-time and iso-date-time, make time and date-time strict\r\n(<a\r\nhref=\"https://redirect.github.com/ajv-validator/ajv-formats/issues/42\">#42</a>)</li>\r\n<li><a\r\nhref=\"https://github.com/ajv-validator/ajv-formats/commit/46dbae502cc073eb424d2f567a586ef36991689e\"><code>46dbae5</code></a>\r\nMerge pull request <a\r\nhref=\"https://redirect.github.com/ajv-validator/ajv-formats/issues/41\">#41</a>\r\nfrom ajv-validator/ep/json-schema-tests</li>\r\n<li><a\r\nhref=\"https://github.com/ajv-validator/ajv-formats/commit/86d71ebedb4e1310f24d08faab012c7632127054\"><code>86d71eb</code></a>\r\npass all JSON Schema Test Suite tests</li>\r\n<li><a\r\nhref=\"https://github.com/ajv-validator/ajv-formats/commit/fdbd71404ba77ebafd20ef2c5a22436bd0e8f020\"><code>fdbd714</code></a>\r\nMerge branch 'stoplightio-fix/date-time'</li>\r\n<li><a\r\nhref=\"https://github.com/ajv-validator/ajv-formats/commit/34df8dbcb2b6783e2c870cc79c5aef64d38c0191\"><code>34df8db</code></a>\r\ndocs: strictTime option</li>\r\n<li><a\r\nhref=\"https://github.com/ajv-validator/ajv-formats/commit/d1a9e36548298cee3577ed763fdb60412a1e71f1\"><code>d1a9e36</code></a>\r\nsimplify strictTime option</li>\r\n<li>Additional commits viewable in <a\r\nhref=\"https://github.com/ajv-validator/ajv-formats/compare/v2.1.1...v3.0.1\">compare\r\nview</a></li>\r\n</ul>\r\n</details>\r\n<details>\r\n<summary>Maintainer changes</summary>\r\n<p>This version was pushed to npm by <a\r\nhref=\"https://www.npmjs.com/~jason-green\">jason-green</a>, a new\r\nreleaser for ajv-formats since your current version.</p>\r\n</details>\r\n<br />\r\n\r\n\r\n[![Dependabot compatibility\r\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ajv-formats&package-manager=npm_and_yarn&previous-version=2.1.1&new-version=3.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\r\n\r\nDependabot will resolve any conflicts with this PR as long as you don't\r\nalter it yourself. You can also trigger a rebase manually by commenting\r\n`@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n<details>\r\n<summary>Dependabot commands and options</summary>\r\n<br />\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show <dependency name> ignore conditions` will show all\r\nof the ignore conditions of the specified dependency\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\n\r\n\r\n</details>","shortMessageHtmlLink":"chore(deps): bump ajv-formats from 2.1.1 to 3.0.1 in /tools/src/test/…"}},{"before":"80cd9ec9d1cc4d80350dba1449d58fffc7bdbdcd","after":"83cdd0c9963b8ee90ac346f63290c63d8aa3f144","ref":"refs/heads/1.6-ecma","pushedAt":"2024-04-23T04:04:36.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"stevespringett","name":"Steve Springett","path":"/stevespringett","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3878933?s=80&v=4"},"commit":{"message":"Grammar\n\nSigned-off-by: Steve Springett <steve@springett.us>","shortMessageHtmlLink":"Grammar"}},{"before":"55343ba19dee1785acf1ce9191540d5fd7b590db","after":"80cd9ec9d1cc4d80350dba1449d58fffc7bdbdcd","ref":"refs/heads/1.6-ecma","pushedAt":"2024-04-23T04:00:24.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"stevespringett","name":"Steve Springett","path":"/stevespringett","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3878933?s=80&v=4"},"commit":{"message":"Clarified license id/name fields.\n\nSigned-off-by: Steve Springett <steve@springett.us>","shortMessageHtmlLink":"Clarified license id/name fields."}},{"before":"d9f7a8acd5499bd45aa1895eb210236fda411dc6","after":null,"ref":"refs/heads/dependabot/maven/tools/org.apache.commons-commons-text-1.11.0","pushedAt":"2024-04-20T06:54:22.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":null,"after":"7f1966f126336e19526c506c4df60e0626e20625","ref":"refs/heads/dependabot/maven/tools/org.apache.commons-commons-text-1.12.0","pushedAt":"2024-04-20T06:54:18.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"chore(deps): bump org.apache.commons:commons-text in /tools\n\nBumps org.apache.commons:commons-text from 1.2 to 1.12.0.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.commons:commons-text\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"chore(deps): bump org.apache.commons:commons-text in /tools"}},{"before":"0f00800014b8eb121f14a0dcf9798c9285f1182c","after":"9899d5cb13e3f380cc35c36829525188472f5ce3","ref":"refs/heads/master","pushedAt":"2024-04-10T17:54:46.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"jkowalleck","name":"Jan Kowalleck","path":"/jkowalleck","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2765863?s=80&v=4"},"commit":{"message":"chore(dependencies): bump bufbuild/buf:1.30.1 (#431)\n\nhttps://github.com/bufbuild/buf/releases/tag/v1.30.1\r\n\r\n> Fix issue where `buf lint` incorrectly reports an error for\r\n`(buf.validate.field).repeated`\r\nis set for a repeated validation rule.","shortMessageHtmlLink":"chore(dependencies): bump bufbuild/buf:1.30.1 (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2236044293\" data-permission-text=\"Title is private\" data-url=\"https://github.com/CycloneDX/specification/issues/431\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/CycloneDX/specification/pull/431/hovercard\" href=\"https://github.com/CycloneDX/specification/pull/431\">#431</a>)"}},{"before":null,"after":"76b524381b830ab3bb9ca9092d650f3bdd8843a0","ref":"refs/heads/dependabot/npm_and_yarn/tools/src/test/js/ajv-formats-3.0.1","pushedAt":"2024-04-10T16:53:27.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"chore(deps): bump ajv-formats from 2.1.1 to 3.0.1 in /tools/src/test/js\n\nBumps [ajv-formats](https://github.com/ajv-validator/ajv-formats) from 2.1.1 to 3.0.1.\n- [Release notes](https://github.com/ajv-validator/ajv-formats/releases)\n- [Commits](https://github.com/ajv-validator/ajv-formats/compare/v2.1.1...v3.0.1)\n\n---\nupdated-dependencies:\n- dependency-name: ajv-formats\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"chore(deps): bump ajv-formats from 2.1.1 to 3.0.1 in /tools/src/test/js"}},{"before":null,"after":"6c442242879b1dfda5949bae0ad79d8684d9db80","ref":"refs/heads/dependabot/maven/tools/commons-io-commons-io-2.16.1","pushedAt":"2024-04-10T16:53:23.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"chore(deps): bump commons-io:commons-io from 2.7 to 2.16.1 in /tools\n\nBumps commons-io:commons-io from 2.7 to 2.16.1.\n\n---\nupdated-dependencies:\n- dependency-name: commons-io:commons-io\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"chore(deps): bump commons-io:commons-io from 2.7 to 2.16.1 in /tools"}},{"before":null,"after":"cec1f81525fa9686969239037a2a27a675f1814f","ref":"refs/heads/dependabot/maven/tools/org.apache.maven.plugins-maven-surefire-plugin-3.2.5","pushedAt":"2024-04-10T16:53:21.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"chore(deps): bump org.apache.maven.plugins:maven-surefire-plugin\n\nBumps [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) from 3.0.0-M5 to 3.2.5.\n- [Release notes](https://github.com/apache/maven-surefire/releases)\n- [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.0.0-M5...surefire-3.2.5)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plugins:maven-surefire-plugin\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"chore(deps): bump org.apache.maven.plugins:maven-surefire-plugin"}},{"before":null,"after":"c3214dc67e3f9a12d753b8f63f60493d3b516685","ref":"refs/heads/dependabot/maven/tools/org.apache.commons-commons-lang3-3.14.0","pushedAt":"2024-04-10T16:53:18.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"chore(deps): bump org.apache.commons:commons-lang3 in /tools\n\nBumps org.apache.commons:commons-lang3 from 3.6 to 3.14.0.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.commons:commons-lang3\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"chore(deps): bump org.apache.commons:commons-lang3 in /tools"}},{"before":null,"after":"d9f7a8acd5499bd45aa1895eb210236fda411dc6","ref":"refs/heads/dependabot/maven/tools/org.apache.commons-commons-text-1.11.0","pushedAt":"2024-04-10T16:53:16.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"chore(deps): bump org.apache.commons:commons-text in /tools\n\nBumps org.apache.commons:commons-text from 1.2 to 1.11.0.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.commons:commons-text\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"chore(deps): bump org.apache.commons:commons-text in /tools"}},{"before":"95c582020b1386b97cb90f870285db05f3edf5df","after":"0f00800014b8eb121f14a0dcf9798c9285f1182c","ref":"refs/heads/master","pushedAt":"2024-04-10T16:52:57.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"jkowalleck","name":"Jan Kowalleck","path":"/jkowalleck","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2765863?s=80&v=4"},"commit":{"message":"chore: depedabot for all used ecosystems (#424)\n\n- add dependabot for all used ecosystems\r\n- revisit doc gen scripts to make dependencies/maintenance more easily\r\n\r\n\r\n---------\r\n\r\nSigned-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>","shortMessageHtmlLink":"chore: depedabot for all used ecosystems (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2234964300\" data-permission-text=\"Title is private\" data-url=\"https://github.com/CycloneDX/specification/issues/424\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/CycloneDX/specification/pull/424/hovercard\" href=\"https://github.com/CycloneDX/specification/pull/424\">#424</a>)"}},{"before":"55343ba19dee1785acf1ce9191540d5fd7b590db","after":"95c582020b1386b97cb90f870285db05f3edf5df","ref":"refs/heads/master","pushedAt":"2024-04-10T16:41:21.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"jkowalleck","name":"Jan Kowalleck","path":"/jkowalleck","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2765863?s=80&v=4"},"commit":{"message":"tests: annotate schema for test resources of CDX1.6 JSON (#423)\n\nfixes: #254\r\nfollowup of: #403\r\nsupersedes: #255\r\n\r\nSigned-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>","shortMessageHtmlLink":"tests: annotate schema for test resources of CDX1.6 JSON (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2234826534\" data-permission-text=\"Title is private\" data-url=\"https://github.com/CycloneDX/specification/issues/423\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/CycloneDX/specification/pull/423/hovercard\" href=\"https://github.com/CycloneDX/specification/pull/423\">#423</a>)"}},{"before":null,"after":"55343ba19dee1785acf1ce9191540d5fd7b590db","ref":"refs/heads/1.6-ecma","pushedAt":"2024-04-09T05:24:11.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"stevespringett","name":"Steve Springett","path":"/stevespringett","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3878933?s=80&v=4"},"commit":{"message":"Bump\n\nSigned-off-by: Steve Springett <steve@springett.us>","shortMessageHtmlLink":"Bump"}},{"before":"ea4b4dc2eb31a96c76e058774615b17bd60bcb29","after":null,"ref":"refs/heads/v1.5-dev-attestations","pushedAt":"2024-04-09T05:22:07.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"stevespringett","name":"Steve Springett","path":"/stevespringett","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3878933?s=80&v=4"}},{"before":"2587935bd6b87d36edbf03740145610e00eeeb9a","after":null,"ref":"refs/heads/1.6-dev-vulnerability-evidence","pushedAt":"2024-04-09T05:22:07.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"stevespringett","name":"Steve Springett","path":"/stevespringett","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3878933?s=80&v=4"}},{"before":"d329585eace9c9ef603062f8cb3e5fcfc6c9f9a1","after":null,"ref":"refs/heads/1.6-dev-redaction","pushedAt":"2024-04-09T05:22:07.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"stevespringett","name":"Steve Springett","path":"/stevespringett","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3878933?s=80&v=4"}},{"before":"83691a6669753385b5186c98aa6e2ddaff65cb79","after":null,"ref":"refs/heads/1.6-dev-license-ack","pushedAt":"2024-04-09T05:22:07.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"stevespringett","name":"Steve Springett","path":"/stevespringett","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3878933?s=80&v=4"}},{"before":"45db721ae0b2f730d33f35b7429e342a1d77edc0","after":null,"ref":"refs/heads/1.6-dev-evidence-identity-concluded-value","pushedAt":"2024-04-09T05:22:07.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"stevespringett","name":"Steve Springett","path":"/stevespringett","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3878933?s=80&v=4"}},{"before":"6de508ea00898259e900d831f22f16b1f1234848","after":null,"ref":"refs/heads/1.6-dev-attestations-supplimental-text","pushedAt":"2024-04-09T05:22:07.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"stevespringett","name":"Steve Springett","path":"/stevespringett","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3878933?s=80&v=4"}},{"before":"c5032b84fbf7f593b7944449fee7fa0a7cf1af2c","after":"55343ba19dee1785acf1ce9191540d5fd7b590db","ref":"refs/heads/master","pushedAt":"2024-04-09T05:16:21.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"stevespringett","name":"Steve Springett","path":"/stevespringett","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3878933?s=80&v=4"},"commit":{"message":"Bump\n\nSigned-off-by: Steve Springett <steve@springett.us>","shortMessageHtmlLink":"Bump"}},{"before":"4017ce480224206a00d1bd6969d30d5fc996d2ef","after":null,"ref":"refs/heads/1.6-dev","pushedAt":"2024-04-09T05:13:01.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"stevespringett","name":"Steve Springett","path":"/stevespringett","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3878933?s=80&v=4"}},{"before":"8af880d5f2ba0a107de88a920a76cedd5ba75083","after":"c5032b84fbf7f593b7944449fee7fa0a7cf1af2c","ref":"refs/heads/master","pushedAt":"2024-04-09T05:12:54.000Z","pushType":"pr_merge","commitsCount":286,"pusher":{"login":"stevespringett","name":"Steve Springett","path":"/stevespringett","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3878933?s=80&v=4"},"commit":{"message":"[WIP] v1.6  (#323)\n\n## Added\r\n\r\n* Core enhancement: Attestation\r\n([#192](https://github.com/CycloneDX/specification/issues/192) via\r\n[#348](https://github.com/CycloneDX/specification/pull/348))\r\n* Core enhancement: Cryptography Bill of Materials — CBOM\r\n([#171](https://github.com/CycloneDX/specification/issues/171),\r\n[#291](https://github.com/CycloneDX/specification/issues/291) via\r\n[#347](https://github.com/CycloneDX/specification/pull/347))\r\n* Feature to express the URL to source distribution\r\n([#98](https://github.com/CycloneDX/specification/issues/98) via\r\n[#269](https://github.com/CycloneDX/specification/pull/269))\r\n* Feature to express the URL to RFC 9116 compliant documents\r\n([#380](https://github.com/CycloneDX/specification/issues/380) via\r\n[#381](https://github.com/CycloneDX/specification/pull/381))\r\n* Feature to express tags/keywords for services and components (via\r\n[#383](https://github.com/CycloneDX/specification/pull/383))\r\n* Feature to express details for component authors\r\n([#335](https://github.com/CycloneDX/specification/issues/335) via\r\n[#379](https://github.com/CycloneDX/specification/pull/379))\r\n* Feature to express details for component and BOM manufacturer\r\n([#346](https://github.com/CycloneDX/specification/issues/346) via\r\n[#379](https://github.com/CycloneDX/specification/pull/379))\r\n* Feature to express communicate concluded values from observed\r\nevidences ([#411](https://github.com/CycloneDX/specification/issues/411)\r\nvia [#412](https://github.com/CycloneDX/specification/pull/412))\r\n* Features to express license acknowledgement\r\n([#407](https://github.com/CycloneDX/specification/issues/407) via\r\n[#408](https://github.com/CycloneDX/specification/pull/408))\r\n* Feature to express environmental consideration information for model\r\ncards ([#396](https://github.com/CycloneDX/specification/issues/396) via\r\n[#395](https://github.com/CycloneDX/specification/pull/395))\r\n* Feature to express the address of organizational entities (via\r\n[#395](https://github.com/CycloneDX/specification/pull/395))\r\n* Feature to express additional component identifiers: Universal Bill Of\r\nReceipts Identifier and Software Heritage persistent IDs\r\n([#413](https://github.com/CycloneDX/specification/issues/413) via\r\n[#414](https://github.com/CycloneDX/specification/pull/414))\r\n\r\n## Fixed\r\n\r\n* Allow multiple evidence identities by XML/JSON schema\r\n([#272](https://github.com/CycloneDX/specification/issues/272) via\r\n[#359](https://github.com/CycloneDX/specification/pull/359))\r\n  This was already correct via ProtoBuff schema.\r\n* Prevent empty `license` entities by XML schema\r\n([#288](https://github.com/CycloneDX/specification/issues/288) via\r\n[#292](https://github.com/CycloneDX/specification/pull/292))\r\n  This was already correct in JSON/ProtoBuff schema.\r\n* Prevent empty or malformed `property` entities by JSON schema\r\n([#371](https://github.com/CycloneDX/specification/issues/371) via\r\n[#375](https://github.com/CycloneDX/specification/pull/375))\r\n  This was already correct in XML/ProtoBuff schema.\r\n* Allow multiple `licenses` in `Metadata` by ProtoBuff schema\r\n([#264](https://github.com/CycloneDX/specification/issues/264) via\r\n[#401](https://github.com/CycloneDX/specification/pull/401))\r\n  This was already correct in XML/JSON schema.\r\n\r\n## Changed\r\n\r\n* Allow arbitrary `$schema` values by JSON schema\r\n([#402](https://github.com/CycloneDX/specification/issues/402) via\r\n[#403](https://github.com/CycloneDX/specification/pull/403))\r\n* Increased max length of `versionRange` (via\r\n[`3e01ce6`](https://github.com/CycloneDX/specification/commit/3e01ce62a1c75e732538fe7e591dabb57a601983))\r\n* Harmonized length of `version` (via\r\n[#417](https://github.com/CycloneDX/specification/pull/417))\r\n\r\n## Deprecated\r\n\r\n* Data model \"Component\"'s field `author` was deprecated. (via\r\n[#379](https://github.com/CycloneDX/specification/pull/379))\r\n  Use field `authors` or field `manufacturer` instead.\r\n* Data model \"Metadata\"'s field `manufacture` was deprecated.\r\n([#346](https://github.com/CycloneDX/specification/issues/346) via\r\n[#379](https://github.com/CycloneDX/specification/pull/379))\r\n  Use \"Metadata\"'s field `component`'s field `manufacturer` instead. \r\n  - for XML: `/bom/metadata/component/manufacturer`\r\n  - for JSON: `$.metadata.component.manufacturer`\r\n  - for ProtoBuf: `Bom:metadata.component.manufacturer`\r\n\r\n## Documentation\r\n\r\n* Centralize version and version-range (via\r\n[#322](https://github.com/CycloneDX/specification/pull/322))\r\n* Streamlined SPDX expression related descriptions (via\r\n[#327](https://github.com/CycloneDX/specification/pull/327))\r\n* Enhanced descriptions of `bom-ref`/`refType`\r\n([#336](https://github.com/CycloneDX/specification/issues/336) via\r\n[#344](https://github.com/CycloneDX/specification/pull/344))\r\n* Enhanced readability of enum documentation in JSON schema\r\n([#361](https://github.com/CycloneDX/specification/issues/361) via\r\n[#362](https://github.com/CycloneDX/specification/pull/362))\r\n* Fixed typo \"compliment\" -> \"complement\" (via\r\n[#369](https://github.com/CycloneDX/specification/pull/369))\r\n* Added documentation for enum \"ComponentScope\"'s values in JSON schema\r\n([#293](https://github.com/CycloneDX/specification/issues/293) via\r\n[`d92e58e`](https://github.com/CycloneDX/specification/commit/d92e58efe09a384ce1b68ff1b7808903feb26d38))\r\n  Texts were a taken from the existing ones in XML/ProtoBuff schema.\r\n* Added documentation for enum \"TaskType\"'s values\r\n([#245](https://github.com/CycloneDX/specification/issues/245) via\r\n[#377](https://github.com/CycloneDX/specification/pull/377))\r\n* Improve documentation for data model \"Metadata\"'s field `licenses`\r\n([#273](https://github.com/CycloneDX/specification/issues/273) via\r\n[#378](https://github.com/CycloneDX/specification/pull/378))\r\n* Added documentation for enum \"MachineLearningApproachType\"'s values\r\n([#351](https://github.com/CycloneDX/specification/pull/351) via\r\n[#416](https://github.com/CycloneDX/specification/pull/416))\r\n* Rephrased some texts here and there.\r\n\r\n## Test data\r\n\r\n* Added test data for newly added use cases\r\n* Added quality assurance for our ProtoBuf schemas\r\n([#384](https://github.com/CycloneDX/specification/issues/384) via\r\n[#385](https://github.com/CycloneDX/specification/pull/385))","shortMessageHtmlLink":"[WIP] v1.6 (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"1943812028\" data-permission-text=\"Title is private\" data-url=\"https://github.com/CycloneDX/specification/issues/323\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/CycloneDX/specification/pull/323/hovercard\" href=\"https://github.com/CycloneDX/specification/pull/323\">#323</a>)"}},{"before":"b3ea018a65ab361718dea825e2fc9a14f205e342","after":"4017ce480224206a00d1bd6969d30d5fc996d2ef","ref":"refs/heads/1.6-dev","pushedAt":"2024-04-09T02:15:12.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"stevespringett","name":"Steve Springett","path":"/stevespringett","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3878933?s=80&v=4"},"commit":{"message":"Updated SPDX license list to 3.23\n\nSigned-off-by: Steve Springett <steve@springett.us>","shortMessageHtmlLink":"Updated SPDX license list to 3.23"}},{"before":"b5c550ebac3bd2bf0b53e5054bf82195606bcc52","after":"b3ea018a65ab361718dea825e2fc9a14f205e342","ref":"refs/heads/1.6-dev","pushedAt":"2024-04-09T02:09:20.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"stevespringett","name":"Steve Springett","path":"/stevespringett","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3878933?s=80&v=4"},"commit":{"message":"Updates to online docs\n\nSigned-off-by: Steve Springett <steve@springett.us>","shortMessageHtmlLink":"Updates to online docs"}},{"before":"d278e706772a63e8e68894036a6ecacd14ec09de","after":"b5c550ebac3bd2bf0b53e5054bf82195606bcc52","ref":"refs/heads/1.6-dev","pushedAt":"2024-04-07T17:17:51.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"stevespringett","name":"Steve Springett","path":"/stevespringett","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3878933?s=80&v=4"},"commit":{"message":"Updated dependency attribute docs (#421)","shortMessageHtmlLink":"Updated dependency attribute docs (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2229420086\" data-permission-text=\"Title is private\" data-url=\"https://github.com/CycloneDX/specification/issues/421\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/CycloneDX/specification/pull/421/hovercard\" href=\"https://github.com/CycloneDX/specification/pull/421\">#421</a>)"}},{"before":"f5d959b91a4def6832a9f93bd012ac5054af0c7f","after":"d278e706772a63e8e68894036a6ecacd14ec09de","ref":"refs/heads/1.6-dev","pushedAt":"2024-04-06T01:45:20.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"stevespringett","name":"Steve Springett","path":"/stevespringett","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3878933?s=80&v=4"},"commit":{"message":"Corrected maxOccurs with esn\n\nSigned-off-by: Steve Springett <steve@springett.us>","shortMessageHtmlLink":"Corrected maxOccurs with esn"}},{"before":"2bb8bae596044654ce703c1d4c630f8daac5c2e8","after":"f5d959b91a4def6832a9f93bd012ac5054af0c7f","ref":"refs/heads/1.6-dev","pushedAt":"2024-04-06T01:40:23.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"stevespringett","name":"Steve Springett","path":"/stevespringett","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3878933?s=80&v=4"},"commit":{"message":"Explicit string type correction\n\nSigned-off-by: Steve Springett <steve@springett.us>","shortMessageHtmlLink":"Explicit string type correction"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAEQU1n4gA","startCursor":null,"endCursor":null}},"title":"Activity · CycloneDX/specification"}