v1.1.7

1.1.7 (2026-05-19)

📦 CI Improvements

• add ruff format check (991f2ca)
• add zizmor workflow (#129) (ce00e76)
• harden release-please app token permissions (#138) (eb923ea)
• restrict some workflows to only run upstream (#130) (261179f)

⚙️ Chores

• deps: lock file maintenance (#117) (1388833)
• deps: lock file maintenance (#126) (eb0fed9)
• deps: lock file maintenance (#128) (2053365)
• deps: lock file maintenance (#132) (e8906f0)
• deps: lock file maintenance (#134) (e8b458b)
• deps: lock file maintenance (#136) (94ef8d1)
• deps: update actions/create-github-app-token action to v3.2.0 (#135) (a70e94e)
• deps: update astral-sh/setup-uv action to v8.1.0 (#125) (c9a47e0)
• deps: update googleapis/release-please-action action to v5 (#127) (fa878b3)
• deps: update mxmehl/latest-release-vulnerability-status action to v1.2.3 (#131) (36d590d)
• deps: update mxmehl/latest-release-vulnerability-status action to v1.2.4 (#133) (234b057)
• deps: update zizmorcore/zizmor-action action to v0.5.5 (#137) (28d102a)
• releaser: onboard release-please (#123) (8f9ae0f)

v1.1.6

What's Changed

Features and Fixes

• chore: switch to uv/ruff/ty by @mxmehl in #122

Dependencies

• chore(deps): bump requests from 2.32.5 to 2.33.0 by @dependabot[bot] in #116
• chore(deps): update actions/upload-artifact action to v7.0.1 by @renovate[bot] in #120
• chore(deps-dev): bump pygments from 2.19.2 to 2.20.0 by @dependabot[bot] in #118

Full Changelog: v1.1.5...v1.1.6

v1.1.5

What's Changed

Dependencies

• chore(deps): lock file maintenance by @renovate[bot] in #103
• chore(deps): lock file maintenance by @renovate[bot] in #105
• chore(deps): update dependency isort to v8 by @renovate[bot] in #104
• chore(deps): lock file maintenance by @renovate[bot] in #108
• chore(deps): lock file maintenance by @renovate[bot] in #109
• chore(deps): update github actions group (major) by @renovate[bot] in #107
• chore(deps): update dependency black to v26.3.1 [security] by @renovate[bot] in #111
• chore(deps): update actions/download-artifact action to v8.0.1 by @renovate[bot] in #112
• chore(deps): lock file maintenance by @renovate[bot] in #113
• chore(deps): lock file maintenance by @renovate[bot] in #114

Full Changelog: v1.1.4...v1.1.5

v1.1.4

What's Changed

Features and Fixes

• Fix error when CD coordinates describe more than one PURL by @mxmehl in #102

Dependencies

• chore(deps): update dependency isort to v6.1.0 by @renovate[bot] in #78
• chore(deps): update dependency bump-my-version to v1.2.4 by @renovate[bot] in #79
• chore(deps): update dependency pylint to v3.3.9 by @renovate[bot] in #80
• chore(deps): update fsfe/reuse-action action to v6 by @renovate[bot] in #81
• chore(deps): update dependency python to 3.14 by @renovate[bot] in #82
• chore(deps): update dev dependencies group (major) by @renovate[bot] in #83
• chore(deps): update github actions group (major) by @renovate[bot] in #84
• chore(deps): update dependency black to v25.11.0 by @renovate[bot] in #85
• chore(deps): update dependency pylint to v4.0.3 by @renovate[bot] in #86
• chore(deps): update actions/checkout digest to 93cb6ef by @renovate[bot] in #87
• chore(deps): update actions/checkout action to v6 by @renovate[bot] in #88
• chore(deps): update actions/setup-python action to v6.1.0 by @renovate[bot] in #89
• chore(deps): update dev dependencies group by @renovate[bot] in #90
• chore(deps): update actions/checkout action to v6.0.1 by @renovate[bot] in #91
• chore(deps): update github actions group (major) by @renovate[bot] in #94
• chore(deps): update dev dependencies group by @renovate[bot] in #93
• chore(deps): update dependency bump-my-version to v1.2.6 by @renovate[bot] in #95
• chore(deps): update actions/checkout action to v6.0.2 by @renovate[bot] in #99
• chore(deps): lock file maintenance by @renovate[bot] in #97
• chore(deps): update actions/setup-python action to v6.2.0 by @renovate[bot] in #100
• chore(deps): lock file maintenance by @renovate[bot] in #101
• chore(deps): update dependency black to v26 by @renovate[bot] in #98

Full Changelog: v1.1.3...v1.1.4

v1.1.3

What's Changed

Dependencies

• chore(deps): update dependency bump-my-version to v1.2.1 by @renovate[bot] in #65
• fix(deps): update dependency license-expression to v30.4.4 by @renovate[bot] in #66
• chore(deps): update dependency mypy to v1.17.1 by @renovate[bot] in #67
• chore(deps): update dependency pylint to v3.3.8 by @renovate[bot] in #69
• chore(deps): update github actions group to v5 (major) by @renovate[bot] in #68
• fix(deps): update dependency requests to v2.32.5 by @renovate[bot] in #71
• chore(deps): update dev dependencies group by @renovate[bot] in #72
• chore(deps): update dependency black to v25.9.0 by @renovate[bot] in #74
• chore(deps): update actions/setup-python action to v6 by @renovate[bot] in #73
• chore(deps): update dependency purl-tools to v0.2.3 by @renovate[bot] in #75
• chore(deps): bump all dependencies by @mxmehl in #76

Full Changelog: v1.1.2...v1.1.3

v1.1.2

What's Changed

Dependencies

• chore(deps): update dependency pylint to v3.3.7 by @renovate[bot] in #56
• chore(deps): update dependency bump-my-version to v1.1.3 by @renovate[bot] in #57
• chore(deps): update dependency bump-my-version to v1.1.4 by @renovate[bot] in #59
• fix(deps): update dependency requests to v2.32.4 by @renovate[bot] in #61
• fix(deps): update dependency license-expression to v30.4.2 by @renovate[bot] in #63
• fix(deps): update dependency license-expression to v30.4.3 by @renovate[bot] in #64
• Bump urllib3 from 2.4.0 to 2.5.0 by @dependabot[bot] in #62
• chore(deps): pin dependencies by @renovate[bot] in #58
• chore(deps): update dev dependencies group by @renovate[bot] in #60

Full Changelog: v1.1.1...v1.1.2

v1.1.1

What's Changed

Dependency bumps, also for critical CVEs in dev dependencies.

Full Changelog: v1.1.0...v1.1.1

v1.1.0

What's Changed

• Replace purl -> coordinates logic with purl-tools which massively increases the supported providers by @mxmehl in #33

Full Changelog: v1.0.0...v1.1.0

v1.0.0

Breaking

A change in the command layout for generating SBOMs. It is mandatory to provide the generator.

• Support other SBOM generators by @mxmehl in #27

Fixes

• Update GOVERNANCE.md, spelling by @SergeCroise in #24
• Update README.md, grammar, punctuation by @SergeCroise in #23
• Update MAINTAINERS.md, spelling by @SergeCroise in #25

Maintenance

• Add caching to workflows by @mxmehl in #28
• Switch to bump-my-version by @mxmehl in #29

New Contributors

• @SergeCroise made their first contribution in #24

Full Changelog: v0.3.0...v1.0.0

v0.3.0

What's Changed

Breaking Changes

• Restructure sbom and clearlydefined commands by @mxmehl in #15

New Features

• Add commands to help with license compliance by @mxmehl in #11
• Request multiple packages at once from ClearlyDefined by @mxmehl in #18

Chore

• Rename use_flict to flict_simplify by @mxmehl in #19
• Bump certifi from 2024.6.2 to 2024.7.4 by @dependabot in #12
• Add bumpversion tooling by @mxmehl in #20
• Bump version: 0.2.0 → 0.3.0 by @mxmehl in #21

Full Changelog: v0.2.0...v0.3.0