0.4.0

Improvements:

• add support for Yarn

• document NPM support

• SBOM enhancements:

  • add cdx:npm:package:bundled, cdx:npm:package:development NPM CycloneDX properties
  • report missing hashes for pip packages
  • report missing hashes for Go modules

• pip: allow users to request wheel dependencies

• bump the container image to Fedora 38 to get Go 1.20

Bug fixes:
n/a

0.3.0

This is a 0.x release, the interface and behavior are not mature and may change between minor versions.

Full Changelog: 0.2.0...0.3.0

Bug Fixes

• Allow relative path for helper commands

Features

• Cachi2 NPM support
• Pip: Don't fail when we can't determine the project name and version

Incompatible changes

• N/A

0.2.0

This is a 0.x release, the interface and behavior are not mature and may change between minor versions.

Full Changelog: 0.1.0...0.2.0

Bug Fixes

N/A

Features

• Produced SBOMs now will have Cachi2's name in the metadata
• Added a utility script that allows merging the contents of Cachi2 and Syft SBOMs

Incompatible changes

N/A

0.1.0

Cachi2's first release! 🎉

This is a 0.x release, the interface and behavior are not mature and may change between minor versions.

Full Changelog: 0.0.0...0.1.0

Bug Fixes

N/A

Features

• Support for pip and gomod. See our README for details.

Incompatible changes

N/A