[TRACKING] Complete support for CycloneDX v1.6

[jkowalleck]

see https://github.com/CycloneDX/specification/releases/tag/1.6
and https://github.com/CycloneDX/specification/releases/tag/1.6.1

The following items are not currently supported for CycloneDX v1.5 (as of release 7.6.x):

• definitions
  • partially addressed by feat: add basic support for Definitions  #701
  • partially addressed by feat: add extended support for Definitions #713
  • TODO: definition.Standard.signature
• dependencies.provides
  • via feat: add cyclonedx.model.dependency.Dependency.provides #735
• model.contact.OrganizationalEntity missing bom_ref attribute #799
• declarations
• to be continued

[aespogom]

Hi team,
Thanks for your work on this library!

I'd like to suggest a small enhancement: when serializing data to cyclonedx.model.license.DisjunctiveLicense, if unexpected keys like properties/properties are present, the serializer currently fails without a very clear message.
Cyclonedx v1.6 supports that key and so I think this also applies to the complete support of v1.6.

Thanks again!

[jkowalleck]

Hi team, Thanks for your work on this library!

I'd like to suggest a small enhancement: when serializing data to cyclonedx.model.license.DisjunctiveLicense, if unexpected keys like properties/properties are present, the serializer currently fails without a very clear message. Cyclonedx v1.6 supports that key and so I think this also applies to the complete support of v1.6.

Thanks again!

this would be a breaking change, behavior-wise(dont fail on non-implemented properties) and API(all constructors would accept any kwarg) wise. just a remark, not a blocker.
Anyway, feel free to pull request the needed changes; this is a community project, depending on your contributions and code donations.