All pull requests

Pull requests

• docs(1.7): clarify that an omitted nistQuantumSecurityLevel is not 0

  CDX 1.7documentation
  #1177·Lennonhaha opened Oct 26, 2026·

  ·
  15

• Add 2.0 CBOM fixtures for family-only observations

  #1176·Lennonhaha opened Oct 26, 2026·

  ·
  6

• chore(deps): bump zizmorcore/zizmor-action from 0.6.3 to 0.7.1

  dependencies
  #1174·dependabot[bot] opened Oct 24, 2026Bot·

  ·

• chore(deps): bump actions/setup-java from 5.6.0 to 6.1.0

  dependencies
  #1173·dependabot[bot] opened Oct 24, 2026Bot·

  ·

• Add Safety Perspective mappings and worked examples

  #1167·devashridatta-dotcom opened Oct 18, 2026·

  ·

• chore(deps): bump shivammathur/setup-php from 2.37.2 to 2.40.0

  dependencies
  #1166·dependabot[bot] opened Oct 17, 2026Bot·

  ·

• chore(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2

  dependencies
  #1165·dependabot[bot] opened Oct 17, 2026Bot·

  ·

• chore(deps): bump actions/download-artifact from 8.0.1 to 8.0.2

  dependencies
  #1164·dependabot[bot] opened Oct 17, 2026Bot·

  ·

• chore(deps): bump actions/setup-node from 7.0.0 to 7.1.0

  dependencies
  #1163·dependabot[bot] opened Oct 17, 2026Bot·

  ·

• chore(bundler): add tree-shaking

  chore
  #1161·jkowalleck opened Oct 15, 2026Member·

  ·

  · 2.0
  2

• Added missing unit and value properties to origin. Added test cases.

  proposed core enhancementrequest for commentRFC notice sent
  #1157·stevespringett opened Oct 13, 2026Member·

  ·

  · 2.0
  2

  

• fix: use hashAlgorithm in PBES1 pattern

  cap: cryptography-registry
  #1152·aaronormerod opened Oct 12, 2026Contributor·

  ·
  1

  1

• chore(deps-dev): bump com.networknt:json-schema-validator from 1.5.5 to 3.0.8 in /tools

  dependencies
  #1149·dependabot[bot] opened Oct 10, 2026Bot·

  ·

• fix: make FFDH ephemeral E optional

  cap: cryptography-registry
  #1148·Mehrn0ush opened Oct 9, 2026Contributor·3 tasks·

  ·
  1

  2

• chore(deps): bump lib.slf4j.api from 2.0.16 to 2.0.20 in /tools

  dependencies
  #1143·dependabot[bot] opened Oct 3, 2026Bot·

  ·

• chore(deps): bump org.apache.commons:commons-lang3 from 3.18.0 to 3.21.0 in /tools

  dependencies
  #1142·dependabot[bot] opened Oct 3, 2026Bot·

  ·

• fix: make module root unusable

  CDX 2.0defectready for review
  #1141·jkowalleck opened Oct 2, 2026Member·

  ·

  · 2.0
  1

• 2.0 dev commons no foreign

  #1134·jkowalleck opened Oct 1, 2026Member·

  ·

  · 2.0
  1

• Clarifying relatedCryptoMaterialProperties descriptions

  cap: cryptographydocumentation
  #1132·bhess opened Sep 30, 2026Contributor·

  ·

  · 2.0
  9

• fix(proto): remove stale CPE deprecation comment (1.4-1.7)

  CDX 1.4CDX 1.5CDX 1.6CDX 1.7defectdocumentationformat: ProtoBuf
  #1116·yusuke-koyoshi opened Sep 18, 2026·

  ·
  2

• Changed bom-ref to refId. Title and description updated. Updated test…

  breaking-changesproposed core enhancementrequest for commentRFC notice sent
  #1113·stevespringett opened Sep 17, 2026Member·

  ·

  · 2.0
  1

  6

  

• chore(deps-dev): bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.2 to 3.6.0 in /tools

  dependencies
  #1101·dependabot[bot] opened Sep 12, 2026Bot·

  ·

• [WIP] harmonize actors with party model

  breaking-changesproposed core enhancement
  #1100·jkowalleck opened Sep 10, 2026Member·

  ·

  · 2.0

• Add EAX to cryptography registry

  #1099·jvdsn opened Sep 10, 2026Contributor·

  ·
  1

• streamline bom-ref descriptions

  documentationready for review
  #1091·jkowalleck opened Sep 8, 2026Member·

  ·

  · 2.0