All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
...
1.5.0 - 2026-06-03
- Split off CPE detection to
cpe_detect()(cmake/cpe.cmake) to detect CPE for the current system, and use it in the generated SBOM. CPEparameter tosbom_generate()to specify CPE for the generated SBOM.- Support SPDX 2.2 output, for better tool compatibility.
- #131: Fix install-time SBOM generation when
DESTDIRis set.
- Improved CPE detection for more platforms.
- Allow nested
sbom_generate()calls, for example in subprojects.
1.4.1 - 2026-04-07
- #123: Fix handling spaces in paths.
1.4.0 - 2025-09-22
- Add
sbom_target()support forMODULE_LIBRARYandINTERFACE_LIBRARY(#63). - Add
COPYRIGHTargument tosbom_add(PACKAGE). - Add
VERSIONtosbom_generate().
- #74: Handling enabled languages other than CXX.
- Renamed
version.cmaketogit_version.cmake(and marked the old file as deprecated). This makes using Git optional, such that it is more usable in other environments (#79). <project>_version.h's<project>_TIMESTAMPdoes not useVERSION_TIMESTAMP(build timestamp) anymore, butGIT_TIMESTAMP(commit timestamp). This way, the build is more reproducable (#79).
1.3.0 - 2025-04-17
sbom_add(LICENSE)to add a LicenseRef-... license to the SBOM.- Generate a batch-querying JSON file for the OSV database.
- Fix section ordering in SBOM.
1.2.0 - 2025-02-06
- Allow running
reuse-lintduring configure, as workaround for a race in changing files while linting during build.
- Postpone expansion of
CMAKE_INSTALL_PREFIXfor CPack support. - Handle non-alphanum characters in branch names.
1.1.2 - 2024-05-24
Bugfix for mandatory SPDXID prefix Package- by ntia-conformance-checker 2.0.0.
1.1.1 - 2024-01-18
Bugfixes.
1.1.0 - 2023-09-29
Misc improvements.
- NTIA checks.
- External document references.
- Handling library TARGETs.
- Tests.
1.0.0 - 2023-09-27
Initial version.
- Git version extraction.
- SPDX SBOM generation from CMake.