Skip to content

feat: add cyclonedx.model.dependency.Dependency.provides - #1036

Open
saquibsaifee wants to merge 1 commit into
CycloneDX:mainfrom
saquibsaifee:feat-uzair-provides-7524676707032308925
Open

feat: add cyclonedx.model.dependency.Dependency.provides#1036
saquibsaifee wants to merge 1 commit into
CycloneDX:mainfrom
saquibsaifee:feat-uzair-provides-7524676707032308925

Conversation

@saquibsaifee

@saquibsaifee saquibsaifee commented Sep 1, 2026

Copy link
Copy Markdown
Contributor

Description

Add support for cyclonedx.model.dependency.Dependency.provides) field in Dependency, originally implemented in PR #735 by Uzair.

Fixes #691

AI Tool Disclosure

  • My contribution includes AI-generated content, as disclosed below:
    • AI Tools: Gemini Jules
    • LLMs and versions: Gemini 3.1 Pro

Affirmation


Co-authored-by: Uzair Chhapra uzairchhapra@gmail.com
Signed-off-by: saquibsaifee saquibsaifee2@gmail.com

@saquibsaifee
saquibsaifee requested a review from a team as a code owner September 1, 2026 01:52
@read-the-docs-community

read-the-docs-community Bot commented Sep 1, 2026

Copy link
Copy Markdown

@codacy-production

Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 duplication

Metric Results
Duplication 0

View in Codacy

NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.

@saquibsaifee
saquibsaifee force-pushed the feat-uzair-provides-7524676707032308925 branch from e606ca5 to beac7ca Compare September 1, 2026 18:06
@saquibsaifee saquibsaifee changed the title Feat uzair provides 7524676707032308925 feat: add cyclonedx.model.dependency.Dependency.provides Sep 1, 2026
Fixes CycloneDX#691

- Add `Dependency.provides` property with schema view limited to v1.6+
- Add `Dependency.provides_as_bom_refs()` helper
- Fix `BomDependencyGraphFlatMerger._flatten_merge()` to preserve `provides`
  during JSON serialization pipeline (was silently dropped before)
- Add unit tests for `Dependency.provides` in `test_model_dependency`
- Add unit test for flat-merger preserving `provides` in `test_bom_utils`
- Add snapshot fixture `get_bom_with_provides` across all schema versions;
  v1.6 and v1.7 JSON snapshots include `provides` array

Signed-off-by: saquibsaifee <saquibsaifee2@gmail.com>
Co-authored-by: Uzair Chhapra <uzairchhapra@gmail.com>
@saquibsaifee
saquibsaifee force-pushed the feat-uzair-provides-7524676707032308925 branch from beac7ca to 9988631 Compare September 1, 2026 18:12
@saquibsaifee

Copy link
Copy Markdown
Contributor Author

@jkowalleck does this look promising?

@saquibsaifee
saquibsaifee force-pushed the feat-uzair-provides-7524676707032308925 branch from 9386458 to 9988631 Compare September 1, 2026 19:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

feat: add cyclonedx.model.dependency.Dependency.provides

1 participant