1.60.1

🐞 Bug Fixes

• Removes metadata.timestamp and serialNumber fields from generates CycloneDX JSON (#143) @dmikusa-pivotal

1.60.0

⭐️ Enhancements

• Add alternative for deprecated methods (#142) @dmikusa-pivotal
• Add options to create-package for filtering dependencies (#135) @dmikusa-pivotal

🐞 Bug Fixes

• Rewrite LayerContributor (#141) @dmikusa-pivotal

⛏ Dependency Upgrades

• Bump github.com/pelletier/go-toml from 1.9.4 to 1.9.5 (#140) @dependabot
• Bump github.com/buildpacks/libcnb from 1.25.5 to 1.26.0 (#137) @dependabot
• Bump github.com/creack/pty from 1.1.17 to 1.1.18 (#134) @dependabot
• Bump github.com/onsi/gomega from 1.18.1 to 1.19.0 (#133) @dependabot

🚧 Tasks

• Bump pipeline from 1.21.1 to 1.21.2 (#139) @paketo-bot
• Bump pipeline from 1.20.0 to 1.21.1 (#136) @paketo-bot

1.59.0

⭐️ Enhancements

• Consolidate extract file methods (#132) @dmikusa-pivotal

⛏ Dependency Upgrades

• Bump github.com/stretchr/testify from 1.7.0 to 1.7.1 (#131) @dependabot
• Bump to using Go 1.17 (#127) @dmikusa-pivotal

🚧 Tasks

• Bump pipeline from 1.20.0 to 1.20.0 (#130) @paketo-bot
• Bump pipeline from 1.19.0 to 1.20.0 (#129) @paketo-bot
• Bump pipeline from 1.18.0 to 1.19.0 (#126) @paketo-bot
• Bump pipeline from 1.17.0 to 1.18.0 (#125) @paketo-bot

Notes

This release officially deprecates the crush.Extract* API methods for extracting files from specific archive formats. They are replaced by a single method crush.Extract which uses file headers to determine the file type and selects the file format automatically. We recommend upgrading as the change should be minor. The old API methods will remain until v2 of libpak is released.

1.58.0

⭐️ Enhancements

• Removes logic to restrict output of deprecated label-based BOM entries (#122) @dmikusa-pivotal

🐞 Bug Fixes

• Allow disabling the BOM label (#124) @dmikusa-pivotal
• Use syft's multiple output formats support (#123) @dmikusa-pivotal

⛏ Dependency Upgrades

• Bump github.com/buildpacks/libcnb from 1.25.4 to 1.25.5 (#121) @dependabot
• Bump github.com/onsi/gomega from 1.18.0 to 1.18.1 (#120) @dependabot
• Bump github.com/onsi/gomega from 1.17.0 to 1.18.0 (#119) @dependabot
• Bump github.com/buildpacks/libcnb from 1.25.3 to 1.25.4 (#117) @dependabot
• Bump github.com/buildpacks/libcnb from 1.25.2 to 1.25.3 (#116) @dependabot

🚧 Tasks

• Bump pipeline from 1.16.0 to 1.17.0 (#118) @paketo-bot

1.57.1

⭐️ Enhancements

• Remove unnecessary coversion from XML > JSON for CycloneDx + syft (#115) @samj1912

🐞 Bug Fixes

• Fixes a bug where buildpack_dependency's Update(..) method will update the wrong dependencies (#114) @dmikusa-pivotal

🚧 Tasks

• Bump pipeline from 1.15.1 to 1.16.0 (#113) @paketo-bot

1.57.0

⭐️ Enhancements

• Add flags to update-buildpack-dependency to update cpe & purl (#112) @dmikusa-pivotal

1.56.2

🐞 Bug Fixes

• Fix build flag for non windows files (#109) @samj1912

⛏ Dependency Upgrades

• Bump github.com/buildpacks/libcnb from 1.25.1 to 1.25.2 (#111) @dependabot
• Bump to libcnb 1.25.1 (#110) @dmikusa-pivotal

1.56.1

🐞 Bug Fixes

• Use build-specific settings for effect across windows and unix (#107) @dmikusa-pivotal
• Adds mock that was missing and not checked in (#106) @dmikusa-pivotal

1.56.0

⭐️ Enhancements

• Adds support for DependencyLayerContributor and HelperLayerContributor to generate SBOMs (#105) @dmikusa-pivotal
• Adds convenience methods for using the Syft CLI to create SBoM information (#104) @dmikusa-pivotal

⛏ Dependency Upgrades

• Bump github.com/onsi/gomega from 1.16.0 to 1.17.0 (#99) @dependabot

🚧 Tasks

• Bump pipeline from 1.14.0 to 1.15.1 (#103) @paketo-bot
• Bump pipeline from 1.13.1 to 1.14.0 (#102) @paketo-bot
• Bump pipeline from 1.13.0 to 1.13.1 (#101) @paketo-bot
• Bump pipeline from 1.12.1 to 1.13.0 (#100) @paketo-bot
• Bump pipeline from 1.12.0 to 1.12.1 (#98) @paketo-bot

1.55.1

🐞 Bug Fixes

• Fixes issues with incorrect indentation (#97) @dmikusa-pivotal

⛏ Dependency Upgrades

• Bump github.com/buildpacks/libcnb from 1.23.0 to 1.24.0 (#96) @dependabot
• Bump github.com/creack/pty from 1.1.16 to 1.1.17 (#94) @dependabot

🚧 Tasks

• Bump pipeline from 1.10.5 to 1.12.0 (#92, #93, #95) @paketo-bot