Issues

• Gradle: a component keeps only the first configuration it appears in as internal:GradleProfileName

  cdxgen/cdxgen#4616 · Filter by author xballoy opened on Oct 28, 2026

• Scala evinse: a local accuracy check against the current chen

  evinsescalatest
  Task

  cdxgen/cdxgen#4605 · Filter by author prabhu opened on Oct 28, 2026 · 13.6.0

• Enrich MCP server components from the official MCP registry

  aibomenhancementlang:mcp
  Feature

  cdxgen/cdxgen#4604 · Filter by author prabhu opened on Oct 28, 2026 · 13.8.0

• Check cdxgen output and submission against Dependency-Track 5

  intg:dtracktest
  Task

  cdxgen/cdxgen#4603 · Filter by author prabhu opened on Oct 28, 2026 · 13.7.0
  1

• Python: read PEP 639 License-Expression from installed package metadata

  complianceenhancementlang:python
  Feature

  cdxgen/cdxgen#4602 · Filter by author prabhu opened on Oct 28, 2026 · 13.6.0

• CocoaPods trunk becomes read-only on 2 December 2026: tell users and simplify the Swift install path

  cocoapodsdocumentationlang:swift
  Task

  cdxgen/cdxgen#4601 · Filter by author prabhu opened on Oct 28, 2026 · 13.6.0

• Decide whether the 13.6.0 images and binaries use Node.js 26 as the primary runtime

  buildneeds-decision
  Task

  cdxgen/cdxgen#4600 · Filter by author prabhu opened on Oct 28, 2026 · 13.6.0

• 13.6.0 toolchain and data refresh: Gradle 9.8, SPDX license list 3.29, base images and action pins

  builddependency
  Task

  cdxgen/cdxgen#4599 · Filter by author prabhu opened on Oct 28, 2026 · 13.6.0

• Maven 4 general availability readiness

  blockedenhancementlang:javamaven
  Task

  cdxgen/cdxgen#4598 · Filter by author prabhu opened on Oct 28, 2026 · 13.7.0

• Add Java 27 images and CI coverage

  enhancementgradlelang:containerlang:java
  Task

  cdxgen/cdxgen#4597 · Filter by author prabhu opened on Oct 28, 2026 · 13.6.0

• JVM toolchain for 2026: JDK 27, Maven 4 and lockfile-first generation

  enhancementgradlelang:javamaven
  Epic

  cdxgen/cdxgen#4596 · Filter by author prabhu opened on Oct 28, 2026 · 13.7.0

• Supply-chain integrity of cdxgen's own releases

  infrasecurity
  Epic

  cdxgen/cdxgen#4595 · Filter by author prabhu opened on Oct 28, 2026 · 13.7.0

• Decide when CycloneDX 2.0 becomes the default spec version

  needs-decisionstandard
  Task

  cdxgen/cdxgen#4594 · Filter by author prabhu opened on Oct 28, 2026 · 13.8.0

• Describe declared coding-agent behaviour in AI-BOMs at CycloneDX 2.0

  aibomenhancementstandard
  Feature

  cdxgen/cdxgen#4593 · Filter by author prabhu opened on Oct 28, 2026 · 13.8.0

• Emit post-quantum migration details on cryptographic assets at CycloneDX 2.0

  cbomenhancementstandard
  Feature

  cdxgen/cdxgen#4592 · Filter by author prabhu opened on Oct 28, 2026 · 13.8.0

• Emit attributed claims on component evidence at CycloneDX 2.0

  enhancementevinsestandard
  Feature

  cdxgen/cdxgen#4591 · Filter by author prabhu opened on Oct 28, 2026 · 13.7.0

• Refresh the bundled CycloneDX 2.0 schema and validator to the ratified release

  blockedstandard
  Task

  cdxgen/cdxgen#4590 · Filter by author prabhu opened on Oct 28, 2026 · 13.7.0

• CycloneDX 2.0: track the final schema and emit the new fields cdxgen has data for

  enhancementstandard
  Epic

  cdxgen/cdxgen#4589 · Filter by author prabhu opened on Oct 28, 2026 · 13.7.0

• Update the CRA rules when the Commission adopts the SBOM implementing act

  blockedcompliancestandard
  Task

  cdxgen/cdxgen#4588 · Filter by author prabhu opened on Oct 28, 2026 · 13.7.0

• Map AI-BOM output to the CISA and G7 minimum elements for AI SBOMs

  aibomcomplianceenhancement
  Feature

  cdxgen/cdxgen#4587 · Filter by author prabhu opened on Oct 28, 2026 · 13.7.0

• cdx-validate: add a CISA 2026 minimum elements rule set

  complianceenhancementstandard
  Feature

  cdxgen/cdxgen#4586 · Filter by author prabhu opened on Oct 28, 2026 · 13.7.0

• SBOM minimum elements 2026: CISA and CRA validation profiles in cdx-validate

  complianceenhancementstandard
  Epic

  cdxgen/cdxgen#4585 · Filter by author prabhu opened on Oct 28, 2026 · 13.7.0

• Review every log call for credential and sensitive data exposure

  enhancementsecurity
  cdxgen/cdxgen#4582 · Filter by author prabhu opened on Oct 28, 2026

• Install dosai 5.0.0 in the .NET images

  blockedenhancementlang:containerlang:dotnet
  Task

  cdxgen/cdxgen#4577 · Filter by author prabhu opened on Oct 28, 2026 · 13.6.0

• Move the .NET 11 images to the generally available SDK base image

  blockedenhancementlang:containerlang:dotnet
  Task

  cdxgen/cdxgen#4576 · Filter by author prabhu opened on Oct 28, 2026 · 13.6.0