Commits

Branch selector

 main

User selector

All users

All time

Commit History

Commits on May 1, 2026

• Merge pull request #10 from CycloneDX/dependabot/npm_and_yarn/docs/postcss-8.5.12

  Show description for 0aec34b
  stevespringett

  authored
  0aec34b

  Copy full SHA for 0aec34b

• Merge pull request #11 from CycloneDX/dependabot/npm_and_yarn/backend/uuid-14.0.0

  Show description for 6ec2050
  stevespringett

  authored
  6ec2050

  Copy full SHA for 6ec2050

Commits on Apr 30, 2026

• Bump postcss from 8.5.9 to 8.5.13 in /docs

  Show description for c3a3853
  dependabot[bot]

  authored
  c3a3853

  Copy full SHA for c3a3853

• Merge pull request #12 from CycloneDX/dependabot/npm_and_yarn/frontend/postcss-8.5.12

  Show description for bd299c7
  stevespringett

  authored
  bd299c7

  Copy full SHA for bd299c7

• Merge pull request #9 from CycloneDX/dependabot/npm_and_yarn/docs/multi-9d8e422f49

  Show description for a8861f5
  stevespringett

  authored
  a8861f5

  Copy full SHA for a8861f5

Commits on Apr 28, 2026

• Bump astro and @astrojs/starlight in /docs

  Show description for 8dd9582
  dependabot[bot]

  authored
  8dd9582

  Copy full SHA for 8dd9582

• Bump postcss from 8.5.9 to 8.5.12 in /frontend

  Show description for 3f306bd
  dependabot[bot]

  authored
  3f306bd

  Copy full SHA for 3f306bd

• Bump uuid from 13.0.0 to 14.0.0 in /backend

  Show description for dcf9c50
  dependabot[bot]

  authored
  dcf9c50

  Copy full SHA for dcf9c50

• refactor(cleanup): collapse role gating, JSS v2 binding, dead-code sweep

  Show description for 930d4ed
  stevespringett

  committed
  930d4ed

  Copy full SHA for 930d4ed

• Consolidate db schema into a single initial migration

  Show description for 9ca4a82
  stevespringett

  committed
  9ca4a82

  Copy full SHA for 9ca4a82

• Replace the github sourced @cyclonedx/sign git dependency with the

  Show description for 0b71342
  stevespringett

  committed
  0b71342

  Copy full SHA for 0b71342

• Update to use the new @cyclonedx/sign package.

  Show description for 8f2f8ee
  stevespringett

  committed
  8f2f8ee

  Copy full SHA for 8f2f8ee

Commits on Apr 26, 2026

• Migrated from internal jsf package to the upcoming @cyclonedx/sign package.

  Show description for 4d83bdb
  stevespringett

  committed
  4d83bdb

  Copy full SHA for 4d83bdb

• Migrated from internal jsf package to the upcoming @cyclonedx/sign package.

  Show description for 68f852a
  stevespringett

  committed
  68f852a

  Copy full SHA for 68f852a

• Migrated from internal jsf package to the upcoming @cyclonedx/sign package.

  Show description for 764b76f
  stevespringett

  committed
  764b76f

  Copy full SHA for 764b76f

• Migrated from internal jsf package to the upcoming @cyclonedx/sign package.

  Show description for cbbef36
  stevespringett

  committed
  cbbef36

  Copy full SHA for cbbef36

Commits on Apr 24, 2026

• SSDF feed fixture fix

  Show description for 2ce94d5
  stevespringett

  committed
  2ce94d5

  Copy full SHA for 2ce94d5

• Updating seed demo data

  Show description for 850ce31
  stevespringett

  committed
  850ce31

  Copy full SHA for 850ce31

• emit bare JSF signer for every signature field

  Show description for ed91754
  stevespringett

  committed
  ed91754

  Copy full SHA for ed91754

• fix(ci): build local @cyclonedx/jsf package in CI after npm ci --ignore-scripts

  Show description for 2454fa4
  stevespringett

  committed
  2454fa4

  Copy full SHA for 2454fa4

• fix(build): build @cyclonedx/jsf local package on install so tsc can resolve it

  Show description for 90e8c61
  stevespringett

  committed
  90e8c61

  Copy full SHA for 90e8c61

• repair orphan FKs in ssdf demo data and add end-to-end seed guard test

  Show description for 2dc77b3
  stevespringett

  committed
  2dc77b3

  Copy full SHA for 2dc77b3

Commits on Apr 22, 2026

• centralize CycloneDX serialization in cdxspec package

  Show description for 86d5fac
  stevespringett

  committed
  86d5fac

  Copy full SHA for 86d5fac

Commits on Apr 21, 2026

• Fixed unit tests. Consolidated schemas

  Show description for e59e32c
  stevespringett

  committed
  e59e32c

  Copy full SHA for e59e32c

• cascade signing tests and fix drift check

  Show description for 791c0bb
  stevespringett

  committed
  791c0bb

  Copy full SHA for 791c0bb

• hard remove per-attestation sign/verify/rescind

  Show description for 8e71d68
  stevespringett

  committed
  8e71d68

  Copy full SHA for 8e71d68

• Backend tightened the digital payload schema in /me/signatures to require name and organization (and accept optional role), so both electronic and digital stored signatures carry the CycloneDX sign…

  Show description for 6d9dd5c
  stevespringett

  committed
  6d9dd5c

  Copy full SHA for 6d9dd5c

• Constrain digital signature algorithm to the JSF asymmetric set

  Show description for fc2dd32
  stevespringett

  committed
  fc2dd32

  Copy full SHA for fc2dd32

• Standards authoring

  Show description for 1a094cc
  stevespringett

  committed
  1a094cc

  Copy full SHA for 1a094cc

Commits on Apr 20, 2026

• Added release notes

  Show description for fd14763
  stevespringett

  committed
  fd14763

  Copy full SHA for fd14763

• Wire up six admin capability groups that existed on the backend but had

  Show description for f7fdc6f
  stevespringett

  committed
  f7fdc6f

  Copy full SHA for f7fdc6f

Commits on Apr 18, 2026

• Fixing locale issue with typescript

  Show description for a90b0f3
  stevespringett

  committed
  a90b0f3

  Copy full SHA for a90b0f3

• fix(auth): restore admin sidebar and stop kicking authenticated users to /login

  Show description for 7c3280e
  stevespringett

  committed
  7c3280e

  Copy full SHA for 7c3280e

• Sprint 6: base image digest pin, locale hardening, no-store cache, docs accuracy

  Show description for 60660b0
  stevespringett

  committed
  60660b0

  Copy full SHA for 60660b0

• symmetric claim and attestation retention lock

  Show description for 619b657
  stevespringett

  committed
  619b657

  Copy full SHA for 619b657