You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
CycloneDX 1.7 has been available for some time, but several schema‑level inconsistencies and minor defects remain across XML, JSON, and Protocol Buffer definitions. This ticket tracks a maintenance release focused solely on correcting schema issues without modifying the normative specification.
Acceptance Criteria
No normative changes are made to the 1.7 or previous specification
All known schema defects are resolved (e.g., validation mismatches, missing fields, inconsistent enum definitions)
Cross‑format alignment is improved across XML, JSON, and Protobuf schemas
Any remaining gaps or newly discovered issues are documented for follow‑up work
Exit Criteria
All fixes are merged into the appropriate branch (master or 1.x-dev)
A new patch release 1.7.2 is tagged and published
Updated schemas are deployed to the CycloneDX webservers
Documentation on the website is updated to reflect the corrected schemas
Activity
jkowalleck commentedon Sep 17, 2026
release: https://github.com/CycloneDX/specification/releases/tag/1.7.2
jkowalleck commentedon Sep 17, 2026
jkowalleck commentedon Sep 17, 2026
forward ported per #1111
jkowalleck commentedon Sep 17, 2026
website deployment done.
(required #1112)
jkowalleck commentedon Sep 17, 2026
all done