v9.0.0

v9.0.0 (2025-02-26)

BREAKING Changes

• Fix: model.vulnerability.VulnerabilityReference's properties are all mandatory (#790 via #792)
• Refactor: Rename spdx.is_compund_expression -> spdx.is_expression (#779)
• Behavior: BomRef affects comparison/hashing (#754 & #780)
  This is only a breaking change if you relied on ordering of elements.
• Behavior: streamline comparison/hashing functions (#755)
  This is only a breaking change if you relied on ordering of elements.
• Dependency: bump dependency py-serializable >=2 <3, was >=1.1.1 <2 (#775)
  This is only a breaking change if you have other packages depend on that specific version.

---

What's Changed

• feat!: 9.0.1 by @jkowalleck & @wkoot in #777

Full Changelog: v8.9.0...v9.0.0