release: v0.9.0 — interoperability + breadth#21

Merged

Metbcy merged 8 commits into

mainfrom

Apr 29, 2026

Commits on Apr 29, 2026

feat(vex): consume OpenVEX 0.2.0 and CycloneDX VEX 1.6 statements

bomdrift
and
Copilot
committed
feat(vex): emit OpenVEX 0.2.0 doc with explicit per-entry vex_status

bomdrift
and
Copilot
committed
feat(license): full SPDX expression evaluator via spdx crate

bomdrift
and
Copilot
committed
feat(platform): Bitbucket + Azure DevOps support (auto-detect, footer, templates)

bomdrift
and
Copilot
committed
feat(enrich/registry): npm/PyPI/crates.io metadata + recently-published/deprecated/maintainer-set-changed findings

bomdrift
and
Copilot
committed
feat(gitlab): comment-driven suppress with security-reviewed Cloudflare Worker bridge

bomdrift
and
Copilot
committed
docs: explicit non-goals + pairing recommendations

bomdrift
and
Copilot
committed
chore(release): prepare v0.9.0

bomdrift
and
Copilot
committed