v2.1.0

2.1.0 (2026-06-22)

Features

• Add the tests for merge workflow. (0fe093b)
• ISV-6236: added extra_images to make_metadata_yaml (e1985cb)
• ISV-6236: test rewrite (3afca53)
• ISV-7294: add contextual SBOM builder logging (db57679)
• ISV-7294: add contextual SBOM builder logging (1bfe15f)
• mobster enrich (b875087)
• mobster enrich (09c228f)
• Update the doc string. (a5fd81a)

Bug Fixes

• added extra builder image to test (f2797dc)
• added missing docstrings and types (448632a)
• aiohttp -> 3.14.0 (8ff080d)
• capture_builder_content_workflow: moved builder_imgs to extra_image (75c8b4e)
• code review fixes and added more unit tests (58d5781)
• deleted unused files & other minor fixes (948fb04)
• fix CI failures (f3f5f6c)
• fix CI failures (538a62d)
• fixed component_img spdx_id mismatch & finalized asserts (dbdd9ee)
• fixed purls (8eaa12a)
• ISV-6236: added skips to failing tests (4fae800)
• ISV-6236: trued up purls/pullspecs/etc (7932ce4)
• ISV-6818: Update the merge sboms workflow. (835e9eb)
• ISV-6818: Update the purl key normalization function for merge workflow (e1e5019)
• ISV-6818: Update the SBOM merge process to prevent duplication. (cf24a86)
• ISV-6818: Update the SBOM merge process to prevent duplication. (c82f3f6)
• ISV-6997: normalize --arch flag to OCI format before use (216209a)
• ISV-6997: normalize --arch flag to OCI format before use (0de5ef2)
• ISV-7175: ImageData now parses pullspecs with tags and/or digests (abdd36d)
• ISV-7175: ImageData now parses pullspecs with tags and/or digests (0bf8461)
• ISV-7175: removed image_arch from certain to_image calls for parity (8367b81)
• ISV-7294: address comments (cd4df85)
• ISV-7327: deduplicate documentation (0d16b6d)
• ISV-7327: update agents & contributing (98f8ff5)
• ISV-7327: update agents & contributing (1e4bdf7)
• log correct number of remaining packages (74baf6d)
• log correct number of remaining packages (b29ca08)
• pip-audit (d9e01d6)
• ran ruff format (66c8337)
• re-enable test deactivated by mistake (782d78e)
• rebased and resolved merge conflicts (170f3a0)
• rebased, formatting and error checking fixes (cd8f9fb)
• remove test_builder_content_duplicate_from_parent; rename another test (a3f2cbc)
• removed duplicate test & reformatted (fe4ef21)
• removed parent/grandparent images from build metadata (0b8efdf)
• removed unused function (d9792e3)
• SBOMPackage.to_metadata() now adds checksum and dependency_of_purl (54468ce)
• skipped test_builder_content (it cannot work due to a bug currently) (713559b)
• test_builder_content: added intermediate package to build metadata (9f66aff)
• use verify_relationships directly instead of (d6b39c0)
• verify_relationships now supports filtering by specific relationshiptype (bc449c2)

Documentation

• add ADR directory with first architecture decision record (3fe4038)
• add ADRs for dual SBOM format support and asyncio usage (95399a0)
• add CONTRIBUTING guide and improve README structure (2cf6998)
• add CONTRIBUTING guide and improve README structure (389df29)
• add Pattern References section to CLAUDE.md (850d54f)
• add Usage section to README and fix augment command examples (7f5ab73)
• added docstring for make_metadata_yaml (73f552a)
• docstring update (0120d7f)
• fix incorrect docstring for test_builder_content_missing_purl (463911a)
• ISV-7327: update the context description (e031e2b)
• Remove obsolete CLAUDE.md (522ad61)
• Remove obsolete CLAUDE.md (978d9bd)