fix(deps): update dependency packageurl-js to v2

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
packageurl-js	1.0.2 -> 2.0.1

---

Release Notes

package-url/packageurl-js (packageurl-js)

v2.0.1

Compare Source

Bug Fix

• Fix decoding problems around the % character #​75 (fix contributed by @​jdalton)

v2.0.0

Compare Source

• Significant refactor based on code from @​jdalton
• Numerous bug fixes and improvements the community was asking for
  • See closed issues and PRs for details (too many to list here)

v1.2.1

Compare Source

Bug Fixes

• purls with + in versions are now valid #​52 (contributed by @​satanshiro)
• purl names staring with : are now accepted #​45 (contributed by @​aniruth37)

v1.2.0

Compare Source

Features

• Add pub parsing for Dart and Flutter packages (contributed by @​topaztee)

v1.1.1

Compare Source

Bug Fix

• publish errors

v1.1.0

Compare Source

Features

• Verify entire version string is properly encoded (contributed by @​mcombuechen, @​topaztee)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Output of pnpm why packageurl-js:

Legend: production dependency, optional only, dev only

@cyclonedx/[email protected] /home/runner/work/cdxgen/cdxgen

dependencies:
packageurl-js 2.0.1

Output of jq on components:

{
  "authors": [
    {
      "name": "the purl authors"
    }
  ],
  "group": "",
  "name": "packageurl-js",
  "version": "2.0.1",
  "description": "JavaScript library to parse and build \"purl\" aka. package URLs. This is a microlibrary implementing the purl spec at https://github.com/package-url",
  "scope": "required",
  "hashes": [
    {
      "alg": "SHA-512",
      "content": "3798b15e3cd3cb8403407d10f58163a8859deb31faf77e838e99769bd40d1660efe45ba6f2af018e4a4070734ccce144d08c10ac584959ec7700dea44b4392c2"
    }
  ],
  "licenses": [
    {
      "license": {
        "id": "MIT",
        "url": "https://opensource.org/licenses/MIT"
      }
    }
  ],
  "purl": "pkg:npm/[email protected]",
  "externalReferences": [
    {
      "type": "vcs",
      "url": "https://github.com/package-url/packageurl-js#readme"
    },
    {
      "type": "vcs",
      "url": "git+https://github.com/package-url/packageurl-js.git"
    }
  ],
  "type": "library",
  "bom-ref": "pkg:npm/[email protected]",
  "properties": [
    {
      "name": "SrcFile",
      "value": "pnpm-lock.yaml"
    },
    {
      "name": "ImportedModules",
      "value": "packageurl-js,PackageURL,packageurl-js/PackageURL"
    }
  ],
  "evidence": {
    "identity": [
      {
        "field": "purl",
        "confidence": 1,
        "methods": [
          {
            "technique": "manifest-analysis",
            "confidence": 1,
            "value": "pnpm-lock.yaml"
          }
        ],
        "concludedValue": "pnpm-lock.yaml"
      }
    ],
    "occurrences": [
      {
        "location": "lib/cli/index.js#19"
      },
      {
        "location": "lib/evinser/evinser.js#5"
      },
      {
        "location": "lib/helpers/utils.js#39"
      },
      {
        "location": "lib/helpers/utils.poku.js#5"
      },
      {
        "location": "lib/helpers/validator.js#6"
      },
      {
        "location": "lib/managers/binary.js#14"
      },
      {
        "location": "lib/stages/postgen/postgen.js#5"
      }
    ]
  },
  "tags": [
    "parse"
  ]
}

Output of jq on dependencies:

{
  "ref": "pkg:npm/[email protected]",
  "dependsOn": []
}
{
  "ref": "pkg:npm/@cyclonedx/[email protected]",
  "dependsOn": [
    "pkg:npm/@babel/[email protected]",
    "pkg:npm/@babel/[email protected]",
    "pkg:npm/@iarna/[email protected]",
    "pkg:npm/@isaacs/[email protected]",
    "pkg:npm/@npmcli/[email protected]",
    "pkg:npm/@npmcli/[email protected]",
    "pkg:npm/@npmcli/[email protected]",
    "pkg:npm/@npmcli/[email protected]",
    "pkg:npm/@npmcli/[email protected]",
    "pkg:npm/@npmcli/[email protected]",
    "pkg:npm/@npmcli/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]"
  ]
}

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 2.x releases. But if you manually upgrade to 2.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.