fix(deps): update dependency @cyclonedx/cyclonedx-library to v7 - autoclosed

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@cyclonedx/cyclonedx-library	6.13.1 -> 7.1.0

---

Release Notes

CycloneDX/cyclonedx-javascript-library (@​cyclonedx/cyclonedx-library)

v7.1.0

Compare Source

• Added
  • New type Models.Copyright and class Models.CopyrightRepository (via #​1202)
  • New type Models.AttachmentContent (via #​1202)
• Changed
  • Replace usage of internals Stringable & SortableStringables with public API (#​1192 via #​1202)
    This is considered a non-breaking change, as the types are not changed, but made publicly available.
• Style
  • Apply latest code style guide (via #​1201)
• Misc
  • Support npm11 (#​1191 via #​1203)

v7.0.0

Compare Source

• BREAKING changes
  • Property Models.Bom.tools is an instance of Models.Tools now (#​1152 via #​1163)
    Before, it was an instance of Models.ToolRepository.
  • Property Models.Vulnerability.tools is an instance of Models.Tools now (via #​1163)
    Before, it was an instance of Models.ToolRepository.
• Added
  • Static function Models.Tool.fromComponent() (via #​1163)
  • Static function Models.Tool.fromService() (via #​1163)
  • New class Models.Tools (#​1152 via #​1163)
  • New serialization/normalization for Models.Tools (#​1152 via #​1163, #​1180)
• Changed
  • Serializers and Bom-Normalizers will take changed Models.Bom.tools into account (#​1152 via #​1163)
  • Serializers and Vulnerability-Normalizers will take changed Models.Vulnerability.tools into account (via #​1163)
• Style
  • Apply latest code style guide (via #​1170, #​1181)
• Dependencies
  • Support libxmljs2@​^0.35 (via #​1173)
  • Use packageurl-js@^2.0.1, was @>=0.0.6 <0.0.8 || ^1 (via #​1142)
• Build
  • Use TypeScript v5.7.2 now, was v5.6.3 (via #​1182)

---

Configuration

📅 Schedule: Branch creation - "* * * * 0,6" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.