feat: add support for component's evidences according to spec

[OxPirates]

fixes #737

[jkowalleck]

Thank you for providing this feature, @OxPirates

could you

• also add test models in https://github.com/CycloneDX/cyclonedx-python-lib/blob/main/tests/_data/models.py ?
• see why linters are failing? https://github.com/CycloneDX/cyclonedx-python-lib/actions/runs/14810009968/job/41639406673?pr=810
• see why code standard is failing? https://github.com/CycloneDX/cyclonedx-python-lib/actions/runs/14810009968/job/41639410612?pr=810 - see also https://github.com/CycloneDX/cyclonedx-python-lib/blob/main/CONTRIBUTING.md#code-style

[OxPirates]

@jkowalleck Thank you for your time, Will work on it and submit the changes.

[OxPirates]

@jkowalleck Thank you for the detailed review. All comments have been addressed except the one regarding ToolReference

[jkowalleck]

the amend/squash of the changes makes review hard.
please bare with me, review takes a while

[jkowalleck]

please move all these new symbols to an own module called component_evidence.
Thanks in advance

[jkowalleck]

please move all these new symbols to an own module called component_evidence.
Thanks in advance

did that for you. will continue the review

[jkowalleck]

@OxPirates, i fixed the normalizers implementation so that it also works for multiple identities in CycloneDX 1.5 XML.

CI/CT fails, since the implementation of the serialization library needs a little tweak - will add this soon.

PS: fixed and created madpah/serializable#172

[jkowalleck]

@OxPirates I think we have a solid implementation, now.
could you review and see if something is missing or if additional test might be needed?

[OxPirates]

@OxPirates I think we have a solid implementation, now. could you review and see if something is missing or if additional test might be needed?

Yes, Alredy doing so..

[OxPirates]

@OxPirates I think we have a solid implementation, now. could you review and see if something is missing or if additional test might be needed?

Yes, Alredy doing so..

Can we promote this change now?

[jkowalleck]

@OxPirates I think we have a solid implementation, now. could you review and see if something is missing or if additional test might be needed?

Yes, Alredy doing so..

Can we promote this change now?

sure. I was just waiting for your review.
If you agree to the change set, I will merge and release it early next week

[OxPirates]

@OxPirates I think we have a solid implementation, now. could you review and see if something is missing or if additional test might be needed?

Yes, Alredy doing so..

Can we promote this change now?

sure. I was just waiting for your review. If you agree to the change set, I will merge and release it early next week

Yes, Please go ahead, No further comment

[jkowalleck]

this feature was released in https://github.com/CycloneDX/cyclonedx-python-lib/releases/tag/v10.2.0