fix: update test_cyclonedx_vex

Update test_cyclonedx_vex to make it work with lib4sbom 0.9.0

Fix #5406

Signed-off-by: Fabrice Fontaine <[email protected]>

Author: ffontaine

requirements.txt

@@ -9,7 +9,7 @@ importlib_metadata>=3.6; python_version < "3.10"
 importlib_resources; python_version < "3.9"
 jinja2>=2.11.3
 jsonschema>=3.0.2
-lib4sbom>=0.8.7
+lib4sbom>=0.9.0
 lib4vex>=0.2.0
 packageurl-python
 packaging>=22.0

test/vex/test_cyclonedx_vex.json

@@ -1,7 +1,7 @@
 {
-  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
+  "$schema": "http://cyclonedx.org/schema/bom-1.7.schema.json",
   "bomFormat": "CycloneDX",
-  "specVersion": "1.6",
+  "specVersion": "1.7",
   "serialNumber": "urn:uuid:9dbd4a19-324a-4ac6-b29b-37202d2bcd90",
   "version": 1,
   "metadata": {
@@ -29,6 +29,9 @@
       "version": "1.0",
       "bom-ref": "CDXRef-DOCUMENT",
       "name": "dummy-product"
+    },
+    "distributionConstraints": {
+      "tlp": "CLEAR"
     }
   },
   "vulnerabilities": [