chore(deps): Bump python-semantic-release/python-semantic-release from 9.1.1 to 9.21.0 (#856)

Bumps
[python-semantic-release/python-semantic-release](https://github.com/python-semantic-release/python-semantic-release)
from 9.1.1 to 9.21.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/python-semantic-release/python-semantic-release/releases">python-semantic-release/python-semantic-release's
releases</a>.</em></p>
<blockquote>
<h2>v9.21.0 (2025-02-23)</h2>
<p><em>This release is published under the MIT License.</em></p>
<h3>✨ Features</h3>
<ul>
<li>Add package name variant, <code>python-semantic-release</code>,
project script (<a
href="https://redirect.github.com/python-semantic-release/python-semantic-release/pull/1199">PR#1199</a>,
<a
href="https://github.com/python-semantic-release/python-semantic-release/commit/1ac97bc74c69ce61cec98242c19bf8adc1d37fb9"><code>1ac97bc</code></a>)</li>
</ul>
<h3>📖 Documentation</h3>
<ul>
<li><strong>github-actions</strong>: Update example workflow to handle
rapid merges (<a
href="https://redirect.github.com/python-semantic-release/python-semantic-release/pull/1200">PR#1200</a>,
<a
href="https://github.com/python-semantic-release/python-semantic-release/commit/1a4116af4b999144998cf94cf84c9c23ff2e352f"><code>1a4116a</code></a>)</li>
</ul>
<h3>✅ Resolved Issues</h3>
<ul>
<li><a
href="https://redirect.github.com/python-semantic-release/python-semantic-release/issues/1195">#1195</a>:
<em>Native <code>uvx</code> support</em></li>
</ul>
<hr />
<p><strong>Detailed Changes</strong>: <a
href="https://github.com/python-semantic-release/python-semantic-release/compare/v9.20.0...v9.21.0">v9.20.0...v9.21.0</a></p>
<hr />
<p><strong>Installable artifacts are available from</strong>:</p>
<ul>
<li>
<p><a
href="https://pypi.org/project/python-semantic-release/9.21.0">PyPi
Registry</a></p>
</li>
<li>
<p><a
href="https://github.com/python-semantic-release/python-semantic-release/releases/tag/v9.21.0">GitHub
Release Assets</a></p>
</li>
</ul>
<h2>v9.20.0 (2025-02-17)</h2>
<p><em>This release is published under the MIT License.</em></p>
<h3>✨ Features</h3>
<ul>
<li>
<p><strong>cmd-version</strong>: Enable stamping of tag formatted
versions into files (<a
href="https://redirect.github.com/python-semantic-release/python-semantic-release/pull/1190">PR#1190</a>,
<a
href="https://github.com/python-semantic-release/python-semantic-release/commit/8906d8e70467af1489d797ec8cb09b1f95e5d409"><code>8906d8e</code></a>)</p>
</li>
<li>
<p><strong>cmd-version</strong>: Extend <code>version_variables</code>
to stamp versions with <code>@</code> symbol separator (<a
href="https://redirect.github.com/python-semantic-release/python-semantic-release/pull/1185">PR#1185</a>,
<a
href="https://github.com/python-semantic-release/python-semantic-release/commit/23f69b6ac206d111b1e566367f9b2f033df5c87a"><code>23f69b6</code></a>)</p>
</li>
</ul>
<h3>📖 Documentation</h3>
<ul>
<li>
<p><strong>configuration</strong>: Add usage information for tag format
version stamping (<a
href="https://redirect.github.com/python-semantic-release/python-semantic-release/pull/1190">PR#1190</a>,
<a
href="https://github.com/python-semantic-release/python-semantic-release/commit/8906d8e70467af1489d797ec8cb09b1f95e5d409"><code>8906d8e</code></a>)</p>
</li>
<li>
<p><strong>configuration</strong>: Clarify
<code>version_variables</code> config description &amp; <code>@</code>
separator usage (<a
href="https://redirect.github.com/python-semantic-release/python-semantic-release/pull/1185">PR#1185</a>,
<a
href="https://github.com/python-semantic-release/python-semantic-release/commit/23f69b6ac206d111b1e566367f9b2f033df5c87a"><code>23f69b6</code></a>)</p>
</li>
</ul>
<h3>⚙️ Build System</h3>
<ul>
<li><strong>deps</strong>: Add <code>deprecated~=1.2</code> for
deprecation notices &amp; sphinx documentation (<a
href="https://redirect.github.com/python-semantic-release/python-semantic-release/pull/1190">PR#1190</a>,
<a
href="https://github.com/python-semantic-release/python-semantic-release/commit/8906d8e70467af1489d797ec8cb09b1f95e5d409"><code>8906d8e</code></a>)</li>
</ul>
<h3>✅ Resolved Issues</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/python-semantic-release/python-semantic-release/blob/master/CHANGELOG.rst">python-semantic-release/python-semantic-release's
changelog</a>.</em></p>
<blockquote>
<h1>v9.21.0 (2025-02-23)</h1>
<h2>✨ Features</h2>
<ul>
<li>Add package name variant, <code>python-semantic-release</code>,
project script, closes
<code>[#1195](https://github.com/python-semantic-release/python-semantic-release/issues/1195)</code>_
(<code>PR#1199</code><em>, <code>1ac97bc</code></em>)</li>
</ul>
<h2>📖 Documentation</h2>
<ul>
<li><strong>github-actions</strong>: Update example workflow to handle
rapid merges (<code>PR#1200</code><em>, <code>1a4116a</code></em>)</li>
</ul>
<p>.. _<a
href="https://redirect.github.com/python-semantic-release/python-semantic-release/issues/1195">#1195</a>:
<a
href="https://redirect.github.com/python-semantic-release/python-semantic-release/issues/1195">python-semantic-release/python-semantic-release#1195</a>
.. _1a4116a: <a
href="https://github.com/python-semantic-release/python-semantic-release/commit/1a4116af4b999144998cf94cf84c9c23ff2e352f">https://github.com/python-semantic-release/python-semantic-release/commit/1a4116af4b999144998cf94cf84c9c23ff2e352f</a>
.. _1ac97bc: <a
href="https://github.com/python-semantic-release/python-semantic-release/commit/1ac97bc74c69ce61cec98242c19bf8adc1d37fb9">https://github.com/python-semantic-release/python-semantic-release/commit/1ac97bc74c69ce61cec98242c19bf8adc1d37fb9</a>
.. _PR#1199: <a
href="https://redirect.github.com/python-semantic-release/python-semantic-release/pull/1199">python-semantic-release/python-semantic-release#1199</a>
.. _PR#1200: <a
href="https://redirect.github.com/python-semantic-release/python-semantic-release/pull/1200">python-semantic-release/python-semantic-release#1200</a></p>
<p>.. _changelog-v9.20.0:</p>
<h1>v9.20.0 (2025-02-17)</h1>
<h2>✨ Features</h2>
<ul>
<li>
<p><strong>cmd-version</strong>: Enable stamping of tag formatted
versions into files, closes
<code>[#846](https://github.com/python-semantic-release/python-semantic-release/issues/846)</code>_
(<code>PR#1190</code><em>,
<code>8906d8e</code></em>)</p>
</li>
<li>
<p><strong>cmd-version</strong>: Extend <code>version_variables</code>
to stamp versions with <code>@</code> symbol separator,
closes
<code>[#1156](https://github.com/python-semantic-release/python-semantic-release/issues/1156)</code>_
(<code>PR#1185</code><em>, <code>23f69b6</code></em>)</p>
</li>
</ul>
<h2>📖 Documentation</h2>
<ul>
<li>
<p><strong>configuration</strong>: Add usage information for tag format
version stamping (<code>PR#1190</code><em>,
<code>8906d8e</code></em>)</p>
</li>
<li>
<p><strong>configuration</strong>: Clarify
<code>version_variables</code> config description &amp; <code>@</code>
separator usage
(<code>PR#1185</code><em>, <code>23f69b6</code></em>)</p>
</li>
</ul>
<h2>⚙️ Build System</h2>
<ul>
<li><strong>deps</strong>: Add <code>deprecated~=1.2</code> for
deprecation notices &amp; sphinx documentation
(<code>PR#1190</code><em>,
<code>8906d8e</code></em>)</li>
</ul>
<p>.. _<a
href="https://redirect.github.com/python-semantic-release/python-semantic-release/issues/1156">#1156</a>:
<a
href="https://redirect.github.com/python-semantic-release/python-semantic-release/issues/1156">python-semantic-release/python-semantic-release#1156</a></p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/python-semantic-release/python-semantic-release/commit/26bb37cfab71a5a372e3db0f48a6eac57519a4a6"><code>26bb37c</code></a>
9.21.0</li>
<li><a
href="https://github.com/python-semantic-release/python-semantic-release/commit/1a4116af4b999144998cf94cf84c9c23ff2e352f"><code>1a4116a</code></a>
ci(release): improve concurrency restrictions to prevent release
collisions (...</li>
<li><a
href="https://github.com/python-semantic-release/python-semantic-release/commit/1ac97bc74c69ce61cec98242c19bf8adc1d37fb9"><code>1ac97bc</code></a>
feat: add package name variant, <code>python-semantic-release</code>,
project script (<a
href="https://redirect.github.com/python-semantic-release/python-semantic-release/issues/1">#1</a>...</li>
<li><a
href="https://github.com/python-semantic-release/python-semantic-release/commit/2e868255e9de7550f19996018d8825cb254ba7a4"><code>2e86825</code></a>
ci(deps): bump
<code>python-semantic-release/publish-action@v9.19.1</code> to 9.20.0
(<a
href="https://redirect.github.com/python-semantic-release/python-semantic-release/issues/1">#1</a>...</li>
<li><a
href="https://github.com/python-semantic-release/python-semantic-release/commit/3b7466302c07c543377ec0c79bf178291d51f7ca"><code>3b74663</code></a>
9.20.0</li>
<li><a
href="https://github.com/python-semantic-release/python-semantic-release/commit/23f69b6ac206d111b1e566367f9b2f033df5c87a"><code>23f69b6</code></a>
feat(cmd-version): extend <code>version_variables</code> to stamp
versions with <code>@</code> symb...</li>
<li><a
href="https://github.com/python-semantic-release/python-semantic-release/commit/8906d8e70467af1489d797ec8cb09b1f95e5d409"><code>8906d8e</code></a>
feat(cmd-version): enable stamping of tag formatted versions into files
(<a
href="https://redirect.github.com/python-semantic-release/python-semantic-release/issues/1190">#1190</a>)</li>
<li><a
href="https://github.com/python-semantic-release/python-semantic-release/commit/84b203f75d30f3047705bc669dbeae90f54e2cef"><code>84b203f</code></a>
test(main): use easiest &amp; common repo for non-comprehensive
tests</li>
<li><a
href="https://github.com/python-semantic-release/python-semantic-release/commit/0363ea30bb9fcfc8b5747fea5a8ba1502bd1c4c6"><code>0363ea3</code></a>
test(cmd-version): fix release notes test implementation to avoid date
change...</li>
<li><a
href="https://github.com/python-semantic-release/python-semantic-release/commit/a900b2b21318a8a59cdb25c3d99de732340b77bb"><code>a900b2b</code></a>
ci(tests-e2e): mark long running tests to prevent windows execution</li>
<li>Additional commits viewable in <a
href="https://github.com/python-semantic-release/python-semantic-release/compare/v9.1.1...v9.21.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=python-semantic-release/python-semantic-release&package-manager=github_actions&previous-version=9.1.1&new-version=9.21.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

> **Note**
> Automatic rebases have been disabled on this pull request as it has
been open for over 30 days.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jan Kowalleck <jan.kowalleck@gmail.com>

Author: dependabot[bot]

.github/workflows/release.yml

@@ -111,7 +111,7 @@ jobs:
         id: release
         # see https://python-semantic-release.readthedocs.io/en/latest/automatic-releases/github-actions.html
         # see https://github.com/python-semantic-release/python-semantic-release
-        uses: python-semantic-release/python-semantic-release@v9.1.1
+        uses: python-semantic-release/python-semantic-release@v9.21.0
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           force: ${{ github.event.inputs.release_force }}

pyproject.toml

@@ -24,18 +24,18 @@ packages = [
 ]
 include = [
   # all is an object -> prevent parse issue with dependabot
-  { path="README.md", format =["sdist"] },
-  { path="tests", format=["sdist"] },
-  { path="CHANGELOG.md", format=["sdist"] },
-  { path="docs", format=["sdist"] },
+  { path = "README.md", format = ["sdist"] },
+  { path = "tests", format = ["sdist"] },
+  { path = "CHANGELOG.md", format = ["sdist"] },
+  { path = "docs", format = ["sdist"] },
 ]
 exclude = [
   "**/.*", # exclude dotfiles and dotfolders
   "docs/_build", "docs/processes",
 ]
 keywords = [
   "OWASP", "CycloneDX",
-  "bill-of-materials", "BOM", "software-bill-of-materials","SBOM",
+  "bill-of-materials", "BOM", "software-bill-of-materials", "SBOM",
   "environment", "virtualenv", "venv", "Poetry", "Pipenv", "requirements", "PDM", "Conda",
   "SPDX", "licenses", "PURL", "package-url", "dependency-graph",
 ]
@@ -109,13 +109,18 @@ uv = "0.6.14"  # keep pinned to exact version, until a v1.0.0 is released
 
 
 
-
 [tool.semantic_release]
 # see https://python-semantic-release.readthedocs.io/en/latest/configuration.html
+logging_use_named_masks = true
+commit_parser = "conventional"
+commit_parser_options = { parse_squash_commits = true, ignore_merge_commits = true }
 commit_author = "semantic-release <semantic-release@bot.local>"
 commit_message = "chore(release): {version}\n\nAutomatically generated by python-semantic-release\n\nSigned-off-by: semantic-release <semantic-release@bot.local>"
 upload_to_vcs_release = true
-build_command = "pip install poetry && poetry build"
+build_command = """
+  pip install poetry
+  poetry build
+"""
 version_toml = ["pyproject.toml:tool.poetry.version"]
 version_variables = [
   "cyclonedx_py/__init__.py:__version__",
@@ -127,7 +132,7 @@ dist_glob_patterns = ["dist/*"]
 upload_to_vcs_release = true
 
 [tool.semantic_release.changelog]
-changelog_file = "CHANGELOG.md"
+default_templates = { changelog_file = "CHANGELOG.md" }
 exclude_commit_patterns = [
   '''chore(?:\([^)]*?\))?: .+''',
   '''ci(?:\([^)]*?\))?: .+''',