fix: vcs url git ssh (#1202)

fixes #1198

---------

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>

.github/workflows/nodejs.yml

@@ -111,10 +111,10 @@ jobs:
           # as long as npm cannot auto-resolve engine-constraints, we need to help here
           case '${{ matrix.node-version }}' in
             '14')
-              dep_constraints='normalize-package-data@^5 hosted-git-info@^6'
+              dep_constraints='normalize-package-data@^5'
               ;;
             '14.0.0')
-              dep_constraints='normalize-package-data@^3 hosted-git-info@^4'
+              dep_constraints='normalize-package-data@^3'
               dev_requirements='jest@^26 jest-junit imurmurhash fast-glob'
               ;;
           esac

.github/workflows/npm-ls_demo-results.yml

@@ -96,7 +96,7 @@ jobs:
           node --version
           npm  --version
       - name: setup demo
-        run: npm i --no-audit --no-fund
+        run: npm i --no-audit --no-fund --ignore-scripts
         working-directory: ${{ env.DEMO_ROOT_DIR }}/${{ matrix.subject }}/project
       - name: npm-ls ls --json --all --long
         # important: the command in use is the same used by the internal builders of this project

HISTORY.md

@@ -7,8 +7,11 @@ All notable changes to this project will be documented in this file.
 <!-- unreleased changes go here -->
 
 * Fixed
+  * CycloneDX `externalReference`s for `vcs` type ([#1198] via [#1202]) 
   * CycloneDX property `cdx:npm:package:path`'s value on Windows systems (via [#1203])
 
+[#1198]: https://github.com/CycloneDX/cyclonedx-node-npm/issues/1198
+[#1202]: https://github.com/CycloneDX/cyclonedx-node-npm/pull/1202
 [#1203]: https://github.com/CycloneDX/cyclonedx-node-npm/pull/1203
 
 ## 1.19.0 - 2024-06-01