feat: add cyclonedx.model.dependency.Dependency.provides

[uzairchhapra]

Fixes #691

[uzairchhapra]

@jkowalleck PR is ready for review.
I am not too sure about the test cases so any guidance here would help. Thanks!

[jkowalleck]

thank you for your contribution, @uzairchhapra .

the implementation looks promising.

Regarding tests, we tend to go with an integration-test snapshot-solution, over detailed unit tests.
Please add new fixtures to https://github.com/CycloneDX/cyclonedx-python-lib/blob/main/tests/_data/models.py. your new function must start with get_bom_.
After adding new test data, please recreate the snapshots as described here: https://github.com/CycloneDX/cyclonedx-python-lib/blob/main/tests/_data/snapshots/README.md

[jkowalleck]

instead of adding a new parameter here, how about adding a new method instead: register_provision(self, target: Dependable, provides: Optional[Iterable[Dependable]] = None).

what do you think about this?
this would fit the original architectural plans better.

[uzairchhapra]

I'll give this a try

[uzairchhapra]

How do I restrict the tests to only pickup the provides parameter in Dependency when schema is 1.6? When I re-ran the snapshots I can see 10 errors:

1. 5 for schema v1.0 to v1.5 JSON
2. 5 for schema v1.0 to v1.5 XML
   

[jkowalleck]

this could be fixed by a view filter.
here is an example:

cyclonedx-python-lib/cyclonedx/model/bom.py

Lines 193 to 200 in 5788bc1

	@property
	@serializable.view(SchemaVersion1Dot2)
	@serializable.view(SchemaVersion1Dot3)
	@serializable.view(SchemaVersion1Dot4)
	@serializable.view(SchemaVersion1Dot5)
	@serializable.view(SchemaVersion1Dot6)
	@serializable.xml_sequence(6)
	def manufacture(self) -> Optional[OrganizationalEntity]:

[uzairchhapra]

I tried adding it here:

cyclonedx-python-lib/cyclonedx/model/dependency.py

Line 95 in 2525660

@serializable.view(SchemaVersion1Dot6)

The tests still seem to fail for all other SBOM specs (v1.0 to v1.5).

I am sure I must be missing something here...