From 49b747031fe1ff3ddf7c46de5799e27b6307cc5d Mon Sep 17 00:00:00 2001
From: wievdndr <wiebe.vandendriessche@ugent.be>
Date: Wed, 17 Dec 2025 11:41:48 +0100
Subject: [PATCH 1/4] fix: allow multiple entries for ModelCard considerations
 lists in xml (so it matches the json spec)

Signed-off-by: wievdndr <wiebe.vandendriessche@ugent.be>
---
 schema/bom-1.5.xsd | 8 ++++----
 schema/bom-1.6.xsd | 8 ++++----
 schema/bom-1.7.xsd | 8 ++++----
 3 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/schema/bom-1.5.xsd b/schema/bom-1.5.xsd
index 0651bcdd..85888d8c 100644
--- a/schema/bom-1.5.xsd
+++ b/schema/bom-1.5.xsd
@@ -2885,7 +2885,7 @@ limitations under the License.
                             </xs:annotation>
                             <xs:complexType>
                                 <xs:sequence>
-                                    <xs:element name="user" type="xs:string" minOccurs="0" maxOccurs="1" />
+                                    <xs:element name="user" type="xs:string" minOccurs="0" maxOccurs="unbounded" />
                                 </xs:sequence>
                             </xs:complexType>
                         </xs:element>
@@ -2897,7 +2897,7 @@ limitations under the License.
                             </xs:annotation>
                             <xs:complexType>
                                 <xs:sequence>
-                                    <xs:element name="useCase" type="xs:string" minOccurs="0" maxOccurs="1" />
+                                    <xs:element name="useCase" type="xs:string" minOccurs="0" maxOccurs="unbounded" />
                                 </xs:sequence>
                             </xs:complexType>
                         </xs:element>
@@ -2911,7 +2911,7 @@ limitations under the License.
                             </xs:annotation>
                             <xs:complexType>
                                 <xs:sequence>
-                                    <xs:element name="technicalLimitation" type="xs:string" minOccurs="0" maxOccurs="1" />
+                                    <xs:element name="technicalLimitation" type="xs:string" minOccurs="0" maxOccurs="unbounded" />
                                 </xs:sequence>
                             </xs:complexType>
                         </xs:element>
@@ -2923,7 +2923,7 @@ limitations under the License.
                             </xs:annotation>
                             <xs:complexType>
                                 <xs:sequence>
-                                    <xs:element name="performanceTradeoff" type="xs:string" minOccurs="0" maxOccurs="1" />
+                                    <xs:element name="performanceTradeoff" type="xs:string" minOccurs="0" maxOccurs="unbounded" />
                                 </xs:sequence>
                             </xs:complexType>
                         </xs:element>
diff --git a/schema/bom-1.6.xsd b/schema/bom-1.6.xsd
index 847c5261..2c178462 100644
--- a/schema/bom-1.6.xsd
+++ b/schema/bom-1.6.xsd
@@ -3256,7 +3256,7 @@ limitations under the License.
                             </xs:annotation>
                             <xs:complexType>
                                 <xs:sequence>
-                                    <xs:element name="user" type="xs:string" minOccurs="0" maxOccurs="1" />
+                                    <xs:element name="user" type="xs:string" minOccurs="0" maxOccurs="unbounded" />
                                 </xs:sequence>
                             </xs:complexType>
                         </xs:element>
@@ -3268,7 +3268,7 @@ limitations under the License.
                             </xs:annotation>
                             <xs:complexType>
                                 <xs:sequence>
-                                    <xs:element name="useCase" type="xs:string" minOccurs="0" maxOccurs="1" />
+                                    <xs:element name="useCase" type="xs:string" minOccurs="0" maxOccurs="unbounded" />
                                 </xs:sequence>
                             </xs:complexType>
                         </xs:element>
@@ -3282,7 +3282,7 @@ limitations under the License.
                             </xs:annotation>
                             <xs:complexType>
                                 <xs:sequence>
-                                    <xs:element name="technicalLimitation" type="xs:string" minOccurs="0" maxOccurs="1" />
+                                    <xs:element name="technicalLimitation" type="xs:string" minOccurs="0" maxOccurs="unbounded" />
                                 </xs:sequence>
                             </xs:complexType>
                         </xs:element>
@@ -3294,7 +3294,7 @@ limitations under the License.
                             </xs:annotation>
                             <xs:complexType>
                                 <xs:sequence>
-                                    <xs:element name="performanceTradeoff" type="xs:string" minOccurs="0" maxOccurs="1" />
+                                    <xs:element name="performanceTradeoff" type="xs:string" minOccurs="0" maxOccurs="unbounded" />
                                 </xs:sequence>
                             </xs:complexType>
                         </xs:element>
diff --git a/schema/bom-1.7.xsd b/schema/bom-1.7.xsd
index deba3de2..738cafce 100644
--- a/schema/bom-1.7.xsd
+++ b/schema/bom-1.7.xsd
@@ -3499,7 +3499,7 @@ limitations under the License.
                             </xs:annotation>
                             <xs:complexType>
                                 <xs:sequence>
-                                    <xs:element name="user" type="xs:string" minOccurs="0" maxOccurs="1" />
+                                    <xs:element name="user" type="xs:string" minOccurs="0" maxOccurs="unbounded" />
                                 </xs:sequence>
                             </xs:complexType>
                         </xs:element>
@@ -3511,7 +3511,7 @@ limitations under the License.
                             </xs:annotation>
                             <xs:complexType>
                                 <xs:sequence>
-                                    <xs:element name="useCase" type="xs:string" minOccurs="0" maxOccurs="1" />
+                                    <xs:element name="useCase" type="xs:string" minOccurs="0" maxOccurs="unbounded" />
                                 </xs:sequence>
                             </xs:complexType>
                         </xs:element>
@@ -3525,7 +3525,7 @@ limitations under the License.
                             </xs:annotation>
                             <xs:complexType>
                                 <xs:sequence>
-                                    <xs:element name="technicalLimitation" type="xs:string" minOccurs="0" maxOccurs="1" />
+                                    <xs:element name="technicalLimitation" type="xs:string" minOccurs="0" maxOccurs="unbounded" />
                                 </xs:sequence>
                             </xs:complexType>
                         </xs:element>
@@ -3537,7 +3537,7 @@ limitations under the License.
                             </xs:annotation>
                             <xs:complexType>
                                 <xs:sequence>
-                                    <xs:element name="performanceTradeoff" type="xs:string" minOccurs="0" maxOccurs="1" />
+                                    <xs:element name="performanceTradeoff" type="xs:string" minOccurs="0" maxOccurs="unbounded" />
                                 </xs:sequence>
                             </xs:complexType>
                         </xs:element>

From c2c0f3425cfb5d4581628ceff666898c4d132887 Mon Sep 17 00:00:00 2001
From: wievdndr <wiebe.vandendriessche@ugent.be>
Date: Fri, 19 Dec 2025 09:43:37 +0100
Subject: [PATCH 2/4] fix: update XML schema versions to 1.5.1, 1.6.2, and
 1.7.1

Signed-off-by: wievdndr <wiebe.vandendriessche@ugent.be>
---
 schema/bom-1.5.xsd | 2 +-
 schema/bom-1.6.xsd | 2 +-
 schema/bom-1.7.xsd | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/schema/bom-1.5.xsd b/schema/bom-1.5.xsd
index 85888d8c..d7a17437 100644
--- a/schema/bom-1.5.xsd
+++ b/schema/bom-1.5.xsd
@@ -22,7 +22,7 @@ limitations under the License.
            targetNamespace="http://cyclonedx.org/schema/bom/1.5"
            vc:minVersion="1.0"
            vc:maxVersion="1.1"
-           version="1.5.0">
+           version="1.5.1">
 
     <xs:import namespace="http://cyclonedx.org/schema/spdx" schemaLocation="http://cyclonedx.org/schema/spdx"/>
 
diff --git a/schema/bom-1.6.xsd b/schema/bom-1.6.xsd
index 2c178462..7d162ee1 100644
--- a/schema/bom-1.6.xsd
+++ b/schema/bom-1.6.xsd
@@ -22,7 +22,7 @@ limitations under the License.
            targetNamespace="http://cyclonedx.org/schema/bom/1.6"
            vc:minVersion="1.0"
            vc:maxVersion="1.1"
-           version="1.6.1">
+           version="1.6.2">
 
     <xs:import namespace="http://cyclonedx.org/schema/spdx" schemaLocation="http://cyclonedx.org/schema/spdx"/>
 
diff --git a/schema/bom-1.7.xsd b/schema/bom-1.7.xsd
index 738cafce..b040c9a4 100644
--- a/schema/bom-1.7.xsd
+++ b/schema/bom-1.7.xsd
@@ -22,7 +22,7 @@ limitations under the License.
            targetNamespace="http://cyclonedx.org/schema/bom/1.7"
            vc:minVersion="1.0"
            vc:maxVersion="1.1"
-           version="1.7.0">
+           version="1.7.1">
 
     <xs:import namespace="http://cyclonedx.org/schema/spdx" schemaLocation="http://cyclonedx.org/schema/spdx"/>
 

From 28eed10926d8560f04fbbe79c59cf216eb0ddc3d Mon Sep 17 00:00:00 2001
From: wievdndr <wiebe.vandendriessche@ugent.be>
Date: Fri, 16 Jan 2026 09:44:16 +0100
Subject: [PATCH 3/4] test: Add second entry for users, useCases,
 technicalLimitations, and performanceTradeoffs in
 valid-machine-learning-*.xml test files to verify the schema correctly
 validates multiple entries for these fields.

Signed-off-by: wievdndr <wiebe.vandendriessche@ugent.be>
---
 tools/src/test/resources/1.5/valid-machine-learning-1.5.xml | 4 ++++
 tools/src/test/resources/1.6/valid-machine-learning-1.6.xml | 4 ++++
 tools/src/test/resources/1.7/valid-machine-learning-1.7.xml | 4 ++++
 3 files changed, 12 insertions(+)

diff --git a/tools/src/test/resources/1.5/valid-machine-learning-1.5.xml b/tools/src/test/resources/1.5/valid-machine-learning-1.5.xml
index 7c541ecb..e4a871b8 100644
--- a/tools/src/test/resources/1.5/valid-machine-learning-1.5.xml
+++ b/tools/src/test/resources/1.5/valid-machine-learning-1.5.xml
@@ -61,15 +61,19 @@
                 <considerations>
                     <users>
                         <user>Who are the intended users of the model?</user>
+                        <user>Data scientists and ML researchers</user>
                     </users>
                     <useCases>
                         <useCase>Who are the intended users of the model?</useCase>
+                        <useCase>Text-to-image generation for creative applications</useCase>
                     </useCases>
                     <technicalLimitations>
                         <technicalLimitation>What are the known technical limitations of the model?</technicalLimitation>
+                        <technicalLimitation>Limited performance on non-photographic styles</technicalLimitation>
                     </technicalLimitations>
                     <performanceTradeoffs>
                         <performanceTradeoff>What are the known tradeoffs in accuracy/performance of the model?</performanceTradeoff>
+                        <performanceTradeoff>Higher resolution output requires more computational resources</performanceTradeoff>
                     </performanceTradeoffs>
                     <ethicalConsiderations>
                         <ethicalConsideration>
diff --git a/tools/src/test/resources/1.6/valid-machine-learning-1.6.xml b/tools/src/test/resources/1.6/valid-machine-learning-1.6.xml
index 6013b1c3..808be3f5 100644
--- a/tools/src/test/resources/1.6/valid-machine-learning-1.6.xml
+++ b/tools/src/test/resources/1.6/valid-machine-learning-1.6.xml
@@ -61,15 +61,19 @@
                 <considerations>
                     <users>
                         <user>Who are the intended users of the model?</user>
+                        <user>Data scientists and ML researchers</user>
                     </users>
                     <useCases>
                         <useCase>Who are the intended users of the model?</useCase>
+                        <useCase>Text-to-image generation for creative applications</useCase>
                     </useCases>
                     <technicalLimitations>
                         <technicalLimitation>What are the known technical limitations of the model? E.g. What kind(s) of data should the model be expected not to perform well on? What are the factors that might degrade model performance?</technicalLimitation>
+                        <technicalLimitation>Limited performance on non-photographic styles</technicalLimitation>
                     </technicalLimitations>
                     <performanceTradeoffs>
                         <performanceTradeoff>What are the known tradeoffs in accuracy/performance of the model?</performanceTradeoff>
+                        <performanceTradeoff>Higher resolution output requires more computational resources</performanceTradeoff>
                     </performanceTradeoffs>
                     <ethicalConsiderations>
                         <ethicalConsideration>
diff --git a/tools/src/test/resources/1.7/valid-machine-learning-1.7.xml b/tools/src/test/resources/1.7/valid-machine-learning-1.7.xml
index 38df43ff..c235c569 100644
--- a/tools/src/test/resources/1.7/valid-machine-learning-1.7.xml
+++ b/tools/src/test/resources/1.7/valid-machine-learning-1.7.xml
@@ -63,15 +63,19 @@
                 <considerations>
                     <users>
                         <user>Who are the intended users of the model?</user>
+                        <user>Data scientists and ML researchers</user>
                     </users>
                     <useCases>
                         <useCase>Who are the intended users of the model?</useCase>
+                        <useCase>Text-to-image generation for creative applications</useCase>
                     </useCases>
                     <technicalLimitations>
                         <technicalLimitation>What are the known technical limitations of the model? E.g. What kind(s) of data should the model be expected not to perform well on? What are the factors that might degrade model performance?</technicalLimitation>
+                        <technicalLimitation>Limited performance on non-photographic styles</technicalLimitation>
                     </technicalLimitations>
                     <performanceTradeoffs>
                         <performanceTradeoff>What are the known tradeoffs in accuracy/performance of the model?</performanceTradeoff>
+                        <performanceTradeoff>Higher resolution output requires more computational resources</performanceTradeoff>
                     </performanceTradeoffs>
                     <ethicalConsiderations>
                         <ethicalConsideration>

From 1cacb276efa182c283a345cd3eb529a94afef291 Mon Sep 17 00:00:00 2001
From: wievdndr <wiebe.vandendriessche@ugent.be>
Date: Mon, 9 Feb 2026 15:32:38 +0100
Subject: [PATCH 4/4] fix: add test cases for all supported formats

Signed-off-by: wievdndr <wiebe.vandendriessche@ugent.be>
---
 .../resources/1.5/valid-machine-learning-1.5.json    | 12 ++++++++----
 .../1.5/valid-machine-learning-1.5.textproto         |  4 ++++
 .../resources/1.6/valid-machine-learning-1.6.json    | 12 ++++++++----
 .../1.6/valid-machine-learning-1.6.textproto         |  4 ++++
 .../resources/1.7/valid-machine-learning-1.7.json    | 12 ++++++++----
 .../1.7/valid-machine-learning-1.7.textproto         |  4 ++++
 6 files changed, 36 insertions(+), 12 deletions(-)

diff --git a/tools/src/test/resources/1.5/valid-machine-learning-1.5.json b/tools/src/test/resources/1.5/valid-machine-learning-1.5.json
index 59dc3cee..e718ecf1 100644
--- a/tools/src/test/resources/1.5/valid-machine-learning-1.5.json
+++ b/tools/src/test/resources/1.5/valid-machine-learning-1.5.json
@@ -60,16 +60,20 @@
         },
         "considerations": {
           "users": [
-            "Who are the intended users of the model?"
+            "Who are the intended users of the model?",
+            "Data scientists and ML researchers"
           ],
           "useCases": [
-            "Who are the intended users of the model?"
+            "Who are the intended users of the model?",
+            "Text-to-image generation for creative applications"
           ],
           "technicalLimitations": [
-            "What are the known technical limitations of the model? E.g. What kind(s) of data should the model be expected not to perform well on? What are the factors that might degrade model performance?"
+            "What are the known technical limitations of the model? E.g. What kind(s) of data should the model be expected not to perform well on? What are the factors that might degrade model performance?",
+            "Limited performance on non-photographic styles"
           ],
           "performanceTradeoffs": [
-            "What are the known tradeoffs in accuracy/performance of the model?"
+            "What are the known tradeoffs in accuracy/performance of the model?",
+            "Higher resolution output requires more computational resources"
           ],
           "ethicalConsiderations": [
             {
diff --git a/tools/src/test/resources/1.5/valid-machine-learning-1.5.textproto b/tools/src/test/resources/1.5/valid-machine-learning-1.5.textproto
index 4e54321d..3d32ef41 100644
--- a/tools/src/test/resources/1.5/valid-machine-learning-1.5.textproto
+++ b/tools/src/test/resources/1.5/valid-machine-learning-1.5.textproto
@@ -48,9 +48,13 @@ components {
     }
     considerations: {
       users: "Who are the intended users of the model?"
+      users: "Data scientists and ML researchers"
       useCases: "Who are the intended users of the model?"
+      useCases: "Text-to-image generation for creative applications"
       technicalLimitations: "What are the known technical limitations of the model? E.g. What kind(s) of data should the model be expected not to perform well on? What are the factors that might degrade model performance?"
+      technicalLimitations: "Limited performance on non-photographic styles"
       performanceTradeoffs: "What are the known tradeoffs in accuracy/performance of the model?"
+      performanceTradeoffs: "Higher resolution output requires more computational resources"
       ethicalConsiderations: {
         name: "The name of the risk"
         mitigationStrategy: "Strategy used to address this risk"
diff --git a/tools/src/test/resources/1.6/valid-machine-learning-1.6.json b/tools/src/test/resources/1.6/valid-machine-learning-1.6.json
index dbd0ea7b..a96c5e9c 100644
--- a/tools/src/test/resources/1.6/valid-machine-learning-1.6.json
+++ b/tools/src/test/resources/1.6/valid-machine-learning-1.6.json
@@ -62,16 +62,20 @@
         },
         "considerations": {
           "users": [
-            "Who are the intended users of the model?"
+            "Who are the intended users of the model?",
+            "Data scientists and ML researchers"
           ],
           "useCases": [
-            "Who are the intended users of the model?"
+            "Who are the intended users of the model?",
+            "Text-to-image generation for creative applications"
           ],
           "technicalLimitations": [
-            "What are the known technical limitations of the model? E.g. What kind(s) of data should the model be expected not to perform well on? What are the factors that might degrade model performance?"
+            "What are the known technical limitations of the model? E.g. What kind(s) of data should the model be expected not to perform well on? What are the factors that might degrade model performance?",
+            "Limited performance on non-photographic styles"
           ],
           "performanceTradeoffs": [
-            "What are the known tradeoffs in accuracy/performance of the model?"
+            "What are the known tradeoffs in accuracy/performance of the model?",
+            "Higher resolution output requires more computational resources"
           ],
           "ethicalConsiderations": [
             {
diff --git a/tools/src/test/resources/1.6/valid-machine-learning-1.6.textproto b/tools/src/test/resources/1.6/valid-machine-learning-1.6.textproto
index 54452d65..c4594c77 100644
--- a/tools/src/test/resources/1.6/valid-machine-learning-1.6.textproto
+++ b/tools/src/test/resources/1.6/valid-machine-learning-1.6.textproto
@@ -63,9 +63,13 @@ components {
     }
     considerations: {
       users: "Who are the intended users of the model?"
+      users: "Data scientists and ML researchers"
       useCases: "Who are the intended users of the model?"
+      useCases: "Text-to-image generation for creative applications"
       technicalLimitations: "What are the known technical limitations of the model? E.g. What kind(s) of data should the model be expected not to perform well on? What are the factors that might degrade model performance?"
+      technicalLimitations: "Limited performance on non-photographic styles"
       performanceTradeoffs: "What are the known tradeoffs in accuracy/performance of the model?"
+      performanceTradeoffs: "Higher resolution output requires more computational resources"
       ethicalConsiderations: {
         name: "The name of the risk"
         mitigationStrategy: "Strategy used to address this risk"
diff --git a/tools/src/test/resources/1.7/valid-machine-learning-1.7.json b/tools/src/test/resources/1.7/valid-machine-learning-1.7.json
index cb64ee80..76117eb7 100644
--- a/tools/src/test/resources/1.7/valid-machine-learning-1.7.json
+++ b/tools/src/test/resources/1.7/valid-machine-learning-1.7.json
@@ -70,16 +70,20 @@
         },
         "considerations": {
           "users": [
-            "Who are the intended users of the model?"
+            "Who are the intended users of the model?",
+            "Data scientists and ML researchers"
           ],
           "useCases": [
-            "Who are the intended users of the model?"
+            "Who are the intended users of the model?",
+            "Text-to-image generation for creative applications"
           ],
           "technicalLimitations": [
-            "What are the known technical limitations of the model? E.g. What kind(s) of data should the model be expected not to perform well on? What are the factors that might degrade model performance?"
+            "What are the known technical limitations of the model? E.g. What kind(s) of data should the model be expected not to perform well on? What are the factors that might degrade model performance?",
+            "Limited performance on non-photographic styles"
           ],
           "performanceTradeoffs": [
-            "What are the known tradeoffs in accuracy/performance of the model?"
+            "What are the known tradeoffs in accuracy/performance of the model?",
+            "Higher resolution output requires more computational resources"
           ],
           "ethicalConsiderations": [
             {
diff --git a/tools/src/test/resources/1.7/valid-machine-learning-1.7.textproto b/tools/src/test/resources/1.7/valid-machine-learning-1.7.textproto
index 25b78f5d..b76fe7a7 100644
--- a/tools/src/test/resources/1.7/valid-machine-learning-1.7.textproto
+++ b/tools/src/test/resources/1.7/valid-machine-learning-1.7.textproto
@@ -62,9 +62,13 @@ components: {
     }
     considerations: {
       users: "Who are the intended users of the model?"
+      users: "Data scientists and ML researchers"
       useCases: "Who are the intended users of the model?"
+      useCases: "Text-to-image generation for creative applications"
       technicalLimitations: "What are the known technical limitations of the model? E.g. What kind(s) of data should the model be expected not to perform well on? What are the factors that might degrade model performance?"
+      technicalLimitations: "Limited performance on non-photographic styles"
       performanceTradeoffs: "What are the known tradeoffs in accuracy/performance of the model?"
+      performanceTradeoffs: "Higher resolution output requires more computational resources"
       ethicalConsiderations: {
         name: "The name of the risk"
         mitigationStrategy: "Strategy used to address this risk"