From a6c3cba6f9b086f1927291835ba158b04a32c10d Mon Sep 17 00:00:00 2001
From: Oscar V <oscarvalenzuelab@users.noreply.github.com>
Date: Fri, 21 Aug 2026 00:12:30 -0700
Subject: [PATCH] Cut 2.4.2

The never-guess promise is kept by this tool rather than by ospac's
omission, refusals survive being put inside an expression, and
precedence between the adopter, the refusal list and everything else is
decided in one place.
---
 CHANGELOG.md             | 17 ++++++++++-------
 pyproject.toml           |  2 +-
 src/ossbomer/__init__.py |  2 +-
 3 files changed, 12 insertions(+), 9 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1669083..13be7a7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,14 @@ follow [Semantic Versioning](https://semver.org/).
 
 ## [Unreleased]
 
+## [2.4.2] - 2026-08-21
+
+### Changed
+- A test asserted which lookup path resolved a real licence, which is ospac's
+  data to decide. ospac 1.7.0 moved one spelling between paths and the test
+  failed on a release nobody here made. It now builds its own alias and asserts
+  the mechanism instead of upstream's contents.
+
 ### Fixed
 - The promise that a vague licence name is never guessed at was being kept by
   ospac's omission rather than by this tool. `NEVER_RESOLVE` held two entries;
@@ -26,12 +34,6 @@ follow [Semantic Versioning](https://semver.org/).
   behalf, not the person running it. `never_resolve` in the same overlay is the
   more specific statement and still wins.
 
-### Changed
-- A test asserted which lookup path resolved a real licence, which is ospac's
-  data to decide. ospac 1.7.0 moved one spelling between paths and the test
-  failed on a release nobody here made. It now builds its own alias and asserts
-  the mechanism instead of upstream's contents.
-
 ## [2.4.1] - 2026-08-21
 
 ### Changed
@@ -785,7 +787,8 @@ profile-driven `ossbomer` distribution.
   classification moves to `ospac`; package risk to a forthcoming open PURL API).
 - ~2 MB of bundled SPDX/CycloneDX schema files (the parser libraries carry their own).
 
-[Unreleased]: https://github.com/SemClone/ossbomer/compare/v2.4.1...HEAD
+[Unreleased]: https://github.com/SemClone/ossbomer/compare/v2.4.2...HEAD
+[2.4.2]: https://github.com/SemClone/ossbomer/compare/v2.4.1...v2.4.2
 [2.4.1]: https://github.com/SemClone/ossbomer/compare/v2.4.0...v2.4.1
 [2.4.0]: https://github.com/SemClone/ossbomer/compare/v2.3.1...v2.4.0
 [2.3.1]: https://github.com/SemClone/ossbomer/compare/v2.3.0...v2.3.1
diff --git a/pyproject.toml b/pyproject.toml
index d4f5922..09fa354 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "ossbomer"
-version = "2.4.1"
+version = "2.4.2"
 description = "Profile-driven SBOM validation, conformance, and license policy (SPDX / CycloneDX)"
 readme = "README.md"
 requires-python = ">=3.10"
diff --git a/src/ossbomer/__init__.py b/src/ossbomer/__init__.py
index a4e428c..e3d7c2f 100644
--- a/src/ossbomer/__init__.py
+++ b/src/ossbomer/__init__.py
@@ -14,4 +14,4 @@
     - plugins  (code): new BOM types (aiBOM, eBOM, cBOM, ...) ship as optional libs
 """
 
-__version__ = "2.4.1"
+__version__ = "2.4.2"