Prepare v1.2.0 release

 - Update changelog
 - Update version to 1.2.0 (without dev0)

Signed-off-by: Benjamin Robin <benjamin.robin@bootlin.com>

Author: benjarobin

CHANGELOG.md

@@ -1,10 +1,51 @@
 
-## v1.2.0 (Unreleased)
+## v1.3.0 (Unreleased)
 
 ### Added or Changed
 
 ### Fixed
 
+## v1.2.0
+
+### Added or Changed
+
+- **Added** `--disable-auto-updates` flag to disable automatic updates for all
+  Git databases. This allows running `sbom-cve-check` without network access.
+- **Added** `--export-process-native` flag to process only target and/or native
+  components.
+- **Added** `--export-spdx-pkg-include-vex` flag. For SPDX 3 exports, this flag
+  links VEX information directly to binary (install) package outputs. If
+  omitted, VEX information is linked only to the common recipe generating the
+  binary packages, provided the SPDX 3 document includes such an object
+  (specification package).
+- **Added** `summary` text report exporter type ([#11](
+  https://github.com/bootlin/sbom-cve-check/pull/11)).
+- Exported files can now be generated to `stdout`.
+- **Updated** the method for extracting packages from an SPDX 3.0 SBOM. The SBOM
+  no longer requires a `build_Build` object, and support for specification
+  packages has been added.
+- Yocto `cve-check` export files can now include the Yocto Project layer,
+  extracted from the PURL if present.
+- Annotations are now only considered if the component identifier and version
+  (from the CPE or package version) in the SBOM match the annotation
+  information. Previously if the annotation version did not match, we would
+  still use the annotation information to associate the CVE id to the tested
+  component.
+- **Added** extraction of patches associated with a VEX "fixed" assessment
+  relationship from SPDX 3.0 SBOMs.
+- **Added** support for compression for input and exported files. Files with
+  the `.zst` extension are automatically handled.
+
+### Fixed
+
+- **Improved** version parsing and range checking ([#12](
+  https://github.com/bootlin/sbom-cve-check/pull/12), [#13](
+  https://github.com/bootlin/sbom-cve-check/issues/13)).
+- **Fixed** generation of the TOM file produced by `--gen-repro-config` when
+  `auto_update_max_age=` was set to `0`.
+- **Fixed** handling of the `cpeApplicability` property in `cvelistV5` entries
+  if invalid ([#15](https://github.com/bootlin/sbom-cve-check/issues/15)).
+
 ## v1.1.0
 
 ### Added or Changed

src/sbom_cve_check/__init__.py

@@ -1,4 +1,4 @@
 # -*- coding: utf-8 -*-
 # SPDX-License-Identifier: GPL-2.0-only
 
-__version__ = "1.2.0.dev0"
+__version__ = "1.2.0"