spdx / Spdx-Java-Library

Java library which implements the Java object model for SPDX and provides useful helper functions
Apache License 2.0
35 stars 33 forks source link

Remove the patch version on the license list #240

Closed goneall closed 1 month ago

goneall commented 4 months ago

The patch version was added in the most recent release of the SPDX license list to be compatible with the SPDX 3.0 release. This, however, broke the validation for the SPDX 2.X parser which checks that there is no patch version (per the 2.X spec). This commit removes the patch version from the license list version of the license list for the SPDX since this version of the license list only supports version 2.X

goneall commented 4 months ago

cc: @puerco

goneall commented 4 months ago

I updated the PR to allow for patch versions in the license list checking in addition to only using the major/minor versions when creating the license list version.

goneall commented 4 months ago

I updated the PR to allow for patch versions in the license list checking in addition to only using the major/minor versions when creating the license list version.

Based on the discussion on the tech call on 28 May 2024, I am reverting this commit so that the verify will fail if the patch version is present.

goneall commented 1 month ago

Closing - replaced by PR #248