Closed goneall closed 3 months ago
cc: @puerco
I updated the PR to allow for patch versions in the license list checking in addition to only using the major/minor versions when creating the license list version.
I updated the PR to allow for patch versions in the license list checking in addition to only using the major/minor versions when creating the license list version.
Based on the discussion on the tech call on 28 May 2024, I am reverting this commit so that the verify will fail if the patch version is present.
Closing - replaced by PR #248
The patch version was added in the most recent release of the SPDX license list to be compatible with the SPDX 3.0 release. This, however, broke the validation for the SPDX 2.X parser which checks that there is no patch version (per the 2.X spec). This commit removes the patch version from the license list version of the license list for the SPDX since this version of the license list only supports version 2.X