Check whether SPDX specification v3 has some changes affecting us

[phadej]

In particular https://spdx.github.io/spdx-spec/v3-draft/appendix-II-SPDX-license-expressions/

By quickly glancing, doesn't seem so. There's also https://github.com/spdx/spdx-spec/pull/228 which is (atm) not visible in the v3-draft. Yet it doesn't affect us, as our parser is case-sensitive i.e. requires canonical form.

There's some documentation to update however.

[ulysses4ever]

I think it may be a bit tiresome to regularly check for changes in the spec. Maybe we should close it optimistically and wait to see if anyone has any actionable issues with Cabal's support for SPDX?

[Mikolaj]

We actually update vs newest SPDX each time we do a major release, it's in the release checklist. So there must be a recent closed PR about that somewhere. IIRC, @Kleidukos did it this time. Worth verifying the above has been covered and then closing this ticket.

[phadej]

@Mikolaj the release checklist contains an entry about updating the license list data, i.e. https://github.com/spdx/license-list-data.

This is issue is about looking whether the specification (of grammar) has changed, i.e. difference between https://github.com/spdx/spdx-spec/blob/development/v2.3.1/chapters/SPDX-license-expressions.md and https://github.com/spdx/spdx-spec/blob/development/v3.0/chapters/SPDX-license-expressions.md

Also semantics are worth glancing through, though using-SPDX-short-identifiers-in-source-files.md may be more related to e.g. haddock than Cabal.

[Mikolaj]

@phadej: thanks, I stand corrected.