Spdx-Java-Library icon indicating copy to clipboard operation
Spdx-Java-Library copied to clipboard
verified publisher icon spdx

Remove the patch version on the license list

Open goneall opened this issue 1 year ago • 3 comments

The patch version was added in the most recent release of the SPDX license list to be compatible with the SPDX 3.0 release. This, however, broke the validation for the SPDX 2.X parser which checks that there is no patch version (per the 2.X spec). This commit removes the patch version from the license list version of the license list for the SPDX since this version of the license list only supports version 2.X

goneall avatar May 28 '24 05:05 goneall

cc: @puerco

goneall avatar May 28 '24 05:05 goneall

I updated the PR to allow for patch versions in the license list checking in addition to only using the major/minor versions when creating the license list version.

goneall avatar May 28 '24 15:05 goneall

I updated the PR to allow for patch versions in the license list checking in addition to only using the major/minor versions when creating the license list version.

Based on the discussion on the tech call on 28 May 2024, I am reverting this commit so that the verify will fail if the patch version is present.

goneall avatar May 28 '24 18:05 goneall

Closing - replaced by PR #248

goneall avatar Aug 19 '24 21:08 goneall