Changelog

v0.7.1 (2023-03-14)

New features and changes

added GitHub Actions workflow
added requirements.txt
added uritools for URI validation
Python >= 3.7 is now required
json/yaml/xml: added support for empty arrays for hasFiles and licenseInfoFromFiles
rdf: fixed writing of multiple packages
tag-value: enhanced parsing of snippet ranges to not mix it up with package version
tag-value: fixed parsing of whitespaces
tag-value: duplicates in LicenseInfoInFile are now removed during writing
account for supplier and originator to be NOASSERTION
checksum validation now requires lowercase values
during writing of a file, the encoding can be set (default is utf-8)
license list updated to version 3.20

Contributors

This release was made possible by the following contributors. Thank you very much!

Christian Decker @chrisdecker1201
Marc-Etienne Vargenau @vargenau
John Vandenberg @jayvdb
Nicolaus Weidner @nicoweidner
Meret Behrens @meretp
Armin Tänzer @armintaenzertng
Maximilian Huber @maxhbr

v0.7.0 (2022-12-08)

Starting a Changelog.

New features and changes

Dropped Python 2 support. Python >= 3.6 is now required.
Added pyspdxtools_convertor and pyspdxtools_parser CLI scripts. See the readme for usage instructions.
Updated the tools to support SPDX versions up to 2.3 and to conform with the specification. Apart from many bugfixes and new properties, some of the more significant changes include:
- Support for multiple packages per document
- Support for multiple checksums for packages and files
- Support for files outside a package
Note: Validation was updated to follow the 2.3 specification. Since there is currently no support for version-specific handling, some details may be handled incorrectly for documents using lower versions. The changes are mostly restricted to properties becoming optional and new property values becoming available, and should be of limited impact. See https://spdx.github.io/spdx-spec/v2.3/diffs-from-previous-editions/ for a list of changes between the versions.
Note: RDF support for 2.3 is not completed, see #295
Removed example documents from production code. Added additional up-to-date examples to test files.
Introduced pytest as the preferred test framework.
Improved error message handling and display.
Extended the contribution guidelines.
Improved tag/value output structure.
Added .editorconfig and pyproject.toml.
Improved handling of JSON-specific properties documentDescribes and hasFiles.
Added new LicenseListVersion tag.
Fixed annotation handling for the JSON and Tag/Value formats.
Free form text values in Tag/Value no longer require <text> tags if they don't span multiple lines.

Contributors

This release was made possible by the following contributors. Thank you very much!

Meret Behrens @meretp
Philippe Ombredanne @pombredanne
Pierre Tardy @tardyp
Nicolaus Weidner @nicoweidner
Jeff Licquia @licquia
Armin Tänzer @armintaenzertng
Alberto Pianon @alpianon
Rodney Richardson @RodneyRichardson
Lon Hohberger @lhh
Nathan Voss @njv299
Gary O'Neall @goneall
Jeffrey Otterson @jotterson
KOLANICH @KOLANICH
Yash Varshney @Yash-Varshney
HARDIK @HARDIK-TSH1392
Jose Quaresma @quaresmajose
Santiago Torres @SantiagoTorres
Shubham Kumar Jha @ShubhamKJha
Steven Kalt @SKalt
Cole Helbling @cole-h
Daniel Holth @dholth
John Vandenberg @jayvdb
Kate Stewart @kestewart
Alexios Zavras @zvr
Maximilian Huber @maxhbr
Kyle Altendorf @altendky
alpianon @alpianon
kbermude @kbermude
mzfr @mzfr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!