Skip to content

Releases: spdx/tools-python

v0.8.3

30 Sep 09:31
Compare
Choose a tag to compare

What's Changed

  • [issue-771] fix license expression error handling in tag-value parser by @armintaenzertng in #772
  • spdx3: software_purpose: add REQUIREMENT type by @stanislaw in #787
  • [issue-798] fix tag-value parser: parse Tool or Organization as annotator by @meretp in #799
  • [issue-773] shorten output of FileNotFoundError when called via the CLI by @armintaenzertng in #777
  • [issue-774] fix tag-value output when related_spdx_element_id is "NONE" or "NOASSERTION" by @armintaenzertng in #778
  • [issue-775] catch decoding errors while parsing using the cli tool by @armintaenzertng in #779
  • [issue-806] replace Licensing() with spdx_licensing by @armintaenzertng in #814
  • spdx3: element_writer: switch from tab characters to two spaces by @stanislaw in #785
  • [issue-788] fix tag-value parser to allow NONE and NOASSERTION for pa… by @meretp in #816
  • update changelog for 0.8.3 release by @armintaenzertng in #824

New Contributors

Full Changelog: v0.8.2...v0.8.3

v0.8.2

12 Oct 12:27
Compare
Choose a tag to compare

What's Changed

Full Changelog: v0.8.1...v0.8.2

v0.8.1

24 Aug 10:39
Compare
Choose a tag to compare

What's Changed

New Contributors

Full Changelog: v0.8.0...v0.8.1

v0.8.0

25 Jul 07:28
Compare
Choose a tag to compare

What's Changed

Read more

v0.8.0rc3

20 Jul 08:13
Compare
Choose a tag to compare
v0.8.0rc3 Pre-release
Pre-release

What's Changed

Full Changelog: v0.8.0rc2...v0.8.0rc3

v0.8.0rc2

14 Jul 07:54
Compare
Choose a tag to compare
v0.8.0rc2 Pre-release
Pre-release

What's Changed

Full Changelog: v0.8.0rc1...v0.8.0rc2

v0.8.0rc1

30 Jun 12:18
Compare
Choose a tag to compare
v0.8.0rc1 Pre-release
Pre-release

What's Changed

Read more

v0.8.0a3

30 Jun 12:18
Compare
Choose a tag to compare
v0.8.0a3 Pre-release
Pre-release

What's Changed

Read more

v0.7.1

14 Mar 17:27
Compare
Choose a tag to compare

New features and changes

  • added GitHub Actions workflow
  • added requirements.txt
  • added uritools for URI validation
  • Python >= 3.7 is now required
  • json/yaml/xml: added support for empty arrays for hasFiles and licenseInfoFromFiles
  • rdf: fixed writing of multiple packages
  • tag-value: enhanced parsing of snippet ranges to not mix it up with package version
  • tag-value: fixed parsing of whitespaces
  • tag-value: duplicates in LicenseInfoInFile are now removed during writing
  • account for supplier and originator to be NOASSERTION
  • checksum validation now requires lowercase values
  • during writing of a file, the encoding can be set (default is utf-8)
  • license list updated to version 3.20

New Contributors

Full Changelog: v0.7.0...v0.7.1

Release 0.7.0: Support SPDX 2.3 (and other fixes)

08 Dec 10:49
Compare
Choose a tag to compare

New features and changes

  • Dropped Python 2 support. Python >= 3.6 is now required.
  • Added pyspdxtools_convertor and pyspdxtools_parser CLI scripts. See the readme for usage instructions.
  • Updated the tools to support SPDX versions up to 2.3 and to conform with the specification. Apart from many bugfixes
    and new properties, some of the more significant changes include:
    • Support for multiple packages per document
    • Support for multiple checksums for packages and files
    • Support for files outside a package
  • Removed example documents from production code. Added additional up-to-date examples to test files.
  • Introduced pytest as the preferred test framework.
  • Improved error message handling and display.
  • Extended the contribution guidelines.
  • Improved tag/value output structure.
  • Added .editorconfig and pyproject.toml.
  • Improved handling of JSON-specific properties documentDescribes and hasFiles.
  • Added new LicenseListVersion tag.
  • Fixed annotation handling for the JSON and Tag/Value formats.
  • Free form text values in Tag/Value no longer require <text> tags if they don't span multiple lines.

Limitations

  • Validation was updated to follow the 2.3 specification. Since there is currently no support for
    version-specific handling, some details may be handled incorrectly for documents using lower
    versions. The changes are mostly restricted to properties becoming optional and new property values becoming
    available, and should be of limited impact. See https://spdx.github.io/spdx-spec/v2.3/diffs-from-previous-editions/
    for a list of changes between the versions.
  • RDF support for 2.3 is not completed, see #295

Breaking changes

There are some breaking changes compared to the 0.6.1 release. Some classes were renamed, some were moved, and files are now saved at document-level instead of package-level. See https://github.com/spdx/tools-python/wiki/How-to-migrate-from-0.6.1-to-0.7.0 for a migration guide.

Contributors

This release was made possible by the following contributors. Thank you very much!