Version 1.1.1 of the SPDX Tools Java

What's Changed

• updated README to reflect the new file names and structures by @armintaenzertng in #66
• Verify JSON against version specific schema files by @goneall in #75
• Resolve compare issues by @goneall in #70
• Update JSON schema by @goneall in #76
• Add dependency-check util to POM file by @goneall in #77
• Update library version by @goneall in #78

For the SPDX Java Library updates - see the SPDX Java Library release notes for additional information.

New Contributors

• @armintaenzertng made their first contribution in #66

Full Changelog: v1.1.0...v1.1.1

Version 1.1.0 of the SPDX Java Tools

What's Changed

• Update to SPDX Spec version 2.3
• Fix Little Typo in Converter Help-Message by @JDemler in #46
• Fix CI failure for users without SPDX access by @goneall in #47
• Check for copyright size in compare by @goneall in #49
• Enhance CompareDocs to take a directory of SPDX documents as an input by @goneall in #50
• Update link to SPDX online tool by @sr-ota in #51
• Add documentation for describes in the JSON Schema by @goneall in #53
• Add example for accessing existing SPDX objects by @goneall in #54
• Add examples for relationship creation by @zhaolida98 in #55
• Add logging for any missing enumeration values when generating schemas by @goneall in #56
• Generation missing required properties for arrays by @goneall in #58
• Update ToolsJava to support spec version 2.3 by @goneall in #63

New Contributors

• @JDemler made their first contribution in #46
• @sr-ota made their first contribution in #51
• @zhaolida98 made their first contribution in #55

Full Changelog: v1.0.4...v1.1.0

Version 1.0.4 of the SPDX Java Tools

What's Changed

• Add an example for creating an SPDX document by @goneall in #42
• Update SPDX Java Library to version 1.0.10 by @goneall in #45 resolving possible vulnerabilities CVE-2021-44228 and CVE-2021-45046

Full Changelog: v1.0.3...v1.0.4

Release 1.0.3 of the SPDX Java Tools

Important Note

This release has a minimum Java version of 11 due to updating the Jena library version to resolve a security vulnerability

What's Changed

• Update JSON schema generation by @goneall in #25 and #27
• Fixes for SPDX compare utility after docfest by @goneall in #28
• Sort properties for JSON Schema and JSON Context by @goneall in #32
• Update SPDX format converters part of README.md by @riyenas0925 in #34
• OWL to JSON LD Context - only add singular properties if singular by @goneall in #30
• Add JSON schema verification to Verify by @goneall in #37
• Update SPDX Java Library to version 1.0.9 by @goneall in #40
  • Fixes download location regular expression
  • Adds support for groff comments in license matching
  • Add required licenseId property - issue #61
  • Update Jsoup version to resolve potential vulnerability
  • Other minor improvements
• Update SPDX Rdf Store to version 1.0.9
  • Resolves a high severity vulnerability in the Jena library CVE-2021-39239
  • Resolves inconsistent namespace for listed licenses
  • Resolves RDFS Prefix missing in Turtle representations

New Contributors

• @riyenas0925 made their first contribution in #34

Full Changelog: v1.0.2...v1.0.3

Release 1.0.2 of the SPDX Tools Java

Update libraries to the latest version

Resolves a very significant performance problem parsing large tag/value files

Resolves an issue when translating to spreadsheet when the copyright text exceeds the maximum spreadsheet cell size

Minor error formatting fixes

Version 1.0.1 of the SPDX Java Tools

Resolves a couple minor issues that may impact the NTIA SBOM plugfest:

• SPDX Java Jackson Store Issue #18 - Fix reference types per spec and resolve an issue in deserializing the documentDescribes property name - this should only be a relationship in the object store and RDF/XML formats
• SPDX Tag Value Store Issue #13 allow no spaces between the SHA1: and value when specifying checksums

Version 1.0.0 of the SPDX Java Tools

This release incorporates the latest SPDX Java libraries and has been updated with several reliability and maintainability improvements. The JSON performance has been dramatically improved for large files.

Version 0.6 of the SPDX Java Tools

Greatly enhanced verification, resolves some significant issues when generating JSON, XML and YAML file formats.

Updates to the SPDX Java Library version 0.7.

Version 0.5 of the SPDX Tools Java

Updated to include the new CrossRef class and fields for licenses

Release 0.0.4 of the SPDX Tools Java utility

Mostly stable utility. Please log any issues identified.