Version 1.0.4 of the SPDX Java Tools

What's Changed

• Add an example for creating an SPDX document by @goneall in #42
• Update SPDX Java Library to version 1.0.10 by @goneall in #45 resolving possible vulnerabilities CVE-2021-44228 and CVE-2021-45046

Full Changelog: v1.0.3...v1.0.4

Release 1.0.3 of the SPDX Java Tools

Important Note

This release has a minimum Java version of 11 due to updating the Jena library version to resolve a security vulnerability

What's Changed

• Update JSON schema generation by @goneall in #25 and #27
• Fixes for SPDX compare utility after docfest by @goneall in #28
• Sort properties for JSON Schema and JSON Context by @goneall in #32
• Update SPDX format converters part of README.md by @riyenas0925 in #34
• OWL to JSON LD Context - only add singular properties if singular by @goneall in #30
• Add JSON schema verification to Verify by @goneall in #37
• Update SPDX Java Library to version 1.0.9 by @goneall in #40
  • Fixes download location regular expression
  • Adds support for groff comments in license matching
  • Add required licenseId property - issue #61
  • Update Jsoup version to resolve potential vulnerability
  • Other minor improvements
• Update SPDX Rdf Store to version 1.0.9
  • Resolves a high severity vulnerability in the Jena library CVE-2021-39239
  • Resolves inconsistent namespace for listed licenses
  • Resolves RDFS Prefix missing in Turtle representations

New Contributors

• @riyenas0925 made their first contribution in #34

Full Changelog: v1.0.2...v1.0.3

Release 1.0.2 of the SPDX Tools Java

Update libraries to the latest version

Resolves a very significant performance problem parsing large tag/value files

Resolves an issue when translating to spreadsheet when the copyright text exceeds the maximum spreadsheet cell size

Minor error formatting fixes

Version 1.0.1 of the SPDX Java Tools

Resolves a couple minor issues that may impact the NTIA SBOM plugfest:

• SPDX Java Jackson Store Issue #18 - Fix reference types per spec and resolve an issue in deserializing the documentDescribes property name - this should only be a relationship in the object store and RDF/XML formats
• SPDX Tag Value Store Issue #13 allow no spaces between the SHA1: and value when specifying checksums

Version 1.0.0 of the SPDX Java Tools

This release incorporates the latest SPDX Java libraries and has been updated with several reliability and maintainability improvements. The JSON performance has been dramatically improved for large files.

Version 0.6 of the SPDX Java Tools

Greatly enhanced verification, resolves some significant issues when generating JSON, XML and YAML file formats.

Updates to the SPDX Java Library version 0.7.

Version 0.5 of the SPDX Tools Java

Updated to include the new CrossRef class and fields for licenses

Release 0.0.4 of the SPDX Tools Java utility

Mostly stable utility. Please log any issues identified.