Skip to content

Release v2.1.2
Compare
Choose a tag to compare
@elrayle elrayle released this 21 Mar 15:00
· 79 commits to main since this release
v2.1.2
0e88248
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

Overview

This is a minor bug fix release. Fixes a bug where GPL-2.0 did not match GPL-2.0-only.

Required Actions for Updating

Run the following to update to this release.

go get github.com/github/go-spdx/v2@v2.1.2

Details

Most of the changes are adding test-cases that would have caught the bug. The only substantive changes are in the range checks in node.go. There is one minor change to compareEQ() to short cut the comparison if the two licenses are the same.

  • check all simple cases before checking ranges (i.e. nodes are not licenses, exceptions are not equal, licenses are exactly equal) This is less expensive than range checks.
  • remove any simple checks that were repeated in range check methods
  • add comment describing license ranges
  • add comments about what is expected depending on whether one or both licenses have has_plus==true
  • fix the bug by checking that both license are in the same range when neither node has_plus

What's Changed

  • fix bug where GPL-2.0 failed to match GPL-2.0-only #42 (elrayle)

Full Changelog: v2.1.1...v2.1.2

Assets 2
Loading