-
-
Notifications
You must be signed in to change notification settings - Fork 61
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix: align XML schema with JSON schema for Dependency
type #146
#158
base: master
Are you sure you want to change the base?
fix: align XML schema with JSON schema for Dependency
type #146
#158
Conversation
…X#146 Signed-off-by: Paul Horton <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
cannot approve this proposed "bugfix" (patch level version change). this is a breaking change.
@@ -1186,11 +1186,11 @@ limitations under the License. | |||
|
|||
<xs:complexType name="dependencyType"> | |||
<xs:sequence minOccurs="0" maxOccurs="unbounded"> | |||
<xs:element name="dependency" type="bom:dependencyType"/> | |||
<xs:element name="dependency" type="bom:refType"/> |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
❌ this is a breaking change.
the following would no longer be valid, but was valid before
<bom nmlns="http://cyclonedx.org/schema/bom/1.4">
<dependencies>
<dependency ref="foo">
<dependencies>
<dependency ref="bar" />
</dependencies>
</dependency>
</dependencies>
</bom>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
You are not wrong - this is a breaking change. Does this mean we have to wait until 1.5 to get this "aligned"?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@stevespringett , @CycloneDX/core-team , @CycloneDX/industry-working-group
@madpah could you check if the bug was already fixed in the upcoming 1.5? |
Update XML schema to align with JSON schema for
dependency
typefixes #146