Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: align XML schema with JSON schema for Dependency type #146 #158

Open
wants to merge 2 commits into
base: master
Choose a base branch
from

Conversation

madpah
Copy link

@madpah madpah commented Sep 13, 2022

Update XML schema to align with JSON schema for dependency type

fixes #146

Copy link
Member

@jkowalleck jkowalleck left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

cannot approve this proposed "bugfix" (patch level version change). this is a breaking change.

@@ -1186,11 +1186,11 @@ limitations under the License.

<xs:complexType name="dependencyType">
<xs:sequence minOccurs="0" maxOccurs="unbounded">
<xs:element name="dependency" type="bom:dependencyType"/>
<xs:element name="dependency" type="bom:refType"/>
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

❌ this is a breaking change.

the following would no longer be valid, but was valid before

<bom nmlns="http://cyclonedx.org/schema/bom/1.4">
<dependencies>
  <dependency ref="foo">
    <dependencies>
     <dependency ref="bar" />
    </dependencies>
  </dependency>
</dependencies>
</bom>

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You are not wrong - this is a breaking change. Does this mean we have to wait until 1.5 to get this "aligned"?

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@stevespringett , @CycloneDX/core-team , @CycloneDX/industry-working-group

@jkowalleck
Copy link
Member

@madpah could you check if the bug was already fixed in the upcoming 1.5?
if not, please prepare a PR

@jkowalleck jkowalleck requested a review from a team June 15, 2024 12:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Dependency type definition in JSON Schema and XSD Schema are inconsistent
2 participants