Release 0.7.3 of the SPDX Maven Plugin

What's Changed

• The attribute downloadLocation is null when no information cannot be retrieved by @rogelio-o in #148
• Generate externalRefs with PURL by @rogelio-o in #150
• Dependency graph by @rogelio-o in #152
• Fix unit tests by @goneall in #156
• Bump org.apache.commons:commons-compress from 1.21 to 1.26.0 in /src/it/advanced by @dependabot in #154
• Fix another unit test variation by @goneall in #157

New Contributors

• @rogelio-o made their first contribution in #148

Full Changelog: v0.7.2...v0.7.3

Release 0.7.2 of the SPDX Maven Plugin

What's Changed

• Update the SPDX Java libraries to the latest by @goneall in #144
• Honor the useArtifactID when generating dependency SPDX info by @goneall in #143

Full Changelog: v0.7.1...v0.7.2

Release 0.7.1 of the SPDX Maven Plugin

What's Changed

• configure maven-release-plugin by @hboutemy in #125
• add skip parameter/spdx.skip property by @hboutemy in #130
• Normalize license URLs for 'http' by @goneall in #128
• add @SInCE annotation for parameters by @hboutemy in #133
• Typo; missing leading space by @sebbASF in #134
• Update CI to use Java 17 by @goneall in #137
• Add useArtifactID parameter to override project name by @goneall in #139
• Update SPDX libraries by @goneall in #141

New Contributors

• @sebbASF made their first contribution in #134

Full Changelog: v0.7.0...v0.7.1

Release 0.7.0 of the SPDX Maven Plugin

What's Changed

• Some housekeeping on the existing codebase by @knrc in #91
• code cleanup by @hboutemy in #94
• reformat pom and cleanup dependencies by @hboutemy in #92
• add site by @hboutemy in #93
• use slf4j-api instead of Maven plugin's Log by @hboutemy in #96
• enable simple-it by @hboutemy in #95
• extract utils package from mojo+parameters by @hboutemy in #97
• add advanced IT by @hboutemy in #98
• delete unused files by @hboutemy in #99
• move resources to standard src/main/resources by @hboutemy in #100
• Bump log4j-core from 2.10.0 to 2.17.1 in /src/it/advanced by @dependabot in #104
• Bump jsoup from 1.11.3 to 1.15.3 in /src/it/advanced by @dependabot in #102
• Bump jackson-databind from 2.9.8 to 2.12.7.1 in /src/it/advanced by @dependabot in #103
• Bump guava from 24.1.1-jre to 32.0.0-jre in /src/it/advanced by @dependabot in #105
• Bump gson from 2.8.0 to 2.8.9 in /src/it/advanced by @dependabot in #106
• Bump libthrift from 0.12.0 to 0.14.0 in /src/it/advanced by @dependabot in #107
• Bump poi from 3.17 to 4.1.1 in /src/it/advanced by @dependabot in #108
• use Maven convention for list content by @hboutemy in #101
• consolidate sources from Maven project by @hboutemy in #111
• goal parameter classes are basic POJO by @hboutemy in #112
• simplify main goal execute() by @hboutemy in #110
• publish GH pages on commit by @hboutemy in #117
• throw chained exception instead of getMessage() by @hboutemy in #116
• simplify parameters by @hboutemy in #113
• add link to GH pages by @hboutemy in #119
• split project/file/dependency info preparation by @hboutemy in #118
• add params XML structure documentation by @hboutemy in #120
• link to SPDX Library javadoc by @hboutemy in #121
• Bump junit from 4.12 to 4.13.1 in /src/it/advanced by @dependabot in #115
• Bump commons-compress from 1.18 to 1.21 in /src/it/advanced by @dependabot in #114
• Update library versions by @goneall in #124 - see SPDX library 1.1.7 release and SPDX Jackson Store version 1.1.7 release for changes

New Contributors

• @knrc made their first contribution in #91

Full Changelog: v0.6.5...v0.7.0

Release 0.6.5 of the SPDX Maven Plugin

What's Changed

• enable Reproducible Builds by @hboutemy in #81
• Use URI instead of URL for document namespace by @goneall in #83
• Use project for remote repositories by @goneall in #85
• Fix dependency issue by @goneall in #86
• Add default file extension by @goneall in #88
• Update SPDX libraries to version 1.1.5 by @goneall in #89

New Contributors

• @hboutemy made their first contribution in #81

Full Changelog: v0.6.4...v0.6.5

Version 0.6.4 of the SPDX Maven Plugin

What's Changed

• Polish documentation by @marcwrobel in #68
• Get dependency package info from Maven Project Builder by @goneall in #72
• Fix unit test potential failures by @goneall in #74
• Update to SPDX Java library versions 1.1.3 by @goneall in #75
• Update source and target java version to 11 by @goneall in #77
• Use the maven-enforcer-plugin to enforce the use of Java 11 by @garydgregory in #78
• Don't fork execution of createSPDX by @garydgregory in #79
• Update SPDX Libraries to version 1.1.4 by @goneall in #80 - See the respective library release notes for details

New Contributors

• @marcwrobel made their first contribution in #68
• @garydgregory made their first contribution in #78

Full Changelog: v0.6.3...v0.6.4

Release 0.6.3 of the SPDX Maven Plugin

What's Changed

• Include transitive dependencies in SBOM output by @goneall in #63
• Implement options for creating external document refs and transitive dependencies by @goneall in #64
• Fix relationship direction and type for optional scope and for test scope by @goneall in #66
• Update SPDX library versions by @goneall in #67 - See the SPDX Java Library release notes for details

Full Changelog: v0.6.2...v0.6.3

Release 0.6.2 of the SPDX Maven Plugin

What's Changed

• Correctly capture the PackageArchiveFile and it's checksums by @goneall in #57
• Fix issue when dependencies have SPDX files by @goneall in #56
• Update POM with more current library dependencies by @goneall in #55
  • See [SPDX Java Library version 1.1.1 release notes](Release 0.6.2 of the SPDX Maven Plugin) for a summary of changes in the library update
  • See SPDX Jackson Store version 1.1.1 release notes for a summary of changes impacting the JSON format of SPDX files
• Change error to warning on bad URLs by @goneall in #59

Full Changelog: v0.6.1...v0.6.2
spdx-maven-plugin-0.6.2.zip

Release 0.6.1 of the SPDX Maven Plugin

What's Changed

• Fix bugs identified by Sonarcloud by @goneall in #52
• Check for empty contributors by @goneall in #54

Full Changelog: v0.6.0...v0.6.1
spdx-maven-plugin-0.6.1.zip

Release 0.6.0 of the SPDX Maven Plugin

What's Changed

• Major upgrade to use the new SPDX Java Library
• Use groupId and artifactId for naming SPDX files by @joschi in #44
• Update github workflow to only run Sonar when key exists by @goneall in #45
• Update plugin to version 2.3 of the SPDX spec by @goneall in #47
• Add support for JSON output by @goneall in #48
• Fix external document refs by @goneall in #49
• default licenseInformationInFile to concludedLicenseInFile by @goneall in #50
• Refactor file type mapping by @goneall in #51

New Contributors

• @joschi made their first contribution in #44

Full Changelog: v0.5.5...v0.6.0

Note: there were for bugs identified in SonarCloud for this release - it is very unlikely these bugs would cause issues for the release. Fixes for the bugs have been updated on the master branch.