Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add mostly universal version range spec draft #139

Open
wants to merge 19 commits into
base: master
Choose a base branch
from
Open

Add mostly universal version range spec draft #139

wants to merge 19 commits into from

Commits on Nov 30, 2021

  1. Add mostly universal version range spec draft 

    Originally at nexB/univers#11

Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
    @pombredanne
    pombredanne committed Nov 30, 2021
    Configuration menu
    Copy the full SHA
    69b6770 View commit details
    Browse the repository at this point in the history

  2. Update VERSION-RANGE-SPEC.rst 

    Correct typo and meaning

Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
    @pombredanne
    pombredanne committed Nov 30, 2021
    Configuration menu
    Copy the full SHA
    dceee6c View commit details
    Browse the repository at this point in the history

  3. Clarify NVD CVE 5.0 versionType relationship 

    This is the same concept as a Package URL type.

Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
    @pombredanne
    pombredanne committed Nov 30, 2021
    Configuration menu
    Copy the full SHA
    69b5dd2 View commit details
    Browse the repository at this point in the history

Commits on Dec 2, 2021

  1. Remove leftover ampersands 

    These are no longer used: we now use a coma.

Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
    @pombredanne
    pombredanne committed Dec 2, 2021
    Configuration menu
    Copy the full SHA
    ca1aba6 View commit details
    Browse the repository at this point in the history

Commits on Dec 3, 2021

  1. Do not lowercase versions 

    This may be problem in some cases.
Best is to keep the version as-is even in canonical form.

Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
    @pombredanne
    pombredanne committed Dec 3, 2021
    Configuration menu
    Copy the full SHA
    c146f16 View commit details
    Browse the repository at this point in the history

Commits on Dec 9, 2021

  1. Adopt simpler semantics 

    This new take is based on the proposal from Oliver Chang. The syntax is
simpler and much improved.

Reference: #139 (comment)
Reported-by: Oliver Chang <ochang@google.com>
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
    @pombredanne
    pombredanne committed Dec 9, 2021
    Configuration menu
    Copy the full SHA
    2145b73 View commit details
    Browse the repository at this point in the history

Commits on Dec 10, 2021

  1. Fix minor typos 

    Reported-by: Oliver Chang <ochang@google.com>
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
    @pombredanne
    pombredanne committed Dec 10, 2021
    Configuration menu
    Copy the full SHA
    d4a6961 View commit details
    Browse the repository at this point in the history

Commits on Dec 15, 2021

  1. Revert to use richer set of comparators 

    Revert to use the original richer set of comparators: >,>=,<,<=,!=
The OSV and Why not ...? sections explain why we need this rciher set
of comparators.

Add example section.
Add a section on related efforts.
Add constraint validation section.
Add range containtment procedure pseudo code narrative.
Add constraints deduplication procedure pseudo code narrative.
Fix multiple typos.

Reported-by: Stephen Milner @ashcrow
Reported-by: Patrick Dwyer @coderpatros
Reported-by: Oliver Chang @oliverchang
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
    @pombredanne
    pombredanne committed Dec 15, 2021
    Configuration menu
    Copy the full SHA
    d8402e5 View commit details
    Browse the repository at this point in the history

  2. Re-organize sections in a more natural order 

    Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
    @pombredanne
    pombredanne committed Dec 15, 2021
    Configuration menu
    Copy the full SHA
    c0487ad View commit details
    Browse the repository at this point in the history

  3. Correct the deduplication procedure 

    Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
    @pombredanne
    pombredanne committed Dec 15, 2021
    Configuration menu
    Copy the full SHA
    5430731 View commit details
    Browse the repository at this point in the history

Commits on Dec 18, 2021

  1. Rename dedupe to simplification and make it work 

    The constraints de-duplication is now called simplification.
The pseudo has been cotrrect to actually work when implmented in Python


Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
    @pombredanne
    pombredanne committed Dec 18, 2021
    Configuration menu
    Copy the full SHA
    88fdcac View commit details
    Browse the repository at this point in the history

Commits on Dec 20, 2021

  1. Add section on NVD 5.0 star notation 

    Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
    @pombredanne
    pombredanne committed Dec 20, 2021
    Configuration menu
    Copy the full SHA
    c96df26 View commit details
    Browse the repository at this point in the history

Commits on Dec 21, 2021

  1. Remove spaces before mandating ASCII 

    Also use simplify rather than "normalize"

Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
    @pombredanne
    pombredanne committed Dec 21, 2021
    Configuration menu
    Copy the full SHA
    935c5ab View commit details
    Browse the repository at this point in the history

Commits on Dec 23, 2021

  1. Fix word repetition 

    Reported-by: @tschmidtb51
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>

Co-authored-by: tschmidtb51 <65305130+tschmidtb51@users.noreply.github.com>
    @pombredanne @tschmidtb51
    pombredanne and tschmidtb51 committed Dec 23, 2021
    Configuration menu
    Copy the full SHA
    66875a5 View commit details
    Browse the repository at this point in the history

  2. Fix vers example syntax 

    Reported-by: @tschmidtb51
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>

Co-authored-by: tschmidtb51 <65305130+tschmidtb51@users.noreply.github.com>
    @pombredanne @tschmidtb51
    pombredanne and tschmidtb51 committed Dec 23, 2021
    Configuration menu
    Copy the full SHA
    2328f78 View commit details
    Browse the repository at this point in the history

  3. Clarify that a version is an example 

    Reported-by: @tschmidtb51
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
    @pombredanne
    pombredanne committed Dec 23, 2021
    Configuration menu
    Copy the full SHA
    75b3b5b View commit details
    Browse the repository at this point in the history

  4. Improve quotes and correct meaning 

    Reported-by: @tscmidtb51
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>

Co-authored-by: tschmidtb51 <65305130+tschmidtb51@users.noreply.github.com>
    @pombredanne @tschmidtb51
    pombredanne and tschmidtb51 committed Dec 23, 2021
    Configuration menu
    Copy the full SHA
    013eb68 View commit details
    Browse the repository at this point in the history

Commits on Feb 17, 2022

  1. Use correct license example 

    Reported-by: tschmidtb51 @tschmidtb51
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>

Co-authored-by: tschmidtb51 <65305130+tschmidtb51@users.noreply.github.com>
    @pombredanne @tschmidtb51
    pombredanne and tschmidtb51 committed Feb 17, 2022
    Configuration menu
    Copy the full SHA
    19fa4cb View commit details
    Browse the repository at this point in the history

Commits on Feb 12, 2024

  1. Update VERSION-RANGE-SPEC.rst 

    Add Java implementation reference by @nscuro

Reference: https://github.com/nscuro/versatile
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>

Co-authored-by: Niklas <nscuro@protonmail.com>
    @pombredanne @nscuro
    pombredanne and nscuro committed Feb 12, 2024
    Configuration menu
    Copy the full SHA
    63846ef View commit details
    Browse the repository at this point in the history