Release 3.0 of the SPDX Specifications

What's Changes since 2.3

Note that 3.0 is a major revision with several breaking changes from the previous released version of the SPDX specification.

See the Diffs from Previous Versions Annex for differences and a guide to upgrading from 2.3 to 3.0.

What's Changed since 3.0-RC2

• Model updates - see the SPDX model repo release notes for details
• Update examples for version 2.3 by @goneall in #782
• fix: fix typo (definined to defined) by @ninoseki in #791
• Update index.md by @jeff-schutt in #789
• Update JSON schema for dash and underscore enums by @goneall in #793
• fix: Correct cardinality of Primary Package Purpose field by @kzantow in #797
• Update examples with correct referenceType for purl by @goneall in #800
• Add documentDescribes to required fields in JSON Schema by @goneall in #796
• Fix package typos by @bee64 in #831
• Add pkg verification code + checksum clarification by @rnjudge in #828
• Fixes external reference page hyperlinks for CPE by @ccsmith117 in #834
• Update reference by @zvr in #837
• chore: deprecate shorthand properties by @kzantow in #841
• feat: allow $schema entry in SPDX 2.3 JSON by @mcombuechen in #865
• New workflow for deploying the v3 spec to the site. by @licquia in #874
• Add back SPDX license expressions to version 3 branch by @goneall in #877
• Update index.md by @kestewart in #880
• Remove license related annexes from SPDX 3 by @goneall in #878
• Remove files no longer used in the 3.0 RC2 version of the spec by @goneall in #883
• Update mkdocs config for model by @goneall in #884
• Update terms-and-definitions.md by @kestewart in #885
• Build and deploy the v3.0 spec on changes. by @licquia in #888
• Add 3.0rc2 Ontology by @zvr in #887
• Sync the model diagrams with the model repo by @goneall in #886
• allow and, or and with operators by @xsuchy in #892
• Generate JSON Schema using shacl2code by @JPEWdev in #893
• Attempt to fix CI failures related to PyYAML. by @licquia in #897
• Add JSON-LD example by @JPEWdev in #895
• Add 3.0 changes to diffs annex by @goneall in #898
• Update for Community Specification 1.0 license by @swinslow in #900
• github actions: Update to latest spec parser by @JPEWdev in #901
• Add serialization info by @zvr in #909
• Change "Software" to "System" in SPDX by @zvr in #908
• Update migration info for ContentIdentifier by @goneall in #910
• Adds Annex for the Lite profile by @NorioKobota in #907
• Add getting started annex by @JPEWdev in #906
• Port 2.x Annexes to 3.0 spec by @rnjudge in #904
• Update mkdocs.yml by @rnjudge in #913
• Organize annexes by @rnjudge in #915
• Update index.md by @kestewart in #911
• Update model images for release by @goneall in #917

New Contributors

• @ninoseki made their first contribution in #791
• @jeff-schutt made their first contribution in #789
• @bee64 made their first contribution in #831
• @ccsmith117 made their first contribution in #834
• @mcombuechen made their first contribution in #865
• @licquia made their first contribution in #874
• @xsuchy made their first contribution in #892
• @JPEWdev made their first contribution in #893

Full Changelog: v2.3...v3.0