Hello Joshua, Unfortunately SPDX 3.x support isn't mature in most of the tooling I know of and you can't import it there (no support in timelines in many cases too). The only way to use YP SBOM there is to do a custom merge script for 2.2 files and then use that.
In my opinion it's too early to drop yet. Kind regards, Marta On Thu, 12 Mar 2026, 16:35 Joshua Watt via lists.openembedded.org, <[email protected]> wrote: > All, > > We are heavily considering dropping the generation of SPDX 2.2 data > from the 6.0 LTS release; compared to SPDX 3, the 2.2 data is pretty > substandard with what it can represent and we don't necessarily want > to pay the maintenance cost of maintaining it for another 4 years. > > If you have tooling that uses SPDX 2.2, please add support for SPDX 3. > > If dropping this support would cause you serious problems, please let > us know. There is the option that SPDX 2.2 could live in it its own > mix-in layer, but I myself won't have time to do this before the LTS > release. > > Thank you, > Joshua Watt > > > >
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#2299): https://lists.openembedded.org/g/openembedded-architecture/message/2299 Mute This Topic: https://lists.openembedded.org/mt/118281203/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-architecture/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
