mbox series

[0/3] spdx30: Fix two bugs in the source download enrichment

Message ID 20261104112257.866914-1-stondo@gmail.com
Headers show
Series spdx30: Fix two bugs in the source download enrichment | expand

Message

Stefano Tondo Nov. 4, 2026, 11:22 a.m. UTC 
Two fixes for the source download enrichment added in 9f1825e74d
("spdx30: Add Git version and PURL to source downloads"):

- _enrich_source_package() and _generate_git_purl() start with an
  underscore, so bitbake leaves them out of the do_create_spdx
  signature, and SPDX_GIT_PURL_MAPPINGS with them. Changing the
  mappings restored the previous SPDX from sstate.

- gitsm downloads got no version and no PURL, because only fd.type
  "git" was handled.

Patch 1 changes the do_create_spdx signature of every recipe once.

Patch 3 adds one selftest per fix. Each fails on master without its
fix. With the series, all SPDX30Check selftests pass.

Stefano Tondo (3):
  spdx30: Make source download enrichment part of the task signature
  spdx30: Enrich gitsm source downloads like git ones
  oeqa/selftest: Add tests for source download enrichment

 meta/lib/oe/spdx30_tasks.py          | 10 +++---
 meta/lib/oeqa/selftest/cases/spdx.py | 47 ++++++++++++++++++++++++++++
 2 files changed, 52 insertions(+), 5 deletions(-)