Hi all I've has seen some bug fixes and even new features since the 2.5.3 release and I'd like to create a new release - including SBOMs, I'm on a mission :-)
There are a few open PRs for Ivy but they mostly look as if they are either outdated or have received comments by Maarten that haven't been addressed - or have been declared "not ready" by their authors. What I still want to do is to get my cyclonedx branch ready and merge it. If anything it has taught me how much easier it will be once Ivy support is added to the CycloneDX Antlib as manually tracking down the components' dependencies recursively is no fun when there are so many. But this part is done, what is still missing is creating SBOMs for the tarballs[1]. Stefan [1] which is not as easy as I tought as Ivy heavily relies on zipfileset which doesn't really work as one would expect when used outside of the zip/tar tasks (prefix and fullpath are dealt with by the tasks, not the resoure collection) - I'll likely revert to unpacking the archives to a temporary folder so I can hash the contents. --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
