ppkarwasz opened a new pull request, #12:
URL: https://github.com/apache/logging-site/pull/12

   This PR removes URL references related to the abandoned [BOM Exchange API 
proposal](https://github.com/CycloneDX/transparency-exchange-api/tree/bomexchangeapi),
 which was never accepted. Since our SBOMs have only ever referenced `vdr.xml` 
and never relied on the BOM Exchange API links, this does **not** constitute a 
breaking change.
   
   The PR contains two commits:
   
   * In f9e0b6925408359961b4e35e2b480c7a66705723 `vdr.xml` matches the final 
content of the released VDR version 1.
   * In 1e41d5b1a8b1a24ae8185a853fe3e0f3b65c2cc3 `vdr.xml` matches the final 
content of the released VDR version 2.
   
   This allows us to tag the repository accordingly. I suggest adopting a tag 
scheme such as `vdr-<version>` or `vdr/<version>` for clarity and consistency.
   
   > [!NOTE]  
   > VDR version 2 was issued by mistake and does **not** introduce any data 
changes (only comment updates).  
   > I propose to keep it for the following reasons:  
   > - Some (admittedly theoretical, given current VDR adoption) users may have 
already recorded `2` as the latest version. Re-issuing a different `2` would 
prevent their data from updating correctly.  
   > - Version numbers are cheap: we won’t be running out of integers anytime 
soon.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscr...@logging.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to