Re: [OE-core][PATCH v4 0/9] Add SPDX 3 Recipe Information

Antonin Godard
2026-03-03T10:17:57Z

Hi,

On Tue Mar 3, 2026 at 1:43 AM CET, Joshua Watt via lists.openembedded.org wrote:
> Changes the SPDX 3 output to include a "recipe" package that describe
> static information available at parse time (without building). This is
> primarily useful for gathering SPDX 3 VEX information about some or all
> recipes, enabling SPDX 3 to be used in place of cve_check.bbclass and
> vex.bbclass.

Once merged, would it be possible to submit a docs patch to document the new
variables in the variable glossary, and possibly update
documentation/dev-manual/sbom.rst to document this new feature?

Also, looking at the last patch, the CVE information removal seems worthy of a
migration note in documentation/migration-guides/migration-6.0.rst?

Antonin