3.0 final release

What's Changed since RC-2

• model: Fix several properties to use ObjectProperty instead of DataProperty by @JPEWdev in #654
• Fix rephrasing errors in the License profile and Contributing.md by @TimothyGillespie in #660
• small modication from software to general lifecycle as per Issue Make LifecycleScopedRelationship & LifecycleScopeType neutral to what they are a lifecycle of #664 by @sbarnum in #665
• Bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot in #667
• AI/Dataset: Rename sensitivePersonalInformation to make them unique by @bact in #656
• Add deployed support type by @goneall in #668
• Change isDirectory to fileKind enumeration by @goneall in #666
• model: Core: DateTime: Inherit from xsd:dateTime by @JPEWdev in #661
• AI: Update safetyRiskAssessment property desc to refer to general risk assessment by @bact in #675
• Dataset: Rename Dataset class to DatasetPackage and update properties desc. by @bact in #671
• Update to.md to reflect what min:0 means by @kestewart in #623
• Glossary.md: Sort terms alphabetically (A-Z) by @bact in #680
• Clarify meaning of empty copyrightText string by @swinslow in #688
• New Element Individuals to handle NONE and NOASSERTION scenarios for the 'to' property of Relationships by @sbarnum in #629
• Update autonomyType.md by @kestewart in #681
• Bump actions/setup-python from 5.0.0 to 5.1.0 by @dependabot in #678
• Update AIPackage.md by @rgopikrishnan91 in #692
• AI: Update safetyRiskAssessment description by @bact in #683
• Reference License Expressions annex and cleanup by @swinslow in #687
• Update DatasetPackage.md by @rgopikrishnan91 in #693
• Proposed extension classes to support CDX properties by @goneall in #672
• New IRIs by @zvr in #698
• Update PackageVerificationCode.md by @kestewart in #699
• Update README.md by @kestewart in #700
• Changes to AI profile to accommodate expressing energyConsumption by @rgopikrishnan91 in #697
• Update EpssVulnAssessmentRelationship.md by @VenkatTechnologist in #644
• To address #702 and explicitly state maxCount constraints on properties borrowed from other profiles by @rgopikrishnan91 in #704
• Update URL to final version of docs in ExternalRefType.md by @bact in #708
• Small Security profile corrections by @rnjudge in #709
• Change energyConsumption type to EnergyConsumption by @bact in #706
• Content Identifiers for Software Artifacts by @zvr in #701
• Clarify ExternalIdentifier and ExternalRef by @rnjudge in #710
• Add cwe as ExternalRefType by @rnjudge in #711
• Updated model diagrams for changes 02-15-24 to 04-11-24 by @sbarnum in #703
• AI and Dataset: Sort entries A-Z by @bact in #713
• Change security externalIdentifierType in example by @rnjudge in #716
• Fix-typo-(crystalskyber)-in-diagrams by @sbarnum in #717
• Change gitoid to contentIdentifier in PackageVerificationCode by @goneall in #715
• Fixed type spacing and adding missing Extension prefixes by @sbarnum in #718
• Updates integrity verification docs in Core by @zvr in #609

New Contributors

• @TimothyGillespie made their first contribution in #660
• @dependabot made their first contribution in #667

Full Changelog: 3.0-rc2...3.0

Pre-release version 3.0-rc2

Last change has been applied.

What's Changed

• Update Contributing for review of the release candidate by @goneall in #315
• Update Contributing.md adding Profile Maintainers by @mkdolan in #317
• delete unnecessary external property restriction by @meretp in #318
• Security: Fix markdown and add external property restriction for "to" by @meretp in #329
• Security: change Boolean to xsd:boolean and fix justification type by @armintaenzertng in #314
• fix references to LicenseField by @meretp in #333
• Update Contributing.md by @MordodeMaru in #337
• Add cve & securityOther as ExternalIdentifierType by @rnjudge in #322
• Security: Simplify assessment relationships by @puerco in #338
• Security profile: add markdown files for properties by @meretp in #334
• Meeting with Kate 2022-05-22 by @iamwillbar in #349
• For NamespaceMap should be both fields mandatory by @maxhbr in #326
• Fix cardinality of (primary)Purpose by @goneall in #307
• core: Replace Entity with Agent by @nishakm in #340
• Add definingDocument property by @goneall in #313
• Add json-ld serialization examples by @armintaenzertng in #355
• Update RelationshipType.md to add in AI & Dataset useful relationships by @kestewart in #358
• add machine learning model as a software purpose by @willarmiros in #366
• add list of serialization use cases by @armintaenzertng in #364
• Add security-related ExternalReference types by @tsteenbe in #352
• Add description and summary to packageUrl property by @rnjudge in #378
• Security: Add descriptions and summary to actionStatementTime by @puerco in #371
• Added dataset types vocabulary by @willarmiros in #379
• add summary and description for contentIdentifier property by @jeff-schutt in #381
• Update SoftwarePurpose.md by @kestewart in #382
• Update RelationshipType.md by @kestewart in #383
• Make AnyLicenseInfo inherit from Element by @goneall in #369
• Change purpose references to primaryPurpose by @armintaenzertng in #385
• Automatically generate the Ontospy documentation by @meretp in #344
• Correct name property of LicenseExpression by @goneall in #395
• licensing use cases for serialization by @zvr in #400
• Change SBOMType to SbomType by @davaya in #405
• Consolidate the JSON-LD format by @armintaenzertng in #406
• Mandatory creationInfo by @davaya in #401
• Change nature to ObjectProperty for enums and object range by @goneall in #410
• Remove Payload from logical model by @davaya in #404
• Add several new external references by @tsteenbe in #398
• set maxCount: 1 for specVersion, created and dataLicense by @armintaenzertng in #420
• make specVersion mandatory by @armintaenzertng in #422
• Remove namespaces from the logical model by @goneall in #411
• move DateTime, SemVer and MediaType to Datatypes directory by @armintaenzertng in #424
• Remove redefinition of name property in SpdxDocument by @armintaenzertng in #435
• Restructure licensing profile by @armintaenzertng in #399
• add CreationInfo to all Elements in json-ld examples by @armintaenzertng in #414
• Adds serialization security use cases and improves formatting by @jeff-schutt in #425
• Update MediaType to RFC 6838, add SpdxId by @davaya in #426
• Delete SpdxId by @zvr in #442
• creation info required fields by @davaya in #455
• Change cardinality for attributionText to [0..*] by @goneall in #453
• Change declared and concluded licenses to relationships by @goneall in #448
• Add snippetFromFile property to Snippet class by @goneall in #459
• Move PresenceType to core by @goneall in #450
• Rename ExternalReference to ExternalRef by @goneall in #457
• Update definitions of isFsfLibre and isOsiApprovied values by @goneall in #458
• Add licenseXml property to License and LicenseAddition by @goneall in #451
• Indicate maxCount for Artifact's suppliedBy by @rnjudge in #474
• update Vulnerability.md by @jeff-schutt in #473
• Update suppliedBy.md by @jeff-schutt in #472
• Add customIdToUri Map to LicenseExpression by @goneall in #444
• add documentation on how to parse JSON-LD as pure JSON by @armintaenzertng in #441
• Remove non-ASCII chars by @zvr in #476
• Add licenseListVersion to LicenseExpression by @goneall in #481
• Update Individual values for NONE and NOASSERTION licenses by @goneall in #456
• Change ExternalRef locator to be of type xsd:string by @goneall in #487
• Add missing SPDX2 external reference types by @armintaenzertng in #484
• add clarity to RelationshipCompleteness.md by @jeff-schutt in #496
• Update security model diagram by @jeff-schutt in #497
• Add generated context file and model.jsonld to the uploaded artifacts by @goneall in #502
• Add the model.jsonld and context.json to the github.io pages by @goneall in #504
• Update profile to be a property on collections and specify conformance by @goneall in #447
• update security vector.md to vectorString.md by @jeff-schutt in #513
• add CvssV4VulnAssessmentRelationship.md and CvssSeverityType.md by @jeff-schutt in #501
• update CvssV3VulnAssessmentRelationship.md by @jeff-schutt in #511
• remove severity property from CvssV2VulnAssessmentRelationship.md by @jeff-schutt in #510
• Update Security EPSS Support by @jeff-schutt in #514
• Update README to the current state of generated files by @goneall in #506
• Fixing typos/syntax errors by @zvr in #520
• fix context location in jsonld examples by @maxhbr in #541
• Fix capitalization for CVSS severity values by @rnjudge in #535
• Example of conformance in plain language by @zvr in #524
• Replace describes relationship with rootElement property by @goneall in #508
• Document 'XCollection' serialization specifics by @goneall in #509
• Update ExternalMap and relationships to reference Artifacts by @goneall in #542
• json-ld context is currently invalid, add another check that validates the context for jsonld by @maxhbr in #538
• Rename externalId to externalSpdxId by @goneall in #519
• Add diskImage and filesystemImage SoftwarePurpose by @JPEWdev in #554
• Add missing software purposes for CDX 1.5 compat by @puerco in #555
• Allow ElementCollection to have 0 elements by @JPEWdev in #552
• Clarify RelationshipTypes by @JPEWdev in #548
• Update AIPackage.md to express constraints by @rgopikrishnan91 in #536
• Cle...

Release Candidate 1

The first in a series of releases that will lead to the general availability of SPDX 3.0.