Hi,

I'd like to update the tooling, and I would appreciate it if somebody looks
at PR 60 again.

Gintas

On Sat, 6 Jun 2026 at 07:46, Stefan Bodewig <[email protected]> wrote:

> Hi all
>
> I've has seen some bug fixes and even new features since the 2.5.3
> release and I'd like to create a new release - including SBOMs, I'm on a
> mission :-)
>
> There are a few open PRs for Ivy but they mostly look as if they are
> either outdated or have received comments by Maarten that haven't been
> addressed - or have been declared "not ready" by their authors.
>
> What I still want to do is to get my cyclonedx branch ready and merge
> it. If anything it has taught me how much easier it will be once Ivy
> support is added to the CycloneDX Antlib as manually tracking down the
> components' dependencies recursively is no fun when there are so
> many. But this part is done, what is still missing is creating SBOMs for
> the tarballs[1].
>
> Stefan
>
> [1] which is not as easy as I tought as Ivy heavily relies on zipfileset
> which doesn't really work as one would expect when used outside of the
> zip/tar tasks (prefix and fullpath are dealt with by the tasks, not the
> resoure collection) - I'll likely revert to unpacking the archives to a
> temporary folder so I can hash the contents.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>
>

Reply via email to