staging/pepe2k/scripts/package-metadata.pl, branch v23.05.2

build: add CycloneDX SBOM JSON support

2023-11-02T14:44:47Z

CycloneDX is an open source standard developed by the OWASP foundation. It supports a wide range of development ecosystems, a comprehensive set of use cases, and focuses on automation, ease of adoption, and progressive enhancement of SBOMs (Software Bill Of Materials) throughout build pipelines. So lets add support for CycloneDX SBOM for packages and images manifests. Signed-off-by: Petr Štetiar (cherry picked from commit d604a07225c5c82b942cd3374cc113ad676a2519)

package-metadata: add CPE information to JSON package manifests

2023-11-02T14:44:45Z

Common Platform Enumeration (CPE) is a structured naming scheme for information technology systems, software, and packages. In order for the information to be processed further, it should also be available in JSON package manifests. Signed-off-by: Petr Štetiar (cherry picked from commit 8562c65ff8aae3899cdb190319709500b7651492)

scripts: package-metadata add pkgmanifestjson call

2021-09-24T07:57:22Z

The new `pkgmanifestjson` call prints all package manifest of a feed in JSON format. This function can be used to print an overview of packages information used for downstream tooling. The script is entirely based on Petrs work on dependency visualisation. Signed-off-by: Paul Spooren

build: drop ABI version from metadata

2021-02-14T18:41:52Z

Preparation for supporting dynamic ABI versions that depend on the runtime configuration. Read the suffix from the staging dir pkginfo version files. Signed-off-by: Felix Fietkau

metadata: handle ABI version rebuild tracking for transient dependencies

2019-06-21T10:03:43Z

Extend the packageauxvars database to keep a list of possible package dependencies for each provider, then utilize this information in buildroot to resolve the ABI version dependencies of dependent packages up to five levels deep. This should properly trigger rebuilds for packages indirectly depending on other packages whose ABI_VERSION changed. Signed-off-by: Jo-Philipp Wich

metadata: ensure one dependency provider to be y if a package is y

2019-06-20T12:18:25Z

When there are multiple packages providing a meta-package, it is possible to to create a config where a package is selected as =y, but all of its dependency providers are just selected as =m. This is due to the selection statement being just config PACKAGE_foo select PACKAGE_bar if !PACKAGE_baz which is already fulfilled by PACKAGE_bar=m. Fix this by properly comparing the selection states: config PACKAGE_foo select PACKAGE_bar if PACKAGE_baz [slightly reword commit message] Signed-off-by: Jo-Philipp Wich

build: add support to && in DEPENDS

2019-05-31T09:21:22Z

Adds support to && operand in DEPENDS. Also, fixes generation of || dependencies by scripts/package-metadata.pl. The precedence order from higher to lower is && then ||. Use of parentheses to change the order is not supported. As before, they are silently ignored. Use them for readability only. Signed-off-by: Eneas U de Queiroz Signed-off-by: Christian Lamparter [DMARC removal]

build: extend ABI_VERSION suffixing to provides

2019-01-24T09:39:29Z

When a library package specifies additional provides, e.g. libncurses which provides libncursesw, we should also append the abi version suffix to each provide, since there may be more than one package providing the virtual library. Signed-off-by: Jo-Philipp Wich

build: expose ABI version in .packageauxvars

2019-01-19T13:32:01Z

Subdequent commits need this information to resolve the ABI version when computing binary ipk dependencies. Signed-off-by: Jo-Philipp Wich

build: rename .packagesubdirs to .packageauxvars

2019-01-19T13:31:56Z

Subsequent commits will put more auxiliary information into this file, such as the per-package ABI version, so rename the metadata script subcommand and file names accordingly. Signed-off-by: Jo-Philipp Wich