From 7c3258183a14339cd8744a769738a9affb124ed2 Mon Sep 17 00:00:00 2001 From: Fabio Bonelli Date: Wed, 26 Aug 2026 10:38:22 +0200 Subject: [PATCH] doc(spec): deprecate the dependsOn/open key The SBOM or the package manager manifests already declare the open source dependencies, so the key holds a partial and stale copy. Installation requirements go in the documentation and in the deployment scripts. --- docs/standard/example/publiccode.yml | 8 -------- docs/standard/schema.core.rst | 9 +++++++-- 2 files changed, 7 insertions(+), 10 deletions(-) diff --git a/docs/standard/example/publiccode.yml b/docs/standard/example/publiccode.yml index bf92764..4db62d9 100644 --- a/docs/standard/example/publiccode.yml +++ b/docs/standard/example/publiccode.yml @@ -95,14 +95,6 @@ localisation: - de dependsOn: - open: - - name: MySQL - versionMin: "1.1" - versionMax: "1.3" - optional: true - - name: PostgreSQL - version: "3.2" - optional: true proprietary: - name: Oracle versionMin: "11.4" diff --git a/docs/standard/schema.core.rst b/docs/standard/schema.core.rst index 565a3c8..f76a0f7 100644 --- a/docs/standard/schema.core.rst +++ b/docs/standard/schema.core.rst @@ -757,8 +757,8 @@ system-level dependencies that must be installed and maintained separately. For instance, a database is a good example of such dependencies. -Key ``dependsOn/open`` -'''''''''''''''''''''' +Key ``dependsOn/open`` (*deprecated*) +''''''''''''''''''''''''''''''''''''' - Type: array of ``dependency`` (see below) - Presence: optional @@ -766,6 +766,11 @@ Key ``dependsOn/open`` This key contains a list of runtime dependencies that are distributed under an open-source license. +This key is deprecated. Open source runtime dependencies are already +declared in the SBOM or in the package manager manifests, and what +needs to be installed belongs in the documentation and in the +deployment scripts. + Key ``dependsOn/proprietary`` '''''''''''''''''''''''''''''