Alex Goodman eec86cf88d fix: escape % in ArchivePath segments ...

`:` was escaped as `%3A`, but `%` itself wasn't, so an entry named `a:b.jar` and one named `a%3Ab.jar` got the same `ArchivePath`. Their contents then collide in `FileMetadata` / `FileDigests` (last writer wins) and share artifact IDs.

`%` is now escaped as `%25` before `:`, which makes the encoding injective. The encoding is documented on `Coordinates.ArchivePath` and in the schema.

Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>

2026-09-24 11:23:54 -04:00

..

cyclonedx

fix: support CycloneDX 1.7 (#4967)

2026-06-11 09:40:42 -04:00

json

fix: escape % in ArchivePath segments

2026-09-24 11:23:54 -04:00

spdx-json

add linter for type assertion checks (#1469)

2023-01-17 14:00:03 -05:00