fix: declare license-expression as an unconditional depedency

Urist-McGit · fmoessbauer · commit 860161b31ca6 · 2026-01-27T14:54:06.000+01:00
The dependency was previously installed in both the `cdx` and `spdx` extras. It turns out that doing it this way breaks the error message when no SBOM format is installed. As this dependency is always required and pretty lightweight simply always depend on it. Fixes: 12fdab0 ("feat(generate): add license information to SBOMs") Signed-off-by: Christoph Steiger <christoph.steiger@siemens.com>
diff --git a/pyproject.toml b/pyproject.toml
@@ -8,6 +8,7 @@ version = "0.6.1"
 dependencies = [
   "packageurl-python>=0.16.0",
   "python-debian>=0.1.49",
+  "license-expression>=30",
 ]
 requires-python = ">=3.11"
 authors = [
@@ -50,11 +51,9 @@ mindev = [
 ]
 cdx = [
   "cyclonedx-python-lib>=9.0.0",
-  "license-expression>=30",
 ]
 spdx = [
   "spdx-tools>=0.8.3",
-  "license-expression>=30",
 ]
 download = [
     "requests>=2.25.1",

Original file line number	Diff line number	Diff line change
`@@ -8,6 +8,7 @@ version = "0.6.1"`
`8`	`8`	`dependencies = [`
`9`	`9`	`"packageurl-python>=0.16.0",`
`10`	`10`	`"python-debian>=0.1.49",`
	`11`	`+ "license-expression>=30",`
`11`	`12`	`]`
`12`	`13`	`requires-python = ">=3.11"`
`13`	`14`	`authors = [`
`@@ -50,11 +51,9 @@ mindev = [`
`50`	`51`	`]`
`51`	`52`	`cdx = [`
`52`	`53`	`"cyclonedx-python-lib>=9.0.0",`
`53`		`- "license-expression>=30",`
`54`	`54`	`]`
`55`	`55`	`spdx = [`
`56`	`56`	`"spdx-tools>=0.8.3",`
`57`		`- "license-expression>=30",`
`58`	`57`	`]`
`59`	`58`	`download = [`
`60`	`59`	`"requests>=2.25.1",`