fix: declare license-expression as an unconditional depedency

Urist-McGit · Urist-McGit · commit a204d45d0e1a · 2026-01-27T14:17:33.000+01:00
The dependency was previously installed in both the `cdx` and `spdx` extras. It turns out that doing it this way breaks the error message when no SBOM format is installed. As this dependency is always required and pretty lightweight simply always depend on it. Fixes: 12fdab0 ("feat(generate): add license information to SBOMs") Signed-off-by: Christoph Steiger <christoph.steiger@siemens.com>
diff --git a/pyproject.toml b/pyproject.toml
@@ -8,6 +8,7 @@ version = "0.6.1"
 dependencies = [
   "packageurl-python>=0.16.0",
   "python-debian>=0.1.49",
+  "license-expression>=30",
 ]
 requires-python = ">=3.11"
 authors = [
@@ -50,11 +51,9 @@ mindev = [
 ]
 cdx = [
   "cyclonedx-python-lib>=9.0.0",
-  "license-expression>=30",
 ]
 spdx = [
   "spdx-tools>=0.8.3",
-  "license-expression>=30",
 ]
 download = [
     "requests>=2.25.1",

Original file line number	Diff line number	Diff line change
`@@ -8,6 +8,7 @@ version = "0.6.1"`
`8`	`8`	`dependencies = [`
`9`	`9`	`"packageurl-python>=0.16.0",`
`10`	`10`	`"python-debian>=0.1.49",`
	`11`	`+ "license-expression>=30",`
`11`	`12`	`]`
`12`	`13`	`requires-python = ">=3.11"`
`13`	`14`	`authors = [`
`@@ -50,11 +51,9 @@ mindev = [`
`50`	`51`	`]`
`51`	`52`	`cdx = [`
`52`	`53`	`"cyclonedx-python-lib>=9.0.0",`
`53`		`- "license-expression>=30",`
`54`	`54`	`]`
`55`	`55`	`spdx = [`
`56`	`56`	`"spdx-tools>=0.8.3",`
`57`		`- "license-expression>=30",`
`58`	`57`	`]`
`59`	`58`	`download = [`
`60`	`59`	`"requests>=2.25.1",`