Clarification of which version of the SPDX licence expression is used

[rainer-exxcellent]

In the specification is defined that an expression must be a valid SPDX license expression

specification/schema/bom-1.7.schema.json

Line 1566 in bfe1589

"description": "Specifies the details and attributes related to a software license.\nIt must be a valid SPDX license expression, along with additional properties such as license acknowledgment.",

But it is not defined which version of the SPDX license expression is meant. (v2.3, v3.0.1, ...)

Could you clarify this, even though there are only minor differences between the versions?

[jkowalleck]

[...] even though there are only minor differences between the versions?

what are these minor differences?

[rainer-exxcellent]

Version 3.0.1 introduces addition-expressions and makes Case sensitivity mandatory in the ABNF (%s)

[jkowalleck]

for refs, here are the SPDX specs: https://spdx.dev/use/specifications/

• v3.0 - https://spdx.github.io/spdx-spec/v3.0.1/annexes/spdx-license-expressions/
• v2.3 - https://spdx.github.io/spdx-spec/v2.3/SPDX-license-expressions/
• v2.2 - https://spdx.github.io/spdx-spec/v2.2.2/SPDX-license-expressions/
• previous not available for web