python3Packages.spdx-tools: 0.7.1 -> 0.8.0

[tobim]

Description of changes

https://github.com/spdx/tools-python/releases/tag/v0.8.0

Things done

• Built on platform(s)
  • x86_64-linux
  • aarch64-linux
  • x86_64-darwin
  • aarch64-darwin
• For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
• Tested, as applicable:
  • NixOS test(s) (look inside nixos/tests)
  • and/or package tests
  • or, for functions and "core" functionality, tests in lib/tests or pkgs/test
  • made sure NixOS tests are linked to the relevant packages
• Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
• Tested basic functionality of all binary files (usually in ./result/bin/)
• 23.11 Release Notes (or backporting 23.05 Release notes)
  • (Package updates) Added a release notes entry if the change is major or breaking
  • (Module updates) Added a release notes entry if the change is significant
  • (Module addition) Added a release notes entry if adding a new NixOS module
• Fits CONTRIBUTING.md.

[fabaff]

Result of nixpkgs-review pr 248286 run on x86_64-linux 1

6 packages failed to build:

• checkov
• checkov.dist
• python310Packages.scancode-toolkit
• python310Packages.scancode-toolkit.dist
• python311Packages.scancode-toolkit
• python311Packages.scancode-toolkit.dist

4 packages built:

• python310Packages.spdx-tools
• python310Packages.spdx-tools.dist
• python311Packages.spdx-tools
• python311Packages.spdx-tools.dist

[tobim]

scancode-toolkit has an open PR: aboutcode-org/scancode-toolkit#3456.
I didn't find anything for checkov.
Should we just wait?

[fabaff]

checkov is released every often. I guess that it's only a matter of time to get support for spdx-tools >= 0.8.

bridgecrewio/checkov#5428

In a worth-case scenario I will override spdx-tools for checkov.

[fabaff]

checkov has no support for spdx-tool>=0.8.0.