JSON validation fails for valid timestamps

[lfrancke]

Over in Rust land @jadamcrain opened an issue that our JSON files are invalid.

cyclonedx-cli fails on timestamps like 2022-12-21T23:54:20.218381200Z but it works if we chop off two digits at the end 2022-12-21T23:54:20.2183812Z

According to the JSON Schema timestamps are date-time fields which are RFC 3339 timestamps. The RFC doesn't specify a maximum number of fractional digits so both timestamps should be correct.

I'm not a .NET expert so take everything past this with a huge grain of salt:

• cyclonedx-cli uses this library
• This library uses JsonSchema.Net in version 3.3.2 as the dependency to do the actual validation
• In version 4.0.1 of the library (current is 5.3.0) it added support for higher-precision timestamps

As such I suggest to update the dependency to a newer version.
I can submit a trivial PR to update the version number but as I have zero knowledge about .NET tools that might not be enough and it might not build.

[andreas-hilti]

I think it will need some adjustments, based on the dependabot PR:
#264

[lfrancke]

Yeah, unfortunately, I don't know enough about .NET to be helpful in creating a PR for this :(

[andreas-hilti]

I have created a PR to update JsonSchema.Net:
#272

[andreas-hilti]

It validated successfully when a timestamp "2022-12-21T23:54:20.218381200Z" was used.

[mtsfoni]

Lars, it's finally done!

• close

[lfrancke]

Thank you!