gitlab-license_finder 6.14.2.1

Sign up to get free protection for your applications and to get access to all the features.
Files changed (180) hide show
  1. checksums.yaml +7 -0
  2. data/.force-build +0 -0
  3. data/.gitignore +13 -0
  4. data/.rspec +1 -0
  5. data/.rubocop.yml +70 -0
  6. data/CHANGELOG.md +981 -0
  7. data/CONTRIBUTING.md +121 -0
  8. data/Dockerfile +249 -0
  9. data/Gemfile +2 -0
  10. data/LICENSE +22 -0
  11. data/README.md +555 -0
  12. data/Rakefile +77 -0
  13. data/TODO.md +12 -0
  14. data/VERSION +1 -0
  15. data/appveyor.yml +21 -0
  16. data/bin/license_finder +6 -0
  17. data/bin/license_finder_pip.py +43 -0
  18. data/ci/pipelines/pull-request.yml.erb +141 -0
  19. data/ci/pipelines/release.yml.erb +200 -0
  20. data/ci/scripts/containerize-tests.sh +14 -0
  21. data/ci/scripts/pushscript.sh +32 -0
  22. data/ci/scripts/run-rubocop.sh +15 -0
  23. data/ci/scripts/run-tests.sh +24 -0
  24. data/ci/scripts/test.ps1 +81 -0
  25. data/ci/scripts/updateChangelog.sh +84 -0
  26. data/ci/tasks/build-and-push-gem.yml +10 -0
  27. data/ci/tasks/build-windows.yml +6 -0
  28. data/ci/tasks/build.yml +16 -0
  29. data/ci/tasks/rubocop.yml +15 -0
  30. data/ci/tasks/run-tests.yml +10 -0
  31. data/ci/tasks/update-changelog.yml +18 -0
  32. data/dlf +12 -0
  33. data/examples/Gemfile +4 -0
  34. data/examples/custom_erb_template.rb +24 -0
  35. data/examples/extract_license_data.rb +63 -0
  36. data/examples/sample_template.erb +7 -0
  37. data/lib/license_finder/cli/approvals.rb +28 -0
  38. data/lib/license_finder/cli/base.rb +107 -0
  39. data/lib/license_finder/cli/dependencies.rb +44 -0
  40. data/lib/license_finder/cli/ignored_dependencies.rb +32 -0
  41. data/lib/license_finder/cli/ignored_groups.rb +32 -0
  42. data/lib/license_finder/cli/inherited_decisions.rb +50 -0
  43. data/lib/license_finder/cli/licenses.rb +26 -0
  44. data/lib/license_finder/cli/main.rb +221 -0
  45. data/lib/license_finder/cli/makes_decisions.rb +38 -0
  46. data/lib/license_finder/cli/patched_thor.rb +33 -0
  47. data/lib/license_finder/cli/permitted_licenses.rb +32 -0
  48. data/lib/license_finder/cli/project_name.rb +32 -0
  49. data/lib/license_finder/cli/restricted_licenses.rb +32 -0
  50. data/lib/license_finder/cli.rb +20 -0
  51. data/lib/license_finder/configuration.rb +186 -0
  52. data/lib/license_finder/core.rb +118 -0
  53. data/lib/license_finder/decision_applier.rb +70 -0
  54. data/lib/license_finder/decisions.rb +312 -0
  55. data/lib/license_finder/decisions_factory.rb +13 -0
  56. data/lib/license_finder/diff.rb +51 -0
  57. data/lib/license_finder/license/any_matcher.rb +15 -0
  58. data/lib/license_finder/license/definitions.rb +366 -0
  59. data/lib/license_finder/license/header_matcher.rb +17 -0
  60. data/lib/license_finder/license/matcher.rb +24 -0
  61. data/lib/license_finder/license/none_matcher.rb +11 -0
  62. data/lib/license_finder/license/template.rb +19 -0
  63. data/lib/license_finder/license/templates/0BSD.txt +10 -0
  64. data/lib/license_finder/license/templates/Apache1_1.txt +16 -0
  65. data/lib/license_finder/license/templates/Apache2.txt +172 -0
  66. data/lib/license_finder/license/templates/BSD.txt +24 -0
  67. data/lib/license_finder/license/templates/CC01.txt +30 -0
  68. data/lib/license_finder/license/templates/CDDL1.txt +131 -0
  69. data/lib/license_finder/license/templates/EPL1.txt +86 -0
  70. data/lib/license_finder/license/templates/GPLv2.txt +339 -0
  71. data/lib/license_finder/license/templates/GPLv3.txt +674 -0
  72. data/lib/license_finder/license/templates/ISC.txt +2 -0
  73. data/lib/license_finder/license/templates/LGPL.txt +165 -0
  74. data/lib/license_finder/license/templates/LGPL2_1.txt +169 -0
  75. data/lib/license_finder/license/templates/MIT.txt +9 -0
  76. data/lib/license_finder/license/templates/MPL1_1.txt +469 -0
  77. data/lib/license_finder/license/templates/MPL2.txt +373 -0
  78. data/lib/license_finder/license/templates/NewBSD.txt +21 -0
  79. data/lib/license_finder/license/templates/OFL.txt +91 -0
  80. data/lib/license_finder/license/templates/Python.txt +47 -0
  81. data/lib/license_finder/license/templates/Ruby.txt +52 -0
  82. data/lib/license_finder/license/templates/SimplifiedBSD.txt +19 -0
  83. data/lib/license_finder/license/templates/WTFPL.txt +14 -0
  84. data/lib/license_finder/license/templates/Zlib.txt +17 -0
  85. data/lib/license_finder/license/text.rb +45 -0
  86. data/lib/license_finder/license.rb +117 -0
  87. data/lib/license_finder/license_aggregator.rb +59 -0
  88. data/lib/license_finder/logger.rb +69 -0
  89. data/lib/license_finder/package.rb +202 -0
  90. data/lib/license_finder/package_delta.rb +61 -0
  91. data/lib/license_finder/package_manager.rb +181 -0
  92. data/lib/license_finder/package_managers/bower.rb +37 -0
  93. data/lib/license_finder/package_managers/bundler.rb +110 -0
  94. data/lib/license_finder/package_managers/cargo.rb +38 -0
  95. data/lib/license_finder/package_managers/carthage.rb +68 -0
  96. data/lib/license_finder/package_managers/cocoa_pods.rb +61 -0
  97. data/lib/license_finder/package_managers/composer.rb +63 -0
  98. data/lib/license_finder/package_managers/conan.rb +28 -0
  99. data/lib/license_finder/package_managers/conda.rb +131 -0
  100. data/lib/license_finder/package_managers/dep.rb +43 -0
  101. data/lib/license_finder/package_managers/dotnet.rb +83 -0
  102. data/lib/license_finder/package_managers/erlangmk.rb +50 -0
  103. data/lib/license_finder/package_managers/glide.rb +36 -0
  104. data/lib/license_finder/package_managers/go_15vendorexperiment.rb +87 -0
  105. data/lib/license_finder/package_managers/go_dep.rb +80 -0
  106. data/lib/license_finder/package_managers/go_modules.rb +93 -0
  107. data/lib/license_finder/package_managers/go_workspace.rb +116 -0
  108. data/lib/license_finder/package_managers/govendor.rb +73 -0
  109. data/lib/license_finder/package_managers/gradle.rb +99 -0
  110. data/lib/license_finder/package_managers/gvt.rb +69 -0
  111. data/lib/license_finder/package_managers/maven.rb +65 -0
  112. data/lib/license_finder/package_managers/mix.rb +131 -0
  113. data/lib/license_finder/package_managers/npm.rb +57 -0
  114. data/lib/license_finder/package_managers/nuget.rb +154 -0
  115. data/lib/license_finder/package_managers/pip.rb +70 -0
  116. data/lib/license_finder/package_managers/pipenv.rb +63 -0
  117. data/lib/license_finder/package_managers/rebar.rb +65 -0
  118. data/lib/license_finder/package_managers/sbt.rb +50 -0
  119. data/lib/license_finder/package_managers/spm.rb +93 -0
  120. data/lib/license_finder/package_managers/trash.rb +43 -0
  121. data/lib/license_finder/package_managers/yarn.rb +107 -0
  122. data/lib/license_finder/package_utils/activation.rb +40 -0
  123. data/lib/license_finder/package_utils/conan_info_parser.rb +77 -0
  124. data/lib/license_finder/package_utils/gradle_dependency_finder.rb +15 -0
  125. data/lib/license_finder/package_utils/license_files.rb +41 -0
  126. data/lib/license_finder/package_utils/licensing.rb +39 -0
  127. data/lib/license_finder/package_utils/maven_dependency_finder.rb +15 -0
  128. data/lib/license_finder/package_utils/notice_files.rb +40 -0
  129. data/lib/license_finder/package_utils/possible_license_file.rb +27 -0
  130. data/lib/license_finder/package_utils/pypi.rb +41 -0
  131. data/lib/license_finder/package_utils/sbt_dependency_finder.rb +15 -0
  132. data/lib/license_finder/packages/bower_package.rb +42 -0
  133. data/lib/license_finder/packages/bundler_package.rb +33 -0
  134. data/lib/license_finder/packages/cargo_package.rb +28 -0
  135. data/lib/license_finder/packages/carthage_package.rb +18 -0
  136. data/lib/license_finder/packages/cocoa_pods_package.rb +22 -0
  137. data/lib/license_finder/packages/composer_package.rb +13 -0
  138. data/lib/license_finder/packages/conan_package.rb +23 -0
  139. data/lib/license_finder/packages/conda_package.rb +74 -0
  140. data/lib/license_finder/packages/erlangmk_package.rb +114 -0
  141. data/lib/license_finder/packages/go_package.rb +32 -0
  142. data/lib/license_finder/packages/gradle_package.rb +30 -0
  143. data/lib/license_finder/packages/manual_package.rb +27 -0
  144. data/lib/license_finder/packages/maven_package.rb +27 -0
  145. data/lib/license_finder/packages/merged_package.rb +44 -0
  146. data/lib/license_finder/packages/mix_package.rb +13 -0
  147. data/lib/license_finder/packages/npm_package.rb +171 -0
  148. data/lib/license_finder/packages/nuget_package.rb +13 -0
  149. data/lib/license_finder/packages/pip_package.rb +50 -0
  150. data/lib/license_finder/packages/rebar_package.rb +13 -0
  151. data/lib/license_finder/packages/sbt_package.rb +22 -0
  152. data/lib/license_finder/packages/spm_package.rb +18 -0
  153. data/lib/license_finder/packages/yarn_package.rb +13 -0
  154. data/lib/license_finder/platform.rb +15 -0
  155. data/lib/license_finder/project_finder.rb +62 -0
  156. data/lib/license_finder/report.rb +33 -0
  157. data/lib/license_finder/reports/csv_report.rb +99 -0
  158. data/lib/license_finder/reports/diff_report.rb +29 -0
  159. data/lib/license_finder/reports/erb_report.rb +58 -0
  160. data/lib/license_finder/reports/html_report.rb +13 -0
  161. data/lib/license_finder/reports/json_report.rb +30 -0
  162. data/lib/license_finder/reports/junit_report.rb +19 -0
  163. data/lib/license_finder/reports/markdown_report.rb +9 -0
  164. data/lib/license_finder/reports/merged_report.rb +16 -0
  165. data/lib/license_finder/reports/templates/bootstrap.css +9 -0
  166. data/lib/license_finder/reports/templates/html_report.erb +113 -0
  167. data/lib/license_finder/reports/templates/junit_report.erb +41 -0
  168. data/lib/license_finder/reports/templates/markdown_report.erb +49 -0
  169. data/lib/license_finder/reports/templates/xml_report.erb +19 -0
  170. data/lib/license_finder/reports/text_report.rb +12 -0
  171. data/lib/license_finder/reports/xml_report.rb +19 -0
  172. data/lib/license_finder/scanner.rb +83 -0
  173. data/lib/license_finder/shared_helpers/cmd.rb +13 -0
  174. data/lib/license_finder/shared_helpers/common_path.rb +29 -0
  175. data/lib/license_finder/version.rb +6 -0
  176. data/lib/license_finder.rb +14 -0
  177. data/license_finder.gemspec +72 -0
  178. data/release/instructions.md +8 -0
  179. data/swift-all-keys.asc +240 -0
  180. metadata +544 -0
data/CHANGELOG.md ADDED
@@ -0,0 +1,981 @@
1
+ # [6.14.2] / 2021-10-27
2
+
3
+ ### Added
4
+ * Zlib License - [0f004b52](https://github.com/pivotal/LicenseFinder/commit/0f004b528d436b4d53db8bd373ede0594c07d9e8) - blooper05
5
+
6
+ # [6.14.1] / 2021-06-25
7
+
8
+ First two commit were supposed to show up in v6.14.0, but GPG bug prevented a correct build. Therefore, a follow up patch build was made to include the GPG fix.
9
+
10
+ ### Changed
11
+ * Upgrade Docker image to use Ubuntu Bionic [#178471230] [1c12588c](https://github.com/pivotal/LicenseFinder/commit/1c12588cceecb8b7350d090c85b519b24bcc6682)
12
+ * Update the default timezone to GMT [#178471230] - [9fcab84](https://github.com/pivotal/LicenseFinder/commit/9fcab84605cda81e7f276d3c567d14409e371333)
13
+ * Use local copy of Swift puglic GPG keys [#178674224] - [4db4b3e](https://github.com/pivotal/LicenseFinder/commit/4db4b3e5980ca52019549d74da574a2342a7846e)
14
+
15
+ ### Added
16
+ * Added --npm_options option to customize npm behavior. [b8457a62](https://github.com/pivotal/LicenseFinder/commit/b8457a62e7b531294934364d1e5f72cd78a7686a) - Alexander-Malott
17
+
18
+ ### Security
19
+ * Fix issue where commands could be injected running on Cocoapods projects. [b0a61a2d](https://github.com/pivotal/LicenseFinder/commit/b0a61a2d833921c714cc39cdda8ba80af3f33d04)
20
+
21
+ Thanks to Joern SchneeweiszStaff Security Engineer, Security Research | GitLab for raising the issue
22
+
23
+
24
+ # [6.13.0] / 2021-04-27
25
+
26
+ ### Fixed
27
+ * Ignore packages with nil modules - [4eca0ec1](https://github.com/pivotal/LicenseFinder/commit/4eca0ec15dc6266afa48b74b3742278351246eb8)
28
+
29
+ # [6.12.2] / 2021-04-14
30
+
31
+ ### Changed
32
+ * exit when go mod list command fails - [fcf1f707](https://github.com/pivotal/LicenseFinder/commit/fcf1f7076dee2ff730e3c8b608381aca22de0e92) - Jeff Jun
33
+
34
+ # [6.12.1] / 2021-04-12
35
+
36
+ # [6.12.0] / 2021-03-05
37
+
38
+ ### Added
39
+ * Provide homepage information for GoDep and Go15Vendor package managers - [bae1bda9](https://github.com/pivotal/LicenseFinder/commit/bae1bda9d76cb922405d7efca9c67e2583db70d4) - Jeff Jun
40
+
41
+ # [6.11.0] / 2021-03-04
42
+
43
+ ### Added
44
+ * Add homepage for go_modules package manager - [912394a8](https://github.com/pivotal/LicenseFinder/commit/912394a8a6ab4c31b6918a21da9f37d5b368ed6b)
45
+
46
+ # [6.10.1] / 2021-01-08
47
+
48
+ # [6.10.0] / 2020-11-27
49
+
50
+ # [6.9.0] / 2020-10-05
51
+
52
+ ### Changed
53
+ * to recognize permitted licenses with AND in the name [#173997648] - [eab14250](https://github.com/pivotal/LicenseFinder/commit/eab14250d188153f8c2b0b5c0191fec19bcddf55) - Raymond Lee
54
+
55
+ # [6.8.2] / 2020-09-08
56
+
57
+ # [6.8.1] / 2020-08-13
58
+
59
+ # [6.8.0] / 2020-08-06
60
+
61
+ # [6.7.0] / 2020-07-23
62
+
63
+ # [6.6.2] / 2020-07-09
64
+
65
+ ### Added
66
+ * support for rebar3 - [b20e7444](https://github.com/pivotal/LicenseFinder/commit/b20e7444c147d8dbfa46eb4e8e549e03be751e02) - Jeff Jun
67
+ * Support for Go modules projects outside of the current working directory - [56b3bec6](https://github.com/pivotal/LicenseFinder/commit/56b3bec632b3884ce4cad538742b4a13c55fd7c5)
68
+
69
+ ### Changed
70
+ * Change Go modules to only report imported packages (as with other Go package managers) - [34361fda](https://github.com/pivotal/LicenseFinder/commit/34361fdab2dc3f197f7aec6408175018dee3b453) and [dffae4ab](https://github.com/pivotal/LicenseFinder/commit/dffae4ab95e34115b6a54bf681fc0966a8611f01)
71
+ * Detect Go modules based on `go.mod` (instead of `go.sum`) - [667f6be7](https://github.com/pivotal/LicenseFinder/commit/667f6be716504a53ccc2824daae08af085566546)
72
+
73
+ ### Fixed
74
+ * handle empty case for mix dependencies [#173637843] - [fc34b281](https://github.com/pivotal/LicenseFinder/commit/fc34b2813925a709addde675849e199b05fc4a23) - Jeff Jun
75
+
76
+ ### Removed
77
+ * support for rebar2 [#173637980] - [b20e7444](https://github.com/pivotal/LicenseFinder/commit/b20e7444c147d8dbfa46eb4e8e549e03be751e02) - Jeff Jun
78
+ * Removed the unnecessary prepare command for Go modules - [284cc5c8](https://github.com/pivotal/LicenseFinder/commit/284cc5c821270a6e56275e32bac836a3e451f46b)
79
+
80
+ # [6.6.1] / 2020-06-30
81
+
82
+ ### Changed
83
+ * Handle multiple solution files for nuget [#173021333] - [040d9559](https://github.com/pivotal/LicenseFinder/commit/040d9559a4bda07490255cc34c1a7891081bc511)
84
+ * matches license names from pypi api call with known licenses to avoid returning misformatted licenses [#173421573] - [6b96d746](https://github.com/pivotal/LicenseFinder/commit/6b96d74600034abcacee6ed2b322aa3abfaa0992) - Jeff Jun
85
+ * Update Nuget Package Manager prepare command - [6ac07066](https://github.com/pivotal/LicenseFinder/commit/6ac070668955bc034da1647658440ce5bb0d9bd2) - Jason Smith
86
+
87
+ # [6.6.0] / 2020-06-22
88
+
89
+ # [6.5.0] / 2020-06-01
90
+
91
+ ### Added
92
+ * Support legacy nuget projects [#172950097] - [0cccbcf9](https://github.com/pivotal/LicenseFinder/commit/0cccbcf9aa92f4297ef0174242bdb19da1babc65)
93
+
94
+ ### Changed
95
+ * Upgrade to golang 1.14.3. Update dotnet-sdk to 3.1 - [0969e98f](https://github.com/pivotal/LicenseFinder/commit/0969e98fde4a82f8931601baa4dd96dc01300a14)
96
+
97
+ # [6.4.0] / 2020-05-22
98
+
99
+ Big shout out to @forelabs for introducing many new features and improvements for this release. Thanks again!!
100
+
101
+ ### Added
102
+ * Introducing new inherited_decisions command - [3453feb](https://github.com/pivotal/LicenseFinder/commit/3453feb659a6c3c6e5aa444e3755ddd5d32f3664) - Sven Dunemann
103
+ * Decision Applier: Merge manual and system packages - [c690532](https://github.com/pivotal/LicenseFinder/commit/c690532ec8addab16bef4edd390f05ceb353435f) - Sven Dunemann
104
+ * Introduce package_url to packages - [18972f7](https://github.com/pivotal/LicenseFinder/commit/18972f7b3a04340e1b7bb560780130b68696b8a2) - Sven Dunemann
105
+ * Add --write-headers option for csv exports - [18e01f8](https://github.com/pivotal/LicenseFinder/commit/18e01f8728a9dc525d7567292cc1e2f390ec854d) - Sven Dunemann
106
+ * Yarn: Add authors & install_path - [08a0f67](https://github.com/pivotal/LicenseFinder/commit/08a0f67837a218231217767561f2282c1b3a890a) - Sven Dunemann
107
+ * install path for nuget dependencies [#172251374] - [ad73c946](https://github.com/pivotal/LicenseFinder/commit/ad73c946113846f8f548adfc73542aebb3763175) - Jeff Jun
108
+ * new Rubocop cops - [c4cc6b8b](https://github.com/pivotal/LicenseFinder/commit/c4cc6b8b13273db17b65cecaf24c9053e4989ea1) - Jeff Jun
109
+
110
+ ### Fixed
111
+ * Separate lines in license text with LF when exported to JSON - [baddb976](https://github.com/pivotal/LicenseFinder/commit/baddb976e7a8683c5cc320eddc8c2712dfb16c15) - Robert Huitl
112
+
113
+ ### Changed
114
+ * Go15VendorExperiment: Detect go only if vendor includes go files - [0f8e609](https://github.com/pivotal/LicenseFinder/commit/0f8e609f0921937c6187deccd80e4bc4b7d67ee4) - Sven Dunemann
115
+ * Bump PHP version to 7.4 - [cbe45c5](https://github.com/pivotal/LicenseFinder/commit/cbe45c5cdb3ec200ea215086a3b3eb879e83222a) - Yivan
116
+ * Significantly improve the license text matching file to be more dynamic - [acf5705](https://github.com/pivotal/LicenseFinder/commit/acf570573b4a2414d9c43212dea5d4ecb157319e)
117
+ * Update Ruby version to 2.7.1 [#172295831] - [475e2948](https://github.com/pivotal/LicenseFinder/commit/475e2948ec1ad859aee59e77aa9ce2a51e1a5029)
118
+
119
+ # [6.3.0] / 2020-05-06
120
+
121
+ ### Added
122
+ * OFL License - [d475bbb1](https://github.com/pivotal/LicenseFinder/commit/d475bbb1380e217f154f262caaa73c12f5b9792b) - Sven Dunemann
123
+ * WTFPL License - [ec629170](https://github.com/pivotal/LicenseFinder/commit/ec6291702c28789a33478041dbf6524d603c12ff) - Sven Dunemann
124
+
125
+ * Find the install path for sbt, cargo and composer [#171649609] - [0d525cbf](https://github.com/pivotal/LicenseFinder/commit/0d525cbf5208db5a977f2f3d922d07b5ea6a8b16)
126
+
127
+ ### Changed
128
+ * Bump PHP version to 7.3 - [1c3c3271](https://github.com/pivotal/LicenseFinder/commit/1c3c3271b977a6c8d24e4159a6b8098a51086522)
129
+ * Remove +compatible in Go package versions [#171754392] - [5cba5801](https://github.com/pivotal/LicenseFinder/commit/5cba5801f4f276482f01bfeea46fde0dbbcce7b1)
130
+
131
+ ### Fixed
132
+ * Fixed Maven Package manager Groups check - [5058d90](https://github.com/pivotal/LicenseFinder/commit/5058d90246a25ca15c72e0eed8e19ebbf7e39998) - Ravi Soni
133
+ * GoModules: fix compute with vendor mod - [067eb19](https://github.com/pivotal/LicenseFinder/commit/067eb1916ce024039631bdbd4114ababa6c02c3a) - forelabs
134
+ * Do not set Bundle path. Bundler will figure it out. - [6319a7a](https://github.com/pivotal/LicenseFinder/commit/6319a7a281bd9cc997c08c903674ab51fcc6545e) - mvz
135
+
136
+ # [6.2.0] / 2020-04-07
137
+
138
+ ### Fixed
139
+ * Break dependency of specs on released license_finder gem - [ef69fa00](https://github.com/pivotal/LicenseFinder/commit/ef69fa00deb7a8f8ebd74312afa9f130be2d9fda) - Matijs van Zuijlen
140
+ * Replace toml parser with tomlrb - [8b9b34b4](https://github.com/pivotal/LicenseFinder/commit/8b9b34b48d5bdadc679c0d072117b092d080fb81) - Matijs van Zuijlen
141
+
142
+ ### Changed
143
+ * Run glide install in folder containing glide.lock - [cec3ff47](https://github.com/pivotal/LicenseFinder/commit/cec3ff4759f1c06df2cd0c39ac8004fcd156a6e6) - Jeff Jun
144
+ * specify path for bundle install [#168042947] - [431355dc](https://github.com/pivotal/LicenseFinder/commit/431355dc1d0172c65444d2f4bcb5b4416fc52af7)
145
+
146
+ # [6.1.2] / 2020-03-16
147
+
148
+ # [6.1.0] / 2020-02-21
149
+
150
+ ### Fixed
151
+ * Testing dsl now correctly creates gem project - [6158d767](https://github.com/pivotal/LicenseFinder/commit/6158d76758f4232f3efd652729a83aa632a67dee) - Jeff Jun
152
+
153
+ ### Changed
154
+ * Upgrade golang version to 1.13.3 - [51ecbcbc](https://github.com/pivotal/LicenseFinder/commit/51ecbcbc7992366c1baed2e8b805a7f820f70160)
155
+ * Uses correct package management command for pip based on options that are passed in - [3f4034ab](https://github.com/pivotal/LicenseFinder/commit/3f4034ab3479da23088174ad8cf56828b3cda9ad)
156
+
157
+ # [6.0.0] / 2020-01-22
158
+
159
+ ### Added
160
+ * License Finder now recognizes pip requirement markers - [99fbc184](https://github.com/pivotal/LicenseFinder/commit/99fbc18463ef45f920ad506a72dc0b3a93d0f5bf) - Jason Smith
161
+ * Add ruby 2.7.0 and update to latest patch levels - [65efe96](https://github.com/pivotal/LicenseFinder/commit/65efe96aeef600a398f1465c01ed28b51bda456a) - mokhan
162
+ * Add support for Pipfile.lock - [566fb39c](https://github.com/pivotal/LicenseFinder/commit/566fb39c4077fb5271707a94894998a585cde8dd) - mokhan
163
+
164
+ ### Fixed
165
+ * Bundler ignored groups failure - [bf2c03e3](https://github.com/pivotal/LicenseFinder/commit/bf2c03e375e91e8418967a593362313487f2f0d0)
166
+ * No longer crashes when python package requirement is missing - [80e4b360](https://github.com/pivotal/LicenseFinder/commit/80e4b360b95de126e7dc139c25de56c948a01f1e) - Jason Smith
167
+ * Longest common paths returning incorrect single directory [#169276334] - [f1d5423b](https://github.com/pivotal/LicenseFinder/commit/f1d5423b04f892d1d1e0595993c9bebb0a7c1b6d)
168
+ * python 2 projects using incorrect CLI command - [5655f60e](https://github.com/pivotal/LicenseFinder/commit/5655f60e671dc4c247bb05138ed35b05cda9cdc7)
169
+
170
+ ### Changed
171
+ * Bump jdk version to 13 - [74c9aca6](https://github.com/pivotal/LicenseFinder/commit/74c9aca6358c9dd9262790edbba2e42e84b58bd9) - Debbie Chen
172
+ * Bump sbt version to 1.3.3 with java 12 - [d825599a](https://github.com/pivotal/LicenseFinder/commit/d825599a9b1ac12d874eda66c17bc877bb9af555) - Debbie Chen
173
+ * Bump to openjdk 11 - [499f8ab3](https://github.com/pivotal/LicenseFinder/commit/499f8ab3af7cd8ca37e429f2ed78323ad796d123) - Debbie Chen
174
+ * Bump to openjdk 12 - [09c781a7](https://github.com/pivotal/LicenseFinder/commit/09c781a70787d9461722d5d03d1bc624b644311a) - Debbie Chen
175
+ * Bundler prepare commands with now exclude dependencies in the ignored groups [#169611326] - [e58b2870](https://github.com/pivotal/LicenseFinder/commit/e58b2870b64d2c88be7027b152a423fdb921baca)
176
+ * Change version to be required for dependency add and updated cli options [#168705017] - [b10383d3](https://github.com/pivotal/LicenseFinder/commit/b10383d3d1990b6ad0d608044511352f13924be3) - Debbie Chen
177
+ * Ensure composer always installs the packages - [70b5e7a](https://github.com/pivotal/LicenseFinder/commit/70b5e7a42943c85bbd1d2825b2ffe94eec89020f) - kaystrobach
178
+
179
+ * **BREAKING:** Replaced whitelist/blacklist terminology with permitted_licenses/restricted_licenses - [a40b22f](https://github.com/pivotal/LicenseFinder/commit/a40b22fda11b3a0efbb3c0a021381534bc998dd9) - grantbdev
180
+
181
+ ### Deprecated
182
+ * Remove support for jruby 9.1* [#169590215] - [81e75f8c](https://github.com/pivotal/LicenseFinder/commit/81e75f8cd61ca35e30562352dee2579b1b6c991e)
183
+
184
+ # [5.11.1] / 2019-11-05
185
+
186
+ ### Fixed
187
+ * Crash when gradle runs with project roots recursive [#169465210] - [08e0df85](https://github.com/pivotal/LicenseFinder/commit/08e0df857c7fa4273eb6e2e4a7c01bb46550a91f)
188
+
189
+ ### Changed
190
+ * Bump docker ruby version to 2.6.5 [#169539985] - [26b6d4b2](https://github.com/pivotal/LicenseFinder/commit/26b6d4b25133fa50dbf92265a20bed2350305245)
191
+ * Gradle version updated to 5.6.4 - [9e32228f](https://github.com/pivotal/LicenseFinder/commit/9e32228fae3dacae38e7827946a0e0412a20ccb0)
192
+
193
+ # [5.11.0] / 2019-10-24
194
+
195
+ ### Fixed
196
+ * Fix crash in LF for null deps in godep - [aec335e5](https://github.com/pivotal/LicenseFinder/commit/aec335e574b65c1e9927787e88fb95f1296cdd26)
197
+
198
+ ### Changed
199
+ * Exclude Gradle subprojects from project roots - [4efea4c8](https://github.com/pivotal/LicenseFinder/commit/4efea4c8892f48c24ed6ec46a4be85cb06dc6672) - Jason Smith
200
+ * project_roots will skip maven subprojects - [61b88513](https://github.com/pivotal/LicenseFinder/commit/61b885135bd02cf2b5c6be4bc1fba85020d42f6a) - Peter Tran
201
+
202
+ # [5.10.2] / 2019-09-03
203
+
204
+ ### Added
205
+ * Added bzr app to image - [8fd43f01](https://github.com/pivotal/LicenseFinder/commit/8fd43f01a5de575596c92bcfc38a5e9ba7bf6b3d)
206
+
207
+ # [5.10.1] / 2019-08-28
208
+
209
+ ### Fixed
210
+ * Mix bailing early when elixir is not installed - [13b120e](https://github.com/pivotal/LicenseFinder/commit/13b120ed7c121243be987f449cc29d00ec6e6450)
211
+
212
+ # [5.10.0] / 2019-08-26
213
+
214
+ ### Changed
215
+ * Dotnet projects only detected if csproj is at root level - [b9f810d](https://github.com/pivotal/LicenseFinder/commit/b9f810d96f92f458fcfe4855307fdddfb7f1082b)
216
+ * sha for composer-setup.php - [64b782a](https://github.com/pivotal/LicenseFinder/commit/64b782a137a287980a317fcb48f595b6e93f85d0) - Debbie Chen
217
+
218
+ # [5.9.2] / 2019-07-02
219
+
220
+ ### Changed
221
+ * Bump ruby version to 2.6.3 - [dcdcc1c](https://github.com/pivotal/LicenseFinder/commit/dcdcc1c3e4fd29ec4d180a54fb67b2aa07e932de)
222
+
223
+ # [5.9.1] / 2019-06-10
224
+
225
+ # [5.9.0] / 2019-06-10
226
+
227
+ ### Added
228
+ * composer PHP support - [c671309](https://github.com/pivotal/LicenseFinder/commit/c671309d89c54a4dfac3ac40aab1bf70e3c3f6a2)
229
+ * composer support - [13ecaab](https://github.com/pivotal/LicenseFinder/commit/13ecaab7ee55c95ca973b74950fb10c3daea0784) - Zachary Knight
230
+ * --homepage option to `dependencies add` - [b7f7ef8](https://github.com/pivotal/LicenseFinder/commit/b7f7ef8b81d193b5535cb3c48b9244ecd446057f)
231
+
232
+ ### Fixed
233
+ * 'dotnet restore' failing - [dee1045](https://github.com/pivotal/LicenseFinder/commit/dee104517e0cf8ce769405910f46607a66017f40)
234
+ * Reporting extra paths for gvt projects - [ba7d1bd](https://github.com/pivotal/LicenseFinder/commit/ba7d1bdd90282e7d127c3ddaf68b51f98b402000)
235
+
236
+ ### Changed
237
+ * Fix license definition tests - [15b524f](https://github.com/pivotal/LicenseFinder/commit/15b524fa52f63e04a82d160a7fc3d49c288d01e8)
238
+
239
+ # [5.8.0] / 2019-05-22
240
+
241
+ ### Added
242
+ * Trash Package Manager - [3a3d854](https://github.com/pivotal/LicenseFinder/commit/3a3d8541c4ea64607df6b120111aff324f93778d)
243
+
244
+ ### Fixed
245
+ * Prefer to use `origin` over `path` for govendor - [31c6041](https://github.com/pivotal/LicenseFinder/commit/31c6041926a27b61c35c05c6433a87d0af78c1e5)
246
+
247
+ # [5.7.1] / 2019-03-08
248
+
249
+ # [5.7.0] / 2019-03-01
250
+
251
+ ### Added
252
+ * Ruby 2.6.1 support - [8d60ed1](https://github.com/pivotal/LicenseFinder/commit/8d60ed13f99b830cc1352900f90e2b298105f518)
253
+
254
+ ### Changed
255
+ * Conan version is locked to 1.11.2 to avoid breaking changes - [72b766a](https://github.com/pivotal/LicenseFinder/commit/72b766a948be5b0f8eade75e716796f50ea9ebf3)
256
+
257
+ # [5.6.2] / 2019-01-28
258
+
259
+ # [5.6.1] / 2019-01-25
260
+
261
+ ### Changed
262
+ * Updated GOLANG to 1.11.4 in Docker image [#163424880] - [67e5e1f](https://github.com/pivotal/LicenseFinder/commit/67e5e1ffef19acf3a63cac55c5aa3626fb4c7491)
263
+
264
+ # [5.6.0] / 2018-12-19
265
+
266
+ ### Added
267
+ * Add support for JSON reports [#161595251] - [5a1f735](https://github.com/pivotal/LicenseFinder/commit/5a1f73515c83cbf8ce17275c4c9d1af43d0db772)
268
+ * Removed the removal of nested projects - [6e1941c](https://github.com/pivotal/LicenseFinder/commit/6e1941c4d06676988ff8bdad81bd83a4bb5c17e9)
269
+ * Show verbose errors from prepare commands [#161462746] - [2b14299](https://github.com/pivotal/LicenseFinder/commit/2b142995d06572f772104c39437d0b64f9569f79)
270
+
271
+ * Support to find gradle.kts files [#161629958] - [f7cb587](https://github.com/pivotal/LicenseFinder/commit/f7cb587787f4de282c34afe66c0a2d0c1c72a84f)
272
+
273
+ ### Fixed
274
+ * Go modules reports incorrect install paths - [9ab5aa9](https://github.com/pivotal/LicenseFinder/commit/9ab5aa9aadc9432c5359ed2af2cb32e28fac277a)
275
+ Revert "* Go modules reports incorrect install paths" - [fcead98](https://github.com/pivotal/LicenseFinder/commit/fcead980ae2cc24f7193a1f38944f4df60a8c3fc)
276
+
277
+ * Fix install_paths for go mod now accurately report dependency installation directories [#161943322 finish] - [ea28c06](https://github.com/pivotal/LicenseFinder/commit/ea28c06898964043f5849b64b4043bde81a2d7cd)
278
+ * Handle log file names created with whitespaces and slashes - [7d6f9da](https://github.com/pivotal/LicenseFinder/commit/7d6f9da5006e1e7bbb71f594188ab87ee76ddfbb)
279
+
280
+ ### Changed
281
+ * Updated go-lang to 1.11.2 in the Docker - [d720f9c](https://github.com/pivotal/LicenseFinder/commit/d720f9c16f82044b5024213bec41b8e9f34cf306)
282
+
283
+ # [5.5.2] / 2018-10-17
284
+
285
+ ### Fixed
286
+ * go mod prepare command being incorrect - [480c465](https://github.com/pivotal/LicenseFinder/commit/480c4654cde7342456318ed4e28b6cebd4a09e4b)
287
+
288
+ # [5.5.1] / 2018-10-16
289
+
290
+ ### Added
291
+ * Documentation for asterisks being added to license names [#158960018] - [154b727](https://github.com/pivotal/LicenseFinder/commit/154b7273b1c18e64afa48799b50588251f99e982)
292
+ * Document the prepare option on the command line - [c283a38](https://github.com/pivotal/LicenseFinder/commit/c283a38d9e8b9feefc5afe32f1df55b357a33333)
293
+
294
+ ### Fixed
295
+ * Go modules are forced to be enabled on go mod package managers - [cf9123d](https://github.com/pivotal/LicenseFinder/commit/cf9123d654b98cdef872d3b21631e69960abe365)
296
+
297
+ # [5.5.0] / 2018-10-11
298
+
299
+ ### Added
300
+ * Go Module support - [8a20210](https://github.com/pivotal/LicenseFinder/commit/8a202109e942316434978befd33854aa985dd872)
301
+
302
+ ### Changed
303
+ * Lowering gemspec ruby requirement to support jruby 9.1.x - [279bd25](https://github.com/pivotal/LicenseFinder/commit/279bd25bbebbd3851dcc0062c3c47f7c7063dad8)
304
+ * Bumps rubocop to 0.59.2 - [291d335](https://github.com/pivotal/LicenseFinder/commit/291d3358921dbb47bc612b77656353da07e71a2b)
305
+
306
+ ### Fixed
307
+ * 'dlf' with no-args should get a login shell - [2b019fb](https://github.com/pivotal/LicenseFinder/commit/2b019fb1126ec2fcb9cafa092cad6d27b875e5f9) - Kim Dykeman
308
+ * Do not include godep dependencies with common paths - [23e951f](https://github.com/pivotal/LicenseFinder/commit/23e951fae56a43abde52ecefa73e8a5ff73bb688)
309
+ * Remove uneeded bundle install in dlf [#160758436] - [f44c73f](https://github.com/pivotal/LicenseFinder/commit/f44c73f6c06838a29ff9a75932e08fb1445557ca)
310
+
311
+ * dlf gemfile directory issues [#160758436 finish] - [2db3972](https://github.com/pivotal/LicenseFinder/commit/2db397261654bca89771e85984b4ae6819274e55)
312
+ Revert "* dlf gemfile directory issues [#160758436 finish]" - [6b17ddc](https://github.com/pivotal/LicenseFinder/commit/6b17ddc4202518ffd167c8d38a2045a36eb00144)
313
+
314
+ # [5.4.1] / 2018-09-18
315
+
316
+ ### Fixed
317
+ * Extra dependencies showing up for some go projects [#160438065] - [dfb1367](https://github.com/pivotal/LicenseFinder/commit/dfb136724721843c1196e74a6b4c762538af62ba)
318
+ * remove workspace-aggregator as a yarn dependency [#159612717 finish] - [4e0afd0](https://github.com/pivotal/LicenseFinder/commit/4e0afd0ba79623f5bb4c055d42a76ba77ce1c785)
319
+
320
+ # [5.4.0] / 2018-08-20
321
+
322
+ ### Added
323
+ * NuGet + mono installation to Dockerfile
324
+ * Add An all caps version of the 'LICENCE' spelling as a candidate file
325
+
326
+ ### Changed
327
+ * Upgrades Dockerfile base to Xenial
328
+
329
+ # [5.3.0] / 2018-06-05
330
+
331
+ ### Added
332
+ * Experimental support for Rust dependencies with Cargo - [2ef3129](https://github.com/pivotal/LicenseFinder/commit/2ef31290f7abf51db5b7173302d1e535508bbd7a)
333
+ * Add project roots command to list paths to scan - [b7a22ea](https://github.com/pivotal/LicenseFinder/commit/b7a22eacfac0e1b9334998de606df69ec3156f77)
334
+
335
+ ### Removed
336
+ * Remove HTTParty dependency - [c52d014](https://github.com/pivotal/LicenseFinder/commit/c52d014df1ca9cd3838d03c60daa6fad954c5579)
337
+
338
+ # [5.2.3] / 2018-05-14
339
+
340
+ # [5.2.1] / 2018-05-14
341
+
342
+ ### Changed
343
+ * Updated go-lang to 1.10.2 in the Docker * Updated Maven to 3.5.3 in the Docker - [1decf6a](https://github.com/pivotal/LicenseFinder/commit/1decf6ad27c9edf96b4f5cccd9a7ca0955fed9f2) - Mark Fioravanti
344
+
345
+ # [5.2.0] / 2018-05-09
346
+
347
+ ### Fixed
348
+ * Support for pip 10.0.1 - [286f679](https://github.com/pivotal/LicenseFinder/commit/286f6790dc71c97c0e93ecdfe0c6fddad75165cc)
349
+
350
+ # [5.1.1] / 2018-05-08
351
+
352
+ ### Added
353
+ * CC License detection
354
+
355
+ ### Fixed
356
+ * Yarn package manager now handles non-ASCII characters
357
+ * in_umbrella: true dependencies for Mix
358
+ * Pivotal Repo Renamed to pivotal
359
+
360
+ # [5.1.0] / 2018-04-02
361
+
362
+ ### Added
363
+ * Support for Ruby 2.5.1 - [9c82a84](https://github.com/pivotal/LicenseFinder/commit/9c82a84a3cff0765a45fa28dc2b05ab32880fb00)
364
+ * Support for Scala build Tool (sbt ) - [2115ddf](https://github.com/pivotal/LicenseFinder/commit/2115ddfe9481d17e6b1d0ac63d6ae1c6143f370c) - Bradford D. Boyle
365
+ * Condense gvt paths with identical shas into their common path - [9e1071d](https://github.com/pivotal/LicenseFinder/commit/9e1071d3c92405a8605727ad1164d6581dc50533)
366
+
367
+ ### Fixed
368
+ * Added back the pip prepare commands [#156376451 finish] - [fdd63fb](https://github.com/pivotal/LicenseFinder/commit/fdd63fb38332230e0cce0ee1b47aa5ccd0eebc36)
369
+ * Govendor not consolidating common paths from the same SHA - [bdd23c9](https://github.com/pivotal/LicenseFinder/commit/bdd23c94ae6ff09a2466c8875e554de60db6603c)
370
+
371
+ ### Deprecated
372
+ * Support for Ruby 2.1
373
+ * Support for Ruby 2.2
374
+ * Support for jruby - [9c82a84](https://github.com/pivotal/LicenseFinder/commit/9c82a84a3cff0765a45fa28dc2b05ab32880fb00)
375
+
376
+ # [5.0.3] / 2018-02-13
377
+
378
+ ### Changed
379
+ * Add the -vendor-only flag to dep-ensure calls - [e305bd1](https://github.com/pivotal/LicenseFinder/commit/e305bd1d5b2d9653f828c3940b59a12903904699)
380
+ * Update detected paths for Nuget - [3fe8995](https://github.com/pivotal/LicenseFinder/commit/3fe89955d82c3467628abbd2ca9ba159bfeb7df6)
381
+
382
+ # [5.0.2] / 2018-02-06
383
+
384
+ ### Fixed
385
+ * Add conditional production flag to npm - [533f9b8](https://github.com/pivotal/LicenseFinder/commit/533f9b8fda250655f3613444da49fdce60215237)
386
+ * conan install & info commands - [322e64c](https://github.com/pivotal/LicenseFinder/commit/322e64c402f4e45d97c6f3bf67c3ffdaabbb359f)
387
+ * Duplicate approvals in decisions file - [a8e6141](https://github.com/pivotal/LicenseFinder/commit/a8e6141cd7ac7ed2aa10b35c55954a48bacf3523)
388
+ * log path issues - [9f1bae1](https://github.com/pivotal/LicenseFinder/commit/9f1bae12c88771229e0a919876f4de6bcad31677)
389
+
390
+ * Fix yarn not working with --project_path option - [c6ed08d](https://github.com/pivotal/LicenseFinder/commit/c6ed08dd8342dec9fcc3e6377f88d5ef01600928)
391
+
392
+ # [5.0.0] / 2018-01-15
393
+
394
+ ### Added
395
+ * NPM prepare - [e7a0d30](https://github.com/pivotal/LicenseFinder/commit/e7a0d30cb77e5503b5a934b26dbd3dc272dc5605)
396
+ * Specify log directory for prepare - [b9a5991](https://github.com/pivotal/LicenseFinder/commit/b9a599171f3fda2affa9381d998e2158a2bf7fac)
397
+
398
+ * Added prepare step for elixir projects - [38b08ea](https://github.com/pivotal/LicenseFinder/commit/38b08eae23b6b0c2bbaa3aea7845ab6a8d9b028b)
399
+
400
+ ### Fixed
401
+ * Action_items resolves decisions file path - [c2a92ab](https://github.com/pivotal/LicenseFinder/commit/c2a92ab62203efb890dfeb1798d377c8d835feb6)
402
+
403
+ * Bower prepare step - [bb11d7f](https://github.com/pivotal/LicenseFinder/commit/bb11d7f07cc5e436381f01245a46033af6bb2d3b)
404
+
405
+ ### Changed
406
+ * Package Manager will now log if prepare step fails. Instead of erroring out - [54da71e](https://github.com/pivotal/LicenseFinder/commit/54da71e98f14cd199c39dfd7b762030fcac60ccb)
407
+
408
+ # [4.0.2] / 2017-11-16
409
+
410
+ ### Fixed
411
+
412
+ * Fixed --quiet not being available on the report task
413
+ * Fixed --recursive not being available on the action_items task
414
+
415
+ # [4.0.1] / 2017-11-14
416
+
417
+ ### Fixed
418
+
419
+ * Add missing toml dependency to gemspec
420
+
421
+ # [4.0.0] / 2017-11-10
422
+
423
+ ### Changed
424
+
425
+ * CLI output has been altered to be clear about active states and installed states.
426
+ * option `--subprojects`have been renamed to `--aggregate_paths` in order to be clear about its functionality
427
+
428
+ ### Fixed
429
+
430
+ * Fixed issue where dangling symbolic link would cause License Finder to crash and not continue. Instead, License Finder will now warn about the issue and continue.
431
+
432
+ # [3.1.0] / 2017-11-10
433
+
434
+ ### Added
435
+
436
+ * Added support for [Carthage](https://github.com/Carthage/Carthage)
437
+ * Added support for [gvt](https://github.com/FiloSottile/gvt)
438
+ * Added support for [yarn](https://yarnpkg.com/en/)
439
+ * Added support for [glide](https://github.com/Masterminds/glide)
440
+ * Added support for [GoVendor](https://github.com/kardianos/govendor)
441
+ * Added support for [Dep](https://github.com/golang/dep)
442
+ * Added support for [Conan](https://conan.io/)
443
+ * Added `--prepare` option
444
+ * `--prepare`/`-p` is an option which can now be passed to the `action_items` or `report` task of `license_finder`
445
+ * `prepare` will indicate to License Finder that it should attempt to prepare the project before running in a License scan.
446
+
447
+ ### Changed
448
+
449
+ * Upgrade `Gradle` in Dockerfile
450
+ * Clean up some CLI interaction and documentation
451
+
452
+ ### Fixed
453
+
454
+ * `build-essential` was added back into the Dockerfile after accidentally being removed
455
+ * Ignore leading prefixes such as 'The' when looking for licenses
456
+
457
+ # [3.0.4] / 2017-09-14
458
+
459
+ ### Added
460
+ * Added concourse pipeline file for Docker image process (#335, #337)
461
+ * Add status checks to pull requests
462
+ * Allow Custom Pip Requirements File Path (#328, thanks @sam-10e)
463
+
464
+ ### Fixed
465
+ * Fixed NPM stack too deep issue (#327, #329)
466
+
467
+ # [3.0.3] / Skipped because of accidentally yanking gem
468
+
469
+ # [3.0.2] / 2017-07-27:
470
+
471
+ ### Added
472
+
473
+ * Add CI status checks to pull requests (#321)
474
+
475
+ ### Fixed
476
+
477
+ * Support NPM packages providing a string for the licenses key (#317)
478
+ * Use different env-var to indicate ruby version for tests (#303)
479
+ * Resolve NPM circular dependencies (#306, #307, #311, #313, #314, #319, #322)
480
+
481
+ # [3.0.1] / 2017-07-12:
482
+
483
+ ### Added
484
+
485
+ * Add --maven-options to allow options for maven scans (#305, thanks @jgielstra!)
486
+
487
+ ### Fixed:
488
+
489
+ * Restore the original GOPATH after modifying it (#287, thanks @sschuberth!)
490
+ * LF doesn't recognize .NET projects using 'packages' directory (#290, #292, thanks @bspeck!)
491
+ * Use glob for finding acknowledgements path for CocoaPods (#177, #288, thanks @aditya87!)
492
+ * Fix some failing tests on Windows (#294, thanks @sschuberth!)
493
+ * Add warning message if no dependencies are recognized (#293, thanks @bspeck!)
494
+ * Switch to YAJL for parsing the json output from npm using a tmp file rather than an in-memory string (#301, #304)
495
+ * Fix dockerfile by explicitly using rvm stable (#303)
496
+ * Report multiple versions of the same NPM dependency (#310)
497
+
498
+ # [3.0.0] / 2016-03-02
499
+
500
+ ### Added
501
+
502
+ * Changed dependencies to be unique based on name _and_ version (#241)
503
+ * Enable '--columns' option with text reports (#244, thanks @raimon49!)
504
+ * Flag maven-include-groups adds group to maven depenency information (#219, #258, thanks @dgodd!)
505
+ * Package managers determine their package management command (#250, Thanks @sschuberth!)
506
+ * Support --ignored_groups for maven
507
+ * Support `homepage` column for godeps dependencies, and dependencies from go workspaces using `.envrc`
508
+ * Support `license_links` column for csv option (#281, Thanks @lbalceda!)
509
+ * Added a Dockerfile for [licensefinder/license_finder](https://hub.docker.com/r/licensefinder/license_finder/)
510
+ * Switched from Travis to Concourse
511
+
512
+ ### Fixed
513
+
514
+ * Gradle works in CI containers where TERM is not set (revert and fix of c15bdb7, which broke older versions of gradle)
515
+ * Check for the correct Ruby Bundler command: `bundle` (#233. Thanks, @raimon49!)
516
+ * Uses settings.gradle to determine the build file name (#248)
517
+ * Fix detecting the Gradle wrapper if not scanning the current directory (#238, Thanks @sschuberth!)
518
+ * Use maven wrapper if available on maven projects
519
+ * Check golang package lists against standard packages instead of excluding short package paths (#243)
520
+ * Update the project_sha method to return the sha of the dependency, not the parent project
521
+ * Change Maven wrapper to call mvn.cmd and fall back on mvn.bat (#263, Thanks @sschuberth!)
522
+ * Allow bower to run as root
523
+ * Fix packaging errors scanning pip based projects
524
+ * Add JSON lib attribute to handle deeply nested JSON (#269. Thanks, @antongurov!)
525
+ * Use the fully qualified name of the license-maven-plugin (#284)
526
+
527
+ # 2.1.2 / 2016-06-10
528
+
529
+ Bugfixes:
530
+
531
+ * NuGet limits its recursive search for .nupkg packages to the `vendor` subdirectory. (#228)
532
+
533
+
534
+ # 2.1.1 / 2016-06-09
535
+
536
+ Features:
537
+
538
+ * GoWorkspace now detects some non-standard package names with only two path parts. (#226)
539
+
540
+ Bugfixes:
541
+
542
+ * NuGet now appropriately returns a Pathname from #package_path (previously was a String) (#227)
543
+ * NuGet now correctly chooses a directory with vendored .nupkg packages
544
+
545
+
546
+ # 2.1.0 / 2016-04-01
547
+
548
+ * Features
549
+ * support a `groups` in reports (#210) (Thanks, Jon Wolski!)
550
+ * GoVendor and GoWorkspace define a package management tool, so they won't try to run if you don't have `go` installed
551
+ * PackageManagers are not activated if the underlying package management tool isn't installed
552
+ * detect GO15VENDOREXPERIMENT as evidence of a go workspace project
553
+ * provide path-to-dependency in recursive mode (#193)
554
+ * dedup godep dependencies (#196)
555
+ * add support for MPL2 detection
556
+ * detect .envrc in a parent folder (go workspaces) (#199)
557
+ * miscellaneous nuget support improvements (#200, #201, #202)
558
+ * miscellaneous go support improvements (#203, #204)
559
+ * add support for Golang 1.5 vendoring convention (#207)
560
+ * return the package manager that detected the dependency (#206)
561
+ * Add support for including maven/gradle GroupIds with `--gradle-include-groups`
562
+ * Godep dependencies can display the full commit SHA with `--go-full-version`
563
+ * specific versions of a dependency can be approved (#183, #185). (Thanks, @ipsi!)
564
+ * improved "go workspace" support by looking at git submodules. (Thanks, @jvshahid and @aminjam!)
565
+ * added an "install path" field to the report output. (Thanks, @jvshahid and @aminjam!)
566
+ * Licenses can be blacklisted. Dependencies which only have licenses in the blacklist will not be approved, even if someone tries.
567
+ * Initial support for the Nuget package manager for .NET projects
568
+ * Experimental support for `godep` projects
569
+ * Experimental support for "golang workspace" projects (with .envrc)
570
+ * Improved support for multi-module `gradle` projects
571
+ * Gradle 2.x support (experimental)
572
+ * Experimental support for "composite" projects (multiple git submodules)
573
+ * Experimental support for "license diffs" between directories
574
+
575
+ * Bugfixes
576
+ * `rubyzip` is now correctly a runtime dependency
577
+ * deep npm dependency trees no longer result in some packages having no metadata (#211)
578
+ * columns fixed in "recursive mode" (#191)
579
+ * gradle's use of termcaps avoided (#194)
580
+
581
+
582
+ # 2.0.4 / 2015-04-16
583
+
584
+ * Features
585
+
586
+ * Allow project path to be set in a command line option (Thanks, @robertclancy!)
587
+
588
+
589
+ # 2.0.3 / 2015-03-18
590
+
591
+ * Bugfixes
592
+
593
+ * Ignoring subdirectories of a LICENSE directory. (#143) (Thanks, @pmeskers and @yuki24!)
594
+
595
+
596
+ # 2.0.2 / 2015-03-14
597
+
598
+ * Features
599
+
600
+ * Show requires/required-by relationships for pip projects
601
+ * Expose homepage in CSV reports
602
+ * Support GPLv3
603
+
604
+ * Bugfixes
605
+
606
+ * license_finder works with Python 3; #140
607
+ * For pip projects, limit output to the distributions mentioned in
608
+ requirements.txt, or their dependencies, instead of all installed
609
+ distributions, which may include distributions from other projects. #119
610
+
611
+
612
+ # 2.0.1 / 2015-03-02
613
+
614
+ * Features
615
+
616
+ * Support for rebar projects
617
+
618
+
619
+ # 2.0.0 / 2015-03-02
620
+
621
+ * Features
622
+
623
+ * Stores every decision that has been made about a project's dependencies,
624
+ even if a decision was later reverted. These decisions are kept in an
625
+ append-only YAML file which can be considered an audit log.
626
+ * Stores timestamps and other optional transactional metadata (who, why)
627
+ about every kind of decision.
628
+ * When needed, applies those decisions to the list of packages currently
629
+ reported by the package managers.
630
+ * Removed dependencies on sqlite and sequel.
631
+ * The CLI never writes HTML or CSV reports to the file system, only to
632
+ STDOUT. So, users have more choice over which reports to generate, when to
633
+ generate them, and where to put them. See `license_finder report`. If you
634
+ would like to update reports automatically (e.g., in a rake task or git
635
+ hook) see this gist: https://gist.github.com/mainej/1a4d61a92234c5cebeab.
636
+ * The configuration YAML file is no longer required, though it can still be
637
+ useful. Most of its functionality has been moved into the decisions
638
+ infrastructure, and the remaining bits can be passed as arguments to the
639
+ CLI. Most users will not need these arguments. If the file is present, the
640
+ CLI arguments can be omitted. The CLI no longer updates this file.
641
+ * Requires pip >= 6.0
642
+
643
+ * Bugfixes
644
+
645
+ * `license_finder` does not write anything to the file system, #94, #114, #117
646
+
647
+
648
+ # 1.2.1 / unreleased
649
+
650
+ * Features
651
+
652
+ * Can list dependencies that were added manually
653
+
654
+
655
+ # 1.2 / 2014-11-10
656
+
657
+ * Features
658
+
659
+ * Adding support for CocoaPods >= 0.34. (#118)
660
+ * For dependencies with multiple licenses, the name of each license is
661
+ listed, and if any are whitelisted, the dependency is whitelisted
662
+ * Added `--debug` option when scanning, to provide details on
663
+ packages, dependencies and where each license was discovered.
664
+
665
+
666
+ # 1.1.1 / 2014-07-29
667
+
668
+ * Bugfixes
669
+
670
+ * Process incorrectly-defined dependencies.
671
+ [Original issue.](https://github.com/pivotal/LicenseFinder/issues/108)
672
+ * Allow license_finder to process incorrectly-defined dependencies.
673
+
674
+
675
+ # 1.0.1 / 2014-05-28
676
+
677
+ * Features
678
+
679
+ * For dependencies with multiple licenses, the dependency is listed as
680
+ 'multiple licenses' along with the names of each license
681
+ * Added 'ignore_dependencies' config option to allow specific
682
+ dependencies to be excluded from reports.
683
+
684
+ * Bugfixes
685
+
686
+ * Dependency reports generate when license_finder.yml updates
687
+ * Dependency reports generate when config is changed through the command line
688
+
689
+
690
+ # 1.0.0.1 / 2014-05-23
691
+
692
+ * Bugfixes
693
+
694
+ * LicenseFinder detects its own license
695
+
696
+
697
+ # 1.0.0 / 2014-04-03
698
+
699
+ * Features
700
+
701
+ * When approving a license, can specify who is approving, and why.
702
+ * Remove `rake license_finder` task from Rails projects. Just include
703
+ 'license_finder' as a development dependency, and run `license_finder` in
704
+ the shell.
705
+
706
+
707
+ # 0.9.5.1 / 2014-01-30
708
+
709
+ * Features
710
+
711
+ * Adds homepage for Bower, NPM, and PIP packages
712
+
713
+
714
+ # 0.9.5 / 2014-01-30
715
+
716
+ * Features
717
+
718
+ * Add more aliases for known licenses
719
+ * Drop support for ruby 1.9.2
720
+ * Large refactoring to simply things, and make it easier to add new package managers
721
+
722
+ * Bugfixes
723
+
724
+ * Make node dependency json parsing more robust
725
+ * Clean up directories created during test runs
726
+
727
+
728
+ # 0.9.4 / 2014-01-05
729
+
730
+ * Features
731
+
732
+ * Add detailed csv report
733
+ * Add markdown report
734
+ * Add support for "licenses" => ["license"] (npn)
735
+ * Add basic bower support
736
+ * Allow adding/removing multiple licenses from whitelist
737
+
738
+ * Bugfixes
739
+
740
+ * Use all dependencies by default for npm as bundler does
741
+
742
+
743
+ # 0.9.3 / 2013-10-01
744
+
745
+ * Features
746
+
747
+ * New Apache 2.0 license alias
748
+
749
+ * Bugfixes
750
+
751
+ * Fix problem which prevented license finder from running in rails < 3.2
752
+
753
+
754
+ # 0.9.2 / 2013-08-17
755
+
756
+ * Features
757
+
758
+ * Support for python and node.js projects
759
+
760
+ * Bugfixes
761
+
762
+ * Fix HTML output in firefox
763
+
764
+
765
+ # 0.9.1 / 2013-07-30
766
+
767
+ * Features
768
+
769
+ * Projects now have a title which can be configured from CLI
770
+ * JRuby officially supported. Test suite works against jruby, removed
771
+ warnings
772
+ * Internal clean-up of database behavior
773
+ * Updated documentation with breakdown of HTML report
774
+
775
+ * Bugfixes
776
+
777
+ * dependencies.db is no longer modified after license_finder runs and finds
778
+ no changes
779
+ * Fix more CLI grammar/syntax errors
780
+ * HTML report now works when served over https (PR #36 - bwalding)
781
+ * dependencies.txt is now dependencies.csv (It was always a csv in spirit)
782
+
783
+
784
+ # 0.9.0 / 2013-07-16
785
+
786
+ * Features
787
+
788
+ * Clarify CLI options and commands in help output
789
+ * Can manage whitelisted licenses from command line
790
+ * Improved New BSD license detection
791
+
792
+ * Bugfixes
793
+
794
+ * Fix CLI grammar errors
795
+ * Using license_finder in a non-RVM environment now works (Issue #35)
796
+
797
+
798
+ # 0.8.2 / 2013-07-09
799
+
800
+ * Features
801
+
802
+ * Switch to thor for CLI, to support future additions to CLI
803
+ * Restore ability to manage (add/remove) dependencies that Bundler can't find
804
+ * Can maintain ignored bundler groups from command line
805
+
806
+ * Bugfixes
807
+
808
+ * Fix bug preventing manual approval of child dependencies (Issue #23)
809
+ * Fix issue with database URI when the absolute path to the database file
810
+ contains spaces.
811
+ * Upgrading from 0.7.2 no longer removes non-gem dependencies (Issue #20)
812
+
813
+
814
+ # 0.8.1 / 2013-04-14
815
+
816
+ * Features
817
+
818
+ * JRuby version of the gem.
819
+ * Official ruby 2.0 support.
820
+ * CLI interface for moving dependencies.* files to `doc/`.
821
+
822
+ * Bugfixes
823
+
824
+ * Fix ruby 1.9.2 support.
825
+
826
+
827
+ # 0.8.0 / 2013-04-03
828
+
829
+ * Features
830
+
831
+ * Add spinner to show that the binary is actually doing something.
832
+ * Add action items to dependencies.html.
833
+ * Add generation timestamp to dependencies.html.
834
+ * Default location for dependencies.* files is now `doc/`.
835
+ * Temporarily remove non-bundler (e.g. JavaScript) dependencies. This will
836
+ be readded in a more sustainable way soon.
837
+ * Use sqlite, not YAML, for dependencies.
838
+ * Officially deprecate rake tasks.
839
+
840
+ * Bugfixes
841
+
842
+ * Don't blow away manually set licenses when dependencies are rescanned.
843
+ * Ignore empty `readme_files` section in dependencies.yml.
844
+ * Clean up HTML generation for dependencies.html.
845
+ * Add an option to silence the binary's spinner so as not to fill up log
846
+ files.
847
+
848
+
849
+ # 0.7.2 / 2013-02-18
850
+
851
+ * Features
852
+
853
+ * Dependency cleanup.
854
+
855
+
856
+ # 0.7.1 / 2013-02-18
857
+
858
+ * Features
859
+
860
+ * Add variants to detectable licenses.
861
+ * Remove README files from data persistence.
862
+
863
+
864
+ # 0.7.0 / 2012-09-25
865
+
866
+ * Features
867
+
868
+ * Dependencies can be approved via CLI.
869
+ * Dependencies licenses can be set via CLI.
870
+
871
+
872
+ # 0.6.0 / 2012-09-15
873
+
874
+ * Features
875
+
876
+ * Create a dependencies.html containing a nicely formatted version of
877
+ dependencies.txt, with lots of extra information.
878
+ * All rake tasks, and the binary, run the init task automatically.
879
+ * Simplify dependencies.txt file since more detail can now go into
880
+ dependencies.html.
881
+ * Promote binary to be the default, take first steps to deprecate rake task.
882
+
883
+ * Bugfixes
884
+
885
+ * Fix formatting of `rake license:action_items` output.
886
+
887
+
888
+ # 0.5.0 / 2012-09-12
889
+
890
+ * Features
891
+
892
+ * `rake license:action_items` exits with a non-zero status if there are
893
+ non-approved dependencies.
894
+ * New binary, eventual replacement for rake tasks.
895
+ * Initial implementation of non-gem dependencies.
896
+ * Support BSD, New BSD, and Simplified BSD licenses.
897
+ * Improve ruby license detection.
898
+ * Add dependency's bundler group to dependencies.txt output.
899
+ * Add description and summary to dependencies.txt output.
900
+
901
+ * Bugfixes
902
+
903
+ * Create `config/` director if it doesn't exist, don't blow up.
904
+ * Better support for non-US word spellings.
905
+
906
+
907
+ # 0.4.5 / 2012-09-09
908
+
909
+ * Features
910
+
911
+ * Allow dependencies.* files to be written to a custom directory.
912
+ * Detect LGPL licenses
913
+ * Detect ISC licenses
914
+
915
+ * Bugfixes
916
+
917
+ * Fix blow up if there's not `ignore_groups` setting in the config file.
918
+
919
+
920
+ [Unreleased]: https://github.com/pivotal/LicenseFinder/compare/v4.0.2...HEAD
921
+ [4.0.2]: https://github.com/pivotal/LicenseFinder/compare/v4.0.1...v4.0.2
922
+ [4.0.1]: https://github.com/pivotal/LicenseFinder/compare/v4.0.0...v4.0.1
923
+ [4.0.0]: https://github.com/pivotal/LicenseFinder/compare/v3.1.0...v4.0.0
924
+ [3.1.0]: https://github.com/pivotal/LicenseFinder/compare/v3.0.4...v3.1.0
925
+ [3.0.4]: https://github.com/pivotal/LicenseFinder/compare/v3.0.2...v3.0.4
926
+ [3.0.2]: https://github.com/pivotal/LicenseFinder/compare/v3.0.1...v3.0.2
927
+ [3.0.1]: https://github.com/pivotal/LicenseFinder/compare/v3.0.0...v3.0.1
928
+ [3.0.0]: https://github.com/pivotal/LicenseFinder/compare/v2.1.2...v3.0.0
929
+ [5.0.0]: https://github.com/pivotal/LicenseFinder/compare/v4.0.2...v5.0.0
930
+ [5.0.2]: https://github.com/pivotal/LicenseFinder/compare/v5.0.0...v5.0.2
931
+ [5.0.3]: https://github.com/pivotal/LicenseFinder/compare/v5.0.2...v5.0.3
932
+ [5.1.0]: https://github.com/pivotal/LicenseFinder/compare/v5.0.3...v5.1.0
933
+ [5.1.1]: https://github.com/pivotal/LicenseFinder/compare/v5.1.0...v5.1.1
934
+ [5.1.1]: https://github.com/pivotal/LicenseFinder/compare/v5.1.0...v5.1.1
935
+ [5.2.0]: https://github.com/pivotal/LicenseFinder/compare/v5.1.1...v5.2.0
936
+ [5.2.1]: https://github.com/pivotal/LicenseFinder/compare/v5.2.0...v5.2.1
937
+ [5.2.3]: https://github.com/pivotal/LicenseFinder/compare/v5.2.1...v5.2.3
938
+ [5.3.0]: https://github.com/pivotal/LicenseFinder/compare/v5.2.3...v5.3.0
939
+ [5.4.0]: https://github.com/pivotal/LicenseFinder/compare/v5.3.0...v5.4.0
940
+ [5.4.1]: https://github.com/pivotal/LicenseFinder/compare/v5.4.0...v5.4.1
941
+ [5.5.0]: https://github.com/pivotal/LicenseFinder/compare/v5.4.1...v5.5.0
942
+ [5.5.1]: https://github.com/pivotal/LicenseFinder/compare/v5.5.0...v5.5.1
943
+ [5.5.2]: https://github.com/pivotal/LicenseFinder/compare/v5.5.1...v5.5.2
944
+ [5.6.0]: https://github.com/pivotal/LicenseFinder/compare/v5.5.2...v5.6.0
945
+ [5.6.1]: https://github.com/pivotal/LicenseFinder/compare/v5.6.0...v5.6.1
946
+ [5.6.2]: https://github.com/pivotal/LicenseFinder/compare/v5.6.1...v5.6.2
947
+ [5.7.0]: https://github.com/pivotal/LicenseFinder/compare/v5.6.2...v5.7.0
948
+ [5.7.1]: https://github.com/pivotal/LicenseFinder/compare/v5.7.0...v5.7.1
949
+ [5.8.0]: https://github.com/pivotal/LicenseFinder/compare/v5.7.1...v5.8.0
950
+ [5.9.0]: https://github.com/pivotal/LicenseFinder/compare/v5.8.0...v5.9.0
951
+ [5.9.1]: https://github.com/pivotal/LicenseFinder/compare/v5.9.0...v5.9.1
952
+ [5.9.2]: https://github.com/pivotal/LicenseFinder/compare/v5.9.1...v5.9.2
953
+ [5.10.0]: https://github.com/pivotal/LicenseFinder/compare/v5.9.2...v5.10.0
954
+ [5.10.1]: https://github.com/pivotal/LicenseFinder/compare/v5.10.0...v5.10.1
955
+ [5.10.2]: https://github.com/pivotal/LicenseFinder/compare/v5.10.1...v5.10.2
956
+ [5.11.0]: https://github.com/pivotal/LicenseFinder/compare/v5.10.2...v5.11.0
957
+ [5.11.1]: https://github.com/pivotal/LicenseFinder/compare/v5.11.0...v5.11.1
958
+ [6.0.0]: https://github.com/pivotal/LicenseFinder/compare/v5.11.1...v6.0.0
959
+ [6.1.0]: https://github.com/pivotal/LicenseFinder/compare/v6.0.0...v6.1.0
960
+ [6.1.2]: https://github.com/pivotal/LicenseFinder/compare/v6.1.0...v6.1.2
961
+ [6.2.0]: https://github.com/pivotal/LicenseFinder/compare/v6.1.2...v6.2.0
962
+ [6.3.0]: https://github.com/pivotal/LicenseFinder/compare/v6.2.0...v6.3.0
963
+ [6.4.0]: https://github.com/pivotal/LicenseFinder/compare/v6.3.0...v6.4.0
964
+ [6.5.0]: https://github.com/pivotal/LicenseFinder/compare/v6.4.0...v6.5.0
965
+ [6.6.0]: https://github.com/pivotal/LicenseFinder/compare/v6.5.0...v6.6.0
966
+ [6.6.1]: https://github.com/pivotal/LicenseFinder/compare/v6.6.0...v6.6.1
967
+ [6.6.2]: https://github.com/pivotal/LicenseFinder/compare/v6.6.1...v6.6.2
968
+ [6.7.0]: https://github.com/pivotal/LicenseFinder/compare/v6.6.2...v6.7.0
969
+ [6.8.0]: https://github.com/pivotal/LicenseFinder/compare/v6.7.0...v6.8.0
970
+ [6.8.1]: https://github.com/pivotal/LicenseFinder/compare/v6.8.0...v6.8.1
971
+ [6.8.2]: https://github.com/pivotal/LicenseFinder/compare/v6.8.1...v6.8.2
972
+ [6.9.0]: https://github.com/pivotal/LicenseFinder/compare/v6.8.2...v6.9.0
973
+ [6.10.0]: https://github.com/pivotal/LicenseFinder/compare/v6.9.0...v6.10.0
974
+ [6.10.1]: https://github.com/pivotal/LicenseFinder/compare/v6.10.0...v6.10.1
975
+ [6.11.0]: https://github.com/pivotal/LicenseFinder/compare/v6.10.1...v6.11.0
976
+ [6.12.0]: https://github.com/pivotal/LicenseFinder/compare/v6.11.0...v6.12.0
977
+ [6.12.1]: https://github.com/pivotal/LicenseFinder/compare/v6.12.0...v6.12.1
978
+ [6.12.2]: https://github.com/pivotal/LicenseFinder/compare/v6.12.1...v6.12.2
979
+ [6.13.0]: https://github.com/pivotal/LicenseFinder/compare/v6.12.2...v6.13.0
980
+ [6.14.1]: https://github.com/pivotal/LicenseFinder/compare/v6.13.0...v6.14.1
981
+ [6.14.2]: https://github.com/pivotal/LicenseFinder/compare/v6.14.1...v6.14.2