licensed 3.7.1 → 3.7.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 03de72b78b61eb285dc7f28303375a782ac1061997cd8a1dc7e664874d017ab6
-  data.tar.gz: af3660d69f8a235b7b40b08ede58f0bc8250ead97aa3a19c51cebfb88922c5e9
+  metadata.gz: 31f187eacefe804712d35112ff72bc25e5d4cdd8696ac529327689999de6160e
+  data.tar.gz: 6154eb5ff6efebaf727da8b03315dd7eed04b96911c9e43a81569138a39d0497
 SHA512:
-  metadata.gz: 2e8125e6de6e0892a1afca36dd6cf5ae6091d101b7bbc58a3fd3086c1ac58838323f4979d859ea2de7e3ecc32f4af222f3eab433d6cccd95b73687b1f2626eb3
-  data.tar.gz: 4c18508e167faeb8d81dfb1548e9f5ed71fbc38c18b0a610dbc230911f7940062deadc4bed7a153e39ff8d94642bcab82b61a9ad7948860f508a84dc0b2f6175
+  metadata.gz: e433eac2fa6ae6b394f6919fabb2c7f7b38fe335619cd13d392ce8bd208a9d6be06016789ba563660acf31110548daa2d3ebac306115dc01b3c3bb11d88f21d9
+  data.tar.gz: 2fab2eac0cce0339c50d8a7242cd29627ec2bdce027104dfec70c405cc0e3b1e50961ead3a6375d2cbd8476703c8af03dd7957fd0762f6794855caa47c1a2e73

data/CHANGELOG.md

@@ -6,6 +6,17 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
 
 ## [Unreleased]
 
+## 3.7.2
+
+### Fixed
+
+- Comparing dependency license contents now finds matching contents regardless of the order of the licenses (https://github.com/github/licensed/pull/516)
+- Fixed typo in a link in README.md (https://github.com/github/licensed/pull/514) 
+
+### Changed
+
+- Elixir testing setup is migrated to erlef/setup-beam (https://github.com/github/licensed/pull/512)
+
 ## 3.7.1
 
 ### Fixed
@@ -609,4 +620,4 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
 
 Initial release :tada:
 
-[Unreleased]: https://github.com/github/licensed/compare/3.7.1...HEAD
+[Unreleased]: https://github.com/github/licensed/compare/3.7.2...HEAD

data/README.md

@@ -86,7 +86,7 @@ A configuration file is required for most commands.  See the [configuration file
 
 ### Available dependency sources
 
-Licensed can enumerate dependency for many languages, package managers, and frameworks.  See the [sources documentation](./docs/sources) for the list of currently available sources.  Sources can be explicitly enabled and disabled as a [configuration option](./docs/configuration/dependency_source_enumerators.md.md).
+Licensed can enumerate dependency for many languages, package managers, and frameworks.  See the [sources documentation](./docs/sources) for the list of currently available sources.  Sources can be explicitly enabled and disabled as a [configuration option](./docs/configuration/dependency_source_enumerators.md).
 
 ## Development
 

data/lib/licensed/dependency_record.rb

@@ -27,6 +27,14 @@ module Licensed
           "text" => text
         }
       end
+
+      def key
+        @key ||= begin
+          # rubocop:disable GitHub/InsecureHashAlgorithm
+          Digest::XXHash64.digest(sources.join("") + text)
+          # rubocop:enable GitHub/InsecureHashAlgorithm
+        end
+      end
     end
 
     include Licensee::ContentHelper
@@ -84,7 +92,7 @@ module Licensed
     # `Licensee::CotentHelper`
     def content
       return if licenses.nil? || licenses.empty?
-      licenses.map(&:text).compact.join
+      licenses.sort_by(&:key).map(&:text).compact.join
     end
 
     # Returns whether two records match based on their contents

data/lib/licensed/version.rb

@@ -1,6 +1,6 @@
 # frozen_string_literal: true
 module Licensed
-  VERSION = "3.7.1".freeze
+  VERSION = "3.7.2".freeze
 
   def self.previous_major_versions
     major_version = Gem::Version.new(Licensed::VERSION).segments.first

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: licensed
 version: !ruby/object:Gem::Version
-  version: 3.7.1
+  version: 3.7.2
 platform: ruby
 authors:
 - GitHub
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2022-05-13 00:00:00.000000000 Z
+date: 2022-06-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: licensee