licensed 3.7.2 → 3.7.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 31f187eacefe804712d35112ff72bc25e5d4cdd8696ac529327689999de6160e
-  data.tar.gz: 6154eb5ff6efebaf727da8b03315dd7eed04b96911c9e43a81569138a39d0497
+  metadata.gz: 1002bceeb85db079486f7cbde9c09638362fc03b287c15822fcc7e4e250a1c6d
+  data.tar.gz: acb2c626b8efd7573e32efef91a3c68b93c5aeee07580d874d58ce1326ee5aa8
 SHA512:
-  metadata.gz: e433eac2fa6ae6b394f6919fabb2c7f7b38fe335619cd13d392ce8bd208a9d6be06016789ba563660acf31110548daa2d3ebac306115dc01b3c3bb11d88f21d9
-  data.tar.gz: 2fab2eac0cce0339c50d8a7242cd29627ec2bdce027104dfec70c405cc0e3b1e50961ead3a6375d2cbd8476703c8af03dd7957fd0762f6794855caa47c1a2e73
+  metadata.gz: fb16460e74fd404c19e3a977c9fc125f91ef2b96f04952aac6aa46da8dc5981d9bcfb556cd2db2503e0d36ce7a78278e57532005e54384069e632d62cd7181de
+  data.tar.gz: e1d0b1df753a9dcc0c6b488cdbfef416d776edd8e3128363a46722f43be2178f939e6cbef71a645d944049619d058c3df7f291e2b3779f32046f094726ca95f4

data/CHANGELOG.md

@@ -6,6 +6,23 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
 
 ## [Unreleased]
 
+## 3.7.4
+
+### Fixed
+
+- Licenses for Python dependencies built with Hatchling are correctly found (https://github.com/github/licensed/pull/547)
+
+## 3.7.3
+
+### Fixed
+
+- Swift test fixtures build artifacts are now ignored (:tada: @CvX https://github.com/github/licensed/pull/524)
+- Running cargo test fixture setup no longer deletes test files (:tada: @CvX https://github.com/github/licensed/pull/525)
+- Bundler test fixtures are compatible with latest macOS silicon(:tada: @CvX https://github.com/github/licensed/pull/528)
+- Fix segfaults seen using licensed with ruby 3.0.4 (https://github.com/github/licensed/pull/530)
+- Fix compatibility with latest versions of bundler 2.3 (https://github.com/github/licensed/pull/535)
+- Fix compatibility with latest versions of bundler 2.3 (:tada: @CvX https://github.com/github/licensed/pull/522)
+
 ## 3.7.2
 
 ### Fixed
@@ -620,4 +637,4 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
 
 Initial release :tada:
 
-[Unreleased]: https://github.com/github/licensed/compare/3.7.2...HEAD
+[Unreleased]: https://github.com/github/licensed/compare/3.7.4...HEAD

data/lib/licensed/configuration.rb

@@ -243,15 +243,16 @@ module Licensed
 
       # try to expand the source path for glob patterns
       expanded_source_paths = source_path_array.reduce(Set.new) do |matched_paths, pattern|
-        current_matched_paths = if pattern.start_with?("!")
-          # if the pattern is an exclusion, remove all matching files
-          # from the result
-          matched_paths - Dir.glob(pattern[1..-1])
-        else
-          # if the pattern is an inclusion, add all matching files
-          # to the result
-          matched_paths + Dir.glob(pattern)
-        end
+        current_matched_paths =
+          if pattern.start_with?("!")
+            # if the pattern is an exclusion, remove all matching files
+            # from the result
+            matched_paths - Dir.glob(pattern[1..-1])
+          else
+            # if the pattern is an inclusion, add all matching files
+            # to the result
+            matched_paths + Dir.glob(pattern)
+          end
 
         current_matched_paths.select { |p| File.directory?(p) }
       end

data/lib/licensed/reporters/status_reporter.rb

@@ -19,7 +19,7 @@ module Licensed
       # app - An application configuration
       # report - A report containing information about the app evaluation
       def begin_report_app(app, report)
-          shell.info "Checking cached dependency records for #{app["name"]}"
+        shell.info "Checking cached dependency records for #{app["name"]}"
       end
 
       # Reports any errors found when checking status, as well as

data/lib/licensed/sources/bundler/missing_specification.rb

@@ -40,8 +40,15 @@ module Licensed
     end
 
     module LazySpecification
-      def __materialize__
-        spec = super
+      def materialize_for_installation(*args)
+        spec = super(*args)
+        return spec unless spec.is_a?(LazySpecification)
+
+        Licensed::Bundler::MissingSpecification.new(name: name, version: version, platform: platform, source: source)
+      end
+
+      def __materialize__(*args)
+        spec = super(*args)
         return spec if spec
 
         Licensed::Bundler::MissingSpecification.new(name: name, version: version, platform: platform, source: source)

data/lib/licensed/sources/git_submodule.rb

@@ -20,12 +20,13 @@ module Licensed
         git_submodules_command.lines.map do |line|
           displaypath, toplevel, version, homepage = line.strip.split
           name = File.basename(displaypath)
-          submodule_path = if toplevel == config.pwd.to_s
-            name
-          else
-            parent = File.basename(toplevel)
-            "#{submodule_paths[parent]}/#{name}"
-          end
+          submodule_path =
+            if toplevel == config.pwd.to_s
+              name
+            else
+              parent = File.basename(toplevel)
+              "#{submodule_paths[parent]}/#{name}"
+            end
           submodule_paths[name] = submodule_path
 
           Licensed::Dependency.new(

data/lib/licensed/sources/go.rb

@@ -36,11 +36,12 @@ module Licensed
 
       # Returns an array of dependency package import paths
       def packages
-        dependency_packages = if go_version < Gem::Version.new("1.11.0")
-          root_package_deps
-        else
-          go_list_deps
-        end
+        dependency_packages =
+          if go_version < Gem::Version.new("1.11.0")
+            root_package_deps
+          else
+            go_list_deps
+          end
 
         # don't include go std packages
         # don't include packages under the root project that aren't vendored

data/lib/licensed/sources/helpers/content_versioning.rb

@@ -27,14 +27,14 @@ module Licensed
       def version_strategy
         # default to git for backwards compatible behavior
         @version_strategy ||= begin
-           case config.fetch("version_strategy", nil)
-           when CONTENTS
-             CONTENTS
-           when GIT
-             GIT
-           else
-             Licensed::Git.available? ? GIT : CONTENTS
-           end
+          case config.fetch("version_strategy", nil)
+          when CONTENTS
+            CONTENTS
+          when GIT
+            GIT
+          else
+            Licensed::Git.available? ? GIT : CONTENTS
+          end
         end
       end
 

data/lib/licensed/sources/pip.rb

@@ -42,8 +42,12 @@ module Licensed
       # folder per https://peps.python.org/pep-0639/
       def package_license_location(package)
         dist_info = File.join(package["Location"], package["Name"].gsub("-", "_") +  "-" + package["Version"] + ".dist-info")
-        license_files = File.join(dist_info, "license_files")
-        return File.exist?(license_files) ? license_files : dist_info
+
+        license_path = ["license_files", "licenses"]
+          .map { |directory| File.join(dist_info, directory) }
+          .find { |path| File.exist?(path) }
+
+        license_path || dist_info
       end
 
       # Returns parsed information for all packages used by the project,

data/lib/licensed/version.rb

@@ -1,6 +1,6 @@
 # frozen_string_literal: true
 module Licensed
-  VERSION = "3.7.2".freeze
+  VERSION = "3.7.4".freeze
 
   def self.previous_major_versions
     major_version = Gem::Version.new(Licensed::VERSION).segments.first

data/licensed.gemspec

@@ -31,6 +31,7 @@ Gem::Specification.new do |spec|
   spec.add_dependency "ruby-xxHash", "~> 0.4"
   spec.add_dependency "parallel", ">= 0.18.0"
   spec.add_dependency "reverse_markdown", ">= 1", "< 3"
+  spec.add_dependency "json", ">= 2.6.2"
 
   spec.add_development_dependency "rake", ">= 12.3.3"
   spec.add_development_dependency "minitest", "~> 5.8"

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: licensed
 version: !ruby/object:Gem::Version
-  version: 3.7.2
+  version: 3.7.4
 platform: ruby
 authors:
 - GitHub
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2022-06-02 00:00:00.000000000 Z
+date: 2022-10-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: licensee
@@ -140,6 +140,20 @@ dependencies:
     - - "<"
       - !ruby/object:Gem::Version
         version: '3'
+- !ruby/object:Gem::Dependency
+  name: json
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.6.2
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.6.2
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement