licensed 5.0.1 → 5.0.3
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/CHANGELOG.md +261 -137
- data/Gemfile.lock +7 -5
- data/docs/migrations/v3.md +9 -9
- data/lib/licensed/sources/npm.rb +1 -1
- data/lib/licensed/sources/pnpm.rb +18 -13
- data/lib/licensed/version.rb +1 -1
- data/licensed.gemspec +1 -0
- metadata +19 -5
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: f709ba93b840e75db483c4c14bf8badddbb87d75a56735098a24a31f40caf094
|
|
4
|
+
data.tar.gz: e05c7d64e925f9f78f56facd1a08fa521f5ce04d7d05ae1590fae17ab7c64c75
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 478e80694a1d1f33f27bccb37f8788154700a5a7f36fe8eee69e6a7d7ad6241ee208f7b2840a22b6a9f651a4a8c1b44c53ba016422ec28bddc9f790ba6f80464
|
|
7
|
+
data.tar.gz: 88aee1891a8d056c2567416c79a31e67c0bbfacb08b48616087de43e2adb7f4e2819323a7ea702008e6cbfa4def25c34db24f546b9bbaef63603a4c9dfc62400
|
data/CHANGELOG.md
CHANGED
|
@@ -1,4 +1,5 @@
|
|
|
1
1
|
# Changelog
|
|
2
|
+
|
|
2
3
|
All notable changes to this project will be documented in this file.
|
|
3
4
|
|
|
4
5
|
The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
|
|
@@ -6,6 +7,16 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
|
|
|
6
7
|
|
|
7
8
|
## [Unreleased]
|
|
8
9
|
|
|
10
|
+
## 5.0.3
|
|
11
|
+
|
|
12
|
+
- Support pnpm v9 (<https://github.com/licensee/licensed/pull/803>)
|
|
13
|
+
|
|
14
|
+
## 5.0.2
|
|
15
|
+
|
|
16
|
+
- Pin setup-ruby and set permissions in test workflow (<https://github.com/licensee/licensed/pull/768>)
|
|
17
|
+
- Pin action versions in test.yml (<https://github.com/licensee/licensed/pull/776>)
|
|
18
|
+
- Add `csv` as a dependency for Ruby 3.4+ (<https://github.com/licensee/licensed/pull/786>)
|
|
19
|
+
- Fix `nil` bug when there's no `dependency` key in `package.json` (<https://github.com/licensee/licensed/pull/791>)
|
|
9
20
|
|
|
10
21
|
## 5.0.1
|
|
11
22
|
|
|
@@ -32,145 +43,145 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
|
|
|
32
43
|
|
|
33
44
|
### Added
|
|
34
45
|
|
|
35
|
-
- Licensed status command will alert on stale cached dependency records (https://github.com/github/licensed/pull/657)
|
|
46
|
+
- Licensed status command will alert on stale cached dependency records (<https://github.com/github/licensed/pull/657>)
|
|
36
47
|
|
|
37
48
|
## 4.3.1
|
|
38
49
|
|
|
39
50
|
### Changed
|
|
40
51
|
|
|
41
|
-
- Bump nokogiri to resolve vulnerabilities (https://github.com/github/licensed/pull/648)
|
|
52
|
+
- Bump nokogiri to resolve vulnerabilities (<https://github.com/github/licensed/pull/648>)
|
|
42
53
|
|
|
43
54
|
## 4.3.0
|
|
44
55
|
|
|
45
56
|
### Added
|
|
46
57
|
|
|
47
|
-
- Cocoapods support has been re-enabled using a cocoapods plugin (https://github.com/github/licensed/pull/644)
|
|
58
|
+
- Cocoapods support has been re-enabled using a cocoapods plugin (<https://github.com/github/licensed/pull/644>)
|
|
48
59
|
|
|
49
60
|
## 4.2.0
|
|
50
61
|
|
|
51
62
|
### Added
|
|
52
63
|
|
|
53
|
-
- Reviewed and ignored configuration lists support matching on versions and version ranges (https://github.com/github/licensed/pull/629)
|
|
64
|
+
- Reviewed and ignored configuration lists support matching on versions and version ranges (<https://github.com/github/licensed/pull/629>)
|
|
54
65
|
|
|
55
66
|
### Fixed
|
|
56
67
|
|
|
57
|
-
- Licensed should more reliably source dependencies from Gradle >= 8.0 (https://github.com/github/licensed/pull/630)
|
|
68
|
+
- Licensed should more reliably source dependencies from Gradle >= 8.0 (<https://github.com/github/licensed/pull/630>)
|
|
58
69
|
|
|
59
70
|
## 4.1.0
|
|
60
71
|
|
|
61
72
|
### Added
|
|
62
73
|
|
|
63
|
-
- Custom license terms can be added to dependencies via new configuration options (https://github.com/github/licensed/pull/624)
|
|
64
|
-
- Licensed is now integrated with pnpm to enumerate dependencies (https://github.com/github/licensed/pull/626)
|
|
74
|
+
- Custom license terms can be added to dependencies via new configuration options (<https://github.com/github/licensed/pull/624>)
|
|
75
|
+
- Licensed is now integrated with pnpm to enumerate dependencies (<https://github.com/github/licensed/pull/626>)
|
|
65
76
|
|
|
66
77
|
## 4.0.4
|
|
67
78
|
|
|
68
79
|
### Changed
|
|
69
80
|
|
|
70
|
-
- Dependency version requirements are more relaxed (https://github.com/github/licensed/pull/619)
|
|
81
|
+
- Dependency version requirements are more relaxed (<https://github.com/github/licensed/pull/619>)
|
|
71
82
|
|
|
72
83
|
## 4.0.3
|
|
73
84
|
|
|
74
85
|
### Changed
|
|
75
86
|
|
|
76
|
-
- Cocoapods dependency enumeration has been disabled (https://github.com/github/licensed/pull/616)
|
|
87
|
+
- Cocoapods dependency enumeration has been disabled (<https://github.com/github/licensed/pull/616>)
|
|
77
88
|
|
|
78
89
|
### Fixed
|
|
79
90
|
|
|
80
|
-
- Fixed method signature change in Bundler API with Bundler >= 2.4.4 (:tada: @CvX https://github.com/github/licensed/pull/614)
|
|
81
|
-
- Fixed installation dependency compatibility with Rails >= 7.0 (https://github.com/github/licensed/pull/616)
|
|
91
|
+
- Fixed method signature change in Bundler API with Bundler >= 2.4.4 (:tada: @CvX <https://github.com/github/licensed/pull/614>)
|
|
92
|
+
- Fixed installation dependency compatibility with Rails >= 7.0 (<https://github.com/github/licensed/pull/616>)
|
|
82
93
|
|
|
83
94
|
## 4.0.2
|
|
84
95
|
|
|
85
96
|
### Fixed
|
|
86
97
|
|
|
87
|
-
- The path to a gradlew executable can be configured when enumerating gradle dependencies (:tada: @LouisBoudreau https://github.com/github/licensed/pull/610)
|
|
98
|
+
- The path to a gradlew executable can be configured when enumerating gradle dependencies (:tada: @LouisBoudreau <https://github.com/github/licensed/pull/610>)
|
|
88
99
|
|
|
89
100
|
## 4.0.1
|
|
90
101
|
|
|
91
102
|
### Fixed
|
|
92
103
|
|
|
93
|
-
- Running gradle tests will no longer fail when gradle is not available (https://github.com/github/licensed/pull/606)
|
|
104
|
+
- Running gradle tests will no longer fail when gradle is not available (<https://github.com/github/licensed/pull/606>)
|
|
94
105
|
|
|
95
106
|
## 4.0.0
|
|
96
107
|
|
|
97
108
|
### Added
|
|
98
109
|
|
|
99
|
-
- Licensed supports Cocoapods as a dependency source (:tada: @LouisBoudreau https://github.com/github/licensed/pull/584)
|
|
100
|
-
- Licensed supports Gradle multi-project builds (:tada: @LouisBoudreau https://github.com/github/licensed/pull/583)
|
|
110
|
+
- Licensed supports Cocoapods as a dependency source (:tada: @LouisBoudreau <https://github.com/github/licensed/pull/584>)
|
|
111
|
+
- Licensed supports Gradle multi-project builds (:tada: @LouisBoudreau <https://github.com/github/licensed/pull/583>)
|
|
101
112
|
|
|
102
113
|
### Fixed
|
|
103
114
|
|
|
104
|
-
- Licensed no longer crashes when run with Bundler >= 2.4.0 (:tada: @JoshReedSchramm https://github.com/github/licensed/pull/597)
|
|
115
|
+
- Licensed no longer crashes when run with Bundler >= 2.4.0 (:tada: @JoshReedSchramm <https://github.com/github/licensed/pull/597>)
|
|
105
116
|
|
|
106
117
|
### Changed
|
|
107
118
|
|
|
108
|
-
- BREAKING: Licensed no longer ships executables with releases (https://github.com/github/licensed/pull/586)
|
|
109
|
-
- BREAKING: Licensed no longer includes support for Go <= 1.11 (https://github.com/github/licensed/pull/602)
|
|
119
|
+
- BREAKING: Licensed no longer ships executables with releases (<https://github.com/github/licensed/pull/586>)
|
|
120
|
+
- BREAKING: Licensed no longer includes support for Go <= 1.11 (<https://github.com/github/licensed/pull/602>)
|
|
110
121
|
|
|
111
122
|
## 3.9.1
|
|
112
123
|
|
|
113
124
|
### Fixed
|
|
114
125
|
|
|
115
|
-
- Updating cached dependency records will more accurately apply `review_changed_license` flag (https://github.com/github/licensed/pull/578)
|
|
126
|
+
- Updating cached dependency records will more accurately apply `review_changed_license` flag (<https://github.com/github/licensed/pull/578>)
|
|
116
127
|
|
|
117
128
|
## 3.9.0
|
|
118
129
|
|
|
119
130
|
### Added
|
|
120
131
|
|
|
121
|
-
- `NOTICE` files can now be generated without cached files in a repository (https://github.com/github/licensed/pull/572)
|
|
132
|
+
- `NOTICE` files can now be generated without cached files in a repository (<https://github.com/github/licensed/pull/572>)
|
|
122
133
|
|
|
123
134
|
## 3.8.0
|
|
124
135
|
|
|
125
136
|
### Added
|
|
126
137
|
|
|
127
|
-
- Licensing compliance status checks can now be used without cached files in a repository (https://github.com/github/licensed/pull/560)
|
|
138
|
+
- Licensing compliance status checks can now be used without cached files in a repository (<https://github.com/github/licensed/pull/560>)
|
|
128
139
|
|
|
129
140
|
## 3.7.5
|
|
130
141
|
|
|
131
142
|
### Fixed
|
|
132
143
|
|
|
133
|
-
- Python dependency metadata will be correctly parsed from the ouput of `pip show` (https://github.com/github/licensed/pull/555)
|
|
144
|
+
- Python dependency metadata will be correctly parsed from the ouput of `pip show` (<https://github.com/github/licensed/pull/555>)
|
|
134
145
|
|
|
135
146
|
## 3.7.4
|
|
136
147
|
|
|
137
148
|
### Fixed
|
|
138
149
|
|
|
139
|
-
- Licenses for Python dependencies built with Hatchling are correctly found (https://github.com/github/licensed/pull/547)
|
|
150
|
+
- Licenses for Python dependencies built with Hatchling are correctly found (<https://github.com/github/licensed/pull/547>)
|
|
140
151
|
|
|
141
152
|
## 3.7.3
|
|
142
153
|
|
|
143
154
|
### Fixed
|
|
144
155
|
|
|
145
|
-
- Swift test fixtures build artifacts are now ignored (:tada: @CvX https://github.com/github/licensed/pull/524)
|
|
146
|
-
- Running cargo test fixture setup no longer deletes test files (:tada: @CvX https://github.com/github/licensed/pull/525)
|
|
147
|
-
- Bundler test fixtures are compatible with latest macOS silicon(:tada: @CvX https://github.com/github/licensed/pull/528)
|
|
148
|
-
- Fix segfaults seen using licensed with ruby 3.0.4 (https://github.com/github/licensed/pull/530)
|
|
149
|
-
- Fix compatibility with latest versions of bundler 2.3 (https://github.com/github/licensed/pull/535)
|
|
150
|
-
- Fix compatibility with latest versions of bundler 2.3 (:tada: @CvX https://github.com/github/licensed/pull/522)
|
|
156
|
+
- Swift test fixtures build artifacts are now ignored (:tada: @CvX <https://github.com/github/licensed/pull/524>)
|
|
157
|
+
- Running cargo test fixture setup no longer deletes test files (:tada: @CvX <https://github.com/github/licensed/pull/525>)
|
|
158
|
+
- Bundler test fixtures are compatible with latest macOS silicon(:tada: @CvX <https://github.com/github/licensed/pull/528>)
|
|
159
|
+
- Fix segfaults seen using licensed with ruby 3.0.4 (<https://github.com/github/licensed/pull/530>)
|
|
160
|
+
- Fix compatibility with latest versions of bundler 2.3 (<https://github.com/github/licensed/pull/535>)
|
|
161
|
+
- Fix compatibility with latest versions of bundler 2.3 (:tada: @CvX <https://github.com/github/licensed/pull/522>)
|
|
151
162
|
|
|
152
163
|
## 3.7.2
|
|
153
164
|
|
|
154
165
|
### Fixed
|
|
155
166
|
|
|
156
|
-
- Comparing dependency license contents now finds matching contents regardless of the order of the licenses (https://github.com/github/licensed/pull/516)
|
|
157
|
-
- Fixed typo in a link in README.md (https://github.com/github/licensed/pull/514)
|
|
167
|
+
- Comparing dependency license contents now finds matching contents regardless of the order of the licenses (<https://github.com/github/licensed/pull/516>)
|
|
168
|
+
- Fixed typo in a link in README.md (<https://github.com/github/licensed/pull/514>)
|
|
158
169
|
|
|
159
170
|
### Changed
|
|
160
171
|
|
|
161
|
-
- Elixir testing setup is migrated to erlef/setup-beam (https://github.com/github/licensed/pull/512)
|
|
172
|
+
- Elixir testing setup is migrated to erlef/setup-beam (<https://github.com/github/licensed/pull/512>)
|
|
162
173
|
|
|
163
174
|
## 3.7.1
|
|
164
175
|
|
|
165
176
|
### Fixed
|
|
166
177
|
|
|
167
|
-
- Dependencies' legal notice file matching has been made more strict to reduce false positives on code files containing the word `legal` (https://github.com/github/licensed/pull/510)
|
|
178
|
+
- Dependencies' legal notice file matching has been made more strict to reduce false positives on code files containing the word `legal` (<https://github.com/github/licensed/pull/510>)
|
|
168
179
|
|
|
169
180
|
## 3.7.0
|
|
170
181
|
|
|
171
182
|
### Changed
|
|
172
183
|
|
|
173
|
-
- Pip and pipenv sources will find dependency licenses under `dist-info/license_files` when available (https://github.com/github/licensed/pull/504)
|
|
184
|
+
- Pip and pipenv sources will find dependency licenses under `dist-info/license_files` when available (<https://github.com/github/licensed/pull/504>)
|
|
174
185
|
|
|
175
186
|
## 3.6.0
|
|
176
187
|
|
|
@@ -178,17 +189,17 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
|
|
|
178
189
|
|
|
179
190
|
### Added
|
|
180
191
|
|
|
181
|
-
- Composer dev dependencies can optionally be included in enumerated PHP dependencies (:tada: @digilist https://github.com/github/licensed/pull/486)
|
|
182
|
-
- Getting started usage documentation (https://github.com/github/licensed/pull/483)
|
|
183
|
-
- Initial support for NPM workspaces (https://github.com/github/licensed/pull/485)
|
|
192
|
+
- Composer dev dependencies can optionally be included in enumerated PHP dependencies (:tada: @digilist <https://github.com/github/licensed/pull/486>)
|
|
193
|
+
- Getting started usage documentation (<https://github.com/github/licensed/pull/483>)
|
|
194
|
+
- Initial support for NPM workspaces (<https://github.com/github/licensed/pull/485>)
|
|
184
195
|
|
|
185
196
|
### Changed
|
|
186
197
|
|
|
187
|
-
- Transitive dependencies are now enumerated by the `pip` source (https://github.com/github/licensed/pull/480)
|
|
198
|
+
- Transitive dependencies are now enumerated by the `pip` source (<https://github.com/github/licensed/pull/480>)
|
|
188
199
|
|
|
189
200
|
### Fixed
|
|
190
201
|
|
|
191
|
-
- `licensed cache --force` will now correctly overwrite existing license classifications (https://github.com/github/licensed/pull/473)
|
|
202
|
+
- `licensed cache --force` will now correctly overwrite existing license classifications (<https://github.com/github/licensed/pull/473>)
|
|
192
203
|
|
|
193
204
|
## 3.5.0
|
|
194
205
|
|
|
@@ -196,7 +207,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
|
|
|
196
207
|
|
|
197
208
|
### Added
|
|
198
209
|
|
|
199
|
-
- [Licensee](https://github.com/licensee/licensee) confidence thresholds can be configured in the licensed configuration file (https://github.com/github/licensed/pull/455)
|
|
210
|
+
- [Licensee](https://github.com/licensee/licensee) confidence thresholds can be configured in the licensed configuration file (<https://github.com/github/licensed/pull/455>)
|
|
200
211
|
|
|
201
212
|
## 3.4.4
|
|
202
213
|
|
|
@@ -204,7 +215,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
|
|
|
204
215
|
|
|
205
216
|
### Fixed
|
|
206
217
|
|
|
207
|
-
- The npm and pip sources have better protection from strings causing crashes in `Hash#dig` (https://github.com/github/licensed/pull/450)
|
|
218
|
+
- The npm and pip sources have better protection from strings causing crashes in `Hash#dig` (<https://github.com/github/licensed/pull/450>)
|
|
208
219
|
|
|
209
220
|
## 3.4.3
|
|
210
221
|
|
|
@@ -212,7 +223,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
|
|
|
212
223
|
|
|
213
224
|
### Added
|
|
214
225
|
|
|
215
|
-
- The npm source handles more cases of missing, optional, peer dependencies (https://github.com/github/licensed/pull/443)
|
|
226
|
+
- The npm source handles more cases of missing, optional, peer dependencies (<https://github.com/github/licensed/pull/443>)
|
|
216
227
|
|
|
217
228
|
## 3.4.2
|
|
218
229
|
|
|
@@ -220,7 +231,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
|
|
|
220
231
|
|
|
221
232
|
### Fixed
|
|
222
233
|
|
|
223
|
-
- The yarn source will no longer evaluate package.json files that do not represent project dependencies (https://github.com/github/licensed/pull/439)
|
|
234
|
+
- The yarn source will no longer evaluate package.json files that do not represent project dependencies (<https://github.com/github/licensed/pull/439>)
|
|
224
235
|
|
|
225
236
|
## 3.4.1
|
|
226
237
|
|
|
@@ -228,7 +239,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
|
|
|
228
239
|
|
|
229
240
|
### Fixed
|
|
230
241
|
|
|
231
|
-
- Malformed package.json files will no longer crash yarn dependency detection (https://github.com/github/licensed/pull/431)
|
|
242
|
+
- Malformed package.json files will no longer crash yarn dependency detection (<https://github.com/github/licensed/pull/431>)
|
|
232
243
|
|
|
233
244
|
## 3.4.0
|
|
234
245
|
|
|
@@ -236,17 +247,17 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
|
|
|
236
247
|
|
|
237
248
|
### Added
|
|
238
249
|
|
|
239
|
-
- New Yarn enumerator with support for berry versions (https://github.com/github/licensed/pull/423)
|
|
250
|
+
- New Yarn enumerator with support for berry versions (<https://github.com/github/licensed/pull/423>)
|
|
240
251
|
|
|
241
252
|
### Fixed
|
|
242
253
|
|
|
243
|
-
- Error handling cases return correct values in the Yarn enumerator (https://github.com/github/licensed/pull/425)
|
|
244
|
-
- Fixed link in command documentation (:tada: @chibicco https://github.com/github/licensed/pull/416)
|
|
245
|
-
- Fixed minor backwards compatibility issue for Ruby 2.3 support (:tada: @dzunk https://github.com/github/licensed/pull/414)
|
|
254
|
+
- Error handling cases return correct values in the Yarn enumerator (<https://github.com/github/licensed/pull/425>)
|
|
255
|
+
- Fixed link in command documentation (:tada: @chibicco <https://github.com/github/licensed/pull/416>)
|
|
256
|
+
- Fixed minor backwards compatibility issue for Ruby 2.3 support (:tada: @dzunk <https://github.com/github/licensed/pull/414>)
|
|
246
257
|
|
|
247
258
|
### Changed
|
|
248
259
|
|
|
249
|
-
- Licensed's own dependencies are cached in the repository and kept up to date with GitHub Actions (https://github.com/github/licensed/pull/421)
|
|
260
|
+
- Licensed's own dependencies are cached in the repository and kept up to date with GitHub Actions (<https://github.com/github/licensed/pull/421>)
|
|
250
261
|
|
|
251
262
|
## 3.3.1
|
|
252
263
|
|
|
@@ -254,11 +265,11 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
|
|
|
254
265
|
|
|
255
266
|
### Fixed
|
|
256
267
|
|
|
257
|
-
- Fix evaluation of peer dependencies with npm 7 (:tada: @manuelpuyol https://github.com/github/licensed/pull/411)
|
|
268
|
+
- Fix evaluation of peer dependencies with npm 7 (:tada: @manuelpuyol <https://github.com/github/licensed/pull/411>)
|
|
258
269
|
|
|
259
270
|
### Changed
|
|
260
271
|
|
|
261
|
-
- Manifest source evaluation performance improvements (https://github.com/github/licensed/pull/407)
|
|
272
|
+
- Manifest source evaluation performance improvements (<https://github.com/github/licensed/pull/407>)
|
|
262
273
|
|
|
263
274
|
## 3.3.0
|
|
264
275
|
|
|
@@ -266,11 +277,11 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
|
|
|
266
277
|
|
|
267
278
|
### Added
|
|
268
279
|
|
|
269
|
-
- New cargo source enumerates rust dependencies (https://github.com/github/licensed/pull/404)
|
|
280
|
+
- New cargo source enumerates rust dependencies (<https://github.com/github/licensed/pull/404>)
|
|
270
281
|
|
|
271
282
|
### Changed
|
|
272
283
|
|
|
273
|
-
- Removed non-functional files from gem builds (https://github.com/github/licensed/pull/405)
|
|
284
|
+
- Removed non-functional files from gem builds (<https://github.com/github/licensed/pull/405>)
|
|
274
285
|
|
|
275
286
|
## 3.2.3
|
|
276
287
|
|
|
@@ -278,8 +289,8 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
|
|
|
278
289
|
|
|
279
290
|
### Fixed
|
|
280
291
|
|
|
281
|
-
- Bundler source will no longer infinitely recurse when enumerating specifications (https://github.com/github/licensed/pull/402)
|
|
282
|
-
- Using the `--sources` command line option will no longer delete skipped sources' cached files (https://github.com/github/licensed/pull/401)
|
|
292
|
+
- Bundler source will no longer infinitely recurse when enumerating specifications (<https://github.com/github/licensed/pull/402>)
|
|
293
|
+
- Using the `--sources` command line option will no longer delete skipped sources' cached files (<https://github.com/github/licensed/pull/401>)
|
|
283
294
|
|
|
284
295
|
## 3.2.2
|
|
285
296
|
|
|
@@ -287,7 +298,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
|
|
|
287
298
|
|
|
288
299
|
### Fixed
|
|
289
300
|
|
|
290
|
-
- Bundler source works properly again when used outside of `bundle exec` (https://github.com/github/licensed/pull/397)
|
|
301
|
+
- Bundler source works properly again when used outside of `bundle exec` (<https://github.com/github/licensed/pull/397>)
|
|
291
302
|
|
|
292
303
|
## 3.2.1
|
|
293
304
|
|
|
@@ -295,13 +306,13 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
|
|
|
295
306
|
|
|
296
307
|
### Changed
|
|
297
308
|
|
|
298
|
-
- Updated multiple dependency versions (:tada: @mmorel-35 https://github.com/github/licensed/pull/385
|
|
299
|
-
- Go homepage links use pkg.go.dev instead of godoc.org (:tada: @mmorel-35 https://github.com/github/licensed/commit/73cfbbe954a3e8c8cbaf8b68253053b157e01b79)
|
|
300
|
-
- Local development ruby version changed to 2.7.4 (https://github.com/github/licensed/pull/393)
|
|
309
|
+
- Updated multiple dependency versions (:tada: @mmorel-35 <https://github.com/github/licensed/pull/385>, <https://github.com/github/licensed/pull/389>)
|
|
310
|
+
- Go homepage links use pkg.go.dev instead of godoc.org (:tada: @mmorel-35 <https://github.com/github/licensed/commit/73cfbbe954a3e8c8cbaf8b68253053b157e01b79>)
|
|
311
|
+
- Local development ruby version changed to 2.7.4 (<https://github.com/github/licensed/pull/393>)
|
|
301
312
|
|
|
302
313
|
### Fixed
|
|
303
314
|
|
|
304
|
-
- Bundler source correctly finds platform specific dependencies (https://github.com/github/licensed/pull/392)
|
|
315
|
+
- Bundler source correctly finds platform specific dependencies (<https://github.com/github/licensed/pull/392>)
|
|
305
316
|
|
|
306
317
|
## 3.2.0
|
|
307
318
|
|
|
@@ -309,18 +320,18 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
|
|
|
309
320
|
|
|
310
321
|
### Added
|
|
311
322
|
|
|
312
|
-
- Application names can be dynamically generated based on the path to the application source (https://github.com/github/licensed/pull/375)
|
|
323
|
+
- Application names can be dynamically generated based on the path to the application source (<https://github.com/github/licensed/pull/375>)
|
|
313
324
|
|
|
314
325
|
### Changed
|
|
315
326
|
|
|
316
|
-
- Updated command documentation (https://github.com/github/licensed/pull/378
|
|
317
|
-
- Updated configuration documentation (https://github.com/github/licensed/pull/375)
|
|
318
|
-
- Cache and status commands give additional diagnostic output when using JSON and YAML formatters (https://github.com/github/licensed/pull/378)
|
|
319
|
-
- Status command will give users a link to documentation when compliance checks fail (https://github.com/github/licensed/pull/381)
|
|
327
|
+
- Updated command documentation (<https://github.com/github/licensed/pull/378>, <https://github.com/github/licensed/pull/380/files>)
|
|
328
|
+
- Updated configuration documentation (<https://github.com/github/licensed/pull/375>)
|
|
329
|
+
- Cache and status commands give additional diagnostic output when using JSON and YAML formatters (<https://github.com/github/licensed/pull/378>)
|
|
330
|
+
- Status command will give users a link to documentation when compliance checks fail (<https://github.com/github/licensed/pull/381>)
|
|
320
331
|
|
|
321
332
|
### Fixed
|
|
322
333
|
|
|
323
|
-
- The bundler source correctly checks that the path bundler specifies a gem is loaded from is a file (https://github.com/github/licensed/pull/379)
|
|
334
|
+
- The bundler source correctly checks that the path bundler specifies a gem is loaded from is a file (<https://github.com/github/licensed/pull/379>)
|
|
324
335
|
|
|
325
336
|
## 3.1.0
|
|
326
337
|
|
|
@@ -328,17 +339,18 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
|
|
|
328
339
|
|
|
329
340
|
### Added
|
|
330
341
|
|
|
331
|
-
- Licensed supports Swift/Swift package manager as a dependency source (:tada: @mattt https://github.com/github/licensed/pull/363)'
|
|
342
|
+
- Licensed supports Swift/Swift package manager as a dependency source (:tada: @mattt <https://github.com/github/licensed/pull/363>)'
|
|
332
343
|
|
|
333
344
|
### Changed
|
|
334
345
|
|
|
335
|
-
- The `source_path` configuration property accepts arrays of inclusion and exclusion glob patterns (https://github.com/github/licensed/pull/368)
|
|
336
|
-
- The Nuget source now uses configured fallback folders to find dependencies that are not in found in the project folder (https://github.com/github/licensed/pull/366)
|
|
337
|
-
- The Nuget source supports a configurable property for the path from the project source path to the project's `obj` folder (https://github.com/github/licensed/pull/365)
|
|
346
|
+
- The `source_path` configuration property accepts arrays of inclusion and exclusion glob patterns (<https://github.com/github/licensed/pull/368>)
|
|
347
|
+
- The Nuget source now uses configured fallback folders to find dependencies that are not in found in the project folder (<https://github.com/github/licensed/pull/366>)
|
|
348
|
+
- The Nuget source supports a configurable property for the path from the project source path to the project's `obj` folder (<https://github.com/github/licensed/pull/365>)
|
|
338
349
|
|
|
339
350
|
### Fixed
|
|
340
|
-
|
|
341
|
-
- The
|
|
351
|
+
|
|
352
|
+
- The Go source's checks for local packages will correctly find paths in case-insensitive file systems (<https://github.com/github/licensed/pull/370>)
|
|
353
|
+
- The Bundler source will no longer unnecessarily reset the local Bundler environment configuration (<https://github.com/github/licensed/pull/372>)
|
|
342
354
|
|
|
343
355
|
## 3.0.1
|
|
344
356
|
|
|
@@ -346,7 +358,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
|
|
|
346
358
|
|
|
347
359
|
### Fixed
|
|
348
360
|
|
|
349
|
-
- The bundler source will correctly enumerate dependencies pulled with a `git:` directive (https://github.com/github/licensed/pull/360)
|
|
361
|
+
- The bundler source will correctly enumerate dependencies pulled with a `git:` directive (<https://github.com/github/licensed/pull/360>)
|
|
350
362
|
|
|
351
363
|
## 3.0.0
|
|
352
364
|
|
|
@@ -364,7 +376,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
|
|
|
364
376
|
|
|
365
377
|
### Fixed
|
|
366
378
|
|
|
367
|
-
- The pip source works with package names containing periods (:tada: @bcskda https://github.com/github/licensed/pull/350)
|
|
379
|
+
- The pip source works with package names containing periods (:tada: @bcskda <https://github.com/github/licensed/pull/350>)
|
|
368
380
|
|
|
369
381
|
## 2.15.1
|
|
370
382
|
|
|
@@ -372,161 +384,209 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
|
|
|
372
384
|
|
|
373
385
|
### Changed
|
|
374
386
|
|
|
375
|
-
- The npm source will ignore dependencies that are marked as both extraneous and missing (https://github.com/github/licensed/pull/347)
|
|
387
|
+
- The npm source will ignore dependencies that are marked as both extraneous and missing (<https://github.com/github/licensed/pull/347>)
|
|
376
388
|
|
|
377
389
|
## 2.15.0
|
|
390
|
+
|
|
378
391
|
2021-03-24
|
|
379
392
|
|
|
380
393
|
### Added
|
|
381
|
-
|
|
394
|
+
|
|
395
|
+
- Support for npm 7 (<https://github.com/github/licensed/pull/341>)
|
|
382
396
|
|
|
383
397
|
### Fixed
|
|
384
|
-
|
|
398
|
+
|
|
399
|
+
- Files in the manifest source will be found correctly for apps that are not at the repository root (<https://github.com/github/licensed/pull/345>)
|
|
385
400
|
|
|
386
401
|
## 2.14.4
|
|
402
|
+
|
|
387
403
|
2021-02-09
|
|
388
404
|
|
|
389
405
|
### Added
|
|
390
|
-
|
|
391
|
-
- `list`
|
|
406
|
+
|
|
407
|
+
- `list` and `cache` commands optionally print output in JSON or YML formats using the `--format/-f` flag (<https://github.com/github/licensed/pull/334>)
|
|
408
|
+
- `list` command will include detected license keys using the `--licenses/-l` flag (<https://github.com/github/licensed/pull/334>)
|
|
392
409
|
|
|
393
410
|
## 2.14.3
|
|
411
|
+
|
|
394
412
|
2020-12-11
|
|
395
413
|
|
|
396
414
|
### Fixed
|
|
397
|
-
|
|
415
|
+
|
|
416
|
+
- Auto-generating license text for a known license will no longer raise an error if the found license has no text (:tada: @Eun <https://github.com/github/licensed/pull/328>)
|
|
398
417
|
|
|
399
418
|
## 2.14.2
|
|
419
|
+
|
|
400
420
|
2020-11-20
|
|
401
421
|
|
|
402
422
|
### Fixed
|
|
403
|
-
|
|
404
|
-
-
|
|
423
|
+
|
|
424
|
+
- Yarn source correctly finds dependency paths on disk (<https://github.com/github/licensed/pull/326>)
|
|
425
|
+
- Go source better handles finding dependencies that have been vendored (<https://github.com/github/licensed/pull/323>)
|
|
405
426
|
|
|
406
427
|
## 2.14.1
|
|
428
|
+
|
|
407
429
|
2020-10-09
|
|
408
430
|
|
|
409
431
|
### Fixed
|
|
410
|
-
|
|
432
|
+
|
|
433
|
+
- Shell command output is encoded to UTF8 (<https://github.com/github/licensed/pull/319>)
|
|
411
434
|
|
|
412
435
|
## 2.14.0
|
|
436
|
+
|
|
413
437
|
2020-10-04
|
|
414
438
|
|
|
415
439
|
### Added
|
|
416
|
-
|
|
440
|
+
|
|
441
|
+
- `reviewed` dependencies can use glob pattern matching (<https://github.com/github/licensed/pull/313>)
|
|
417
442
|
|
|
418
443
|
### Fixed
|
|
419
|
-
|
|
444
|
+
|
|
445
|
+
- Fix configuring source path globs that expand into a single directory (<https://github.com/github/licensed/pull/312>)
|
|
420
446
|
|
|
421
447
|
## 2.13.0
|
|
448
|
+
|
|
422
449
|
2020-09-23
|
|
423
450
|
|
|
424
451
|
### Added
|
|
425
|
-
|
|
452
|
+
|
|
453
|
+
- `status` command results can be output in YAML and JSON formats (:tada: @julianvilas <https://github.com/github/licensed/pull/303>)
|
|
426
454
|
|
|
427
455
|
### Fixed
|
|
428
|
-
|
|
429
|
-
-
|
|
430
|
-
-
|
|
456
|
+
|
|
457
|
+
- `licensed` no longer crashes when parsing invalid YAML from cached records (<https://github.com/github/licensed/pull/306>)
|
|
458
|
+
- NPM source will no longer crash when invalid JSON is returned from npm CLI calls (<https://github.com/github/licensed/pull/300>)
|
|
459
|
+
- Bundler source is fixed to work properly with `gems.rb` lockfiles (<https://github.com/github/licensed/pull/299>)
|
|
431
460
|
|
|
432
461
|
## 2.12.2
|
|
462
|
+
|
|
433
463
|
2020-07-07
|
|
434
464
|
|
|
435
465
|
### Changed
|
|
436
|
-
|
|
437
|
-
- Cleaned up
|
|
466
|
+
|
|
467
|
+
- Cleaned up ruby 2.7 warnings (:tada: @jurre <https://github.com/github/licensed/pull/292>)
|
|
468
|
+
- Cleaned up additional warnings in tests (<https://github.com/github/licensed/pull/293>)
|
|
438
469
|
|
|
439
470
|
## 2.12.1
|
|
471
|
+
|
|
440
472
|
2020-06-30
|
|
441
473
|
|
|
442
474
|
### Fixed
|
|
443
|
-
|
|
475
|
+
|
|
476
|
+
- `licensed` no longer exits an error code when using the `--sources` CLI argument (<https://github.com/github/licensed/pull/290>)
|
|
444
477
|
|
|
445
478
|
## 2.12.0
|
|
479
|
+
|
|
446
480
|
2020-06-19
|
|
447
481
|
|
|
448
482
|
### Added
|
|
449
|
-
|
|
483
|
+
|
|
484
|
+
- `--sources` argument for cache, list, status and notices commands to filter running sources (<https://github.com/github/licensed/pull/287>)
|
|
450
485
|
|
|
451
486
|
### Fixed
|
|
452
|
-
|
|
487
|
+
|
|
488
|
+
- `cache` command will not remove files outside of enabled source cache paths (<https://github.com/github/licensed/pull/287>)
|
|
453
489
|
|
|
454
490
|
## 2.11.1
|
|
491
|
+
|
|
455
492
|
2020-06-09
|
|
456
493
|
|
|
457
494
|
### Fixed
|
|
458
|
-
|
|
495
|
+
|
|
496
|
+
- `notices` command properly reads cached dependency notices contents (<https://github.com/github/licensed/pull/283>)
|
|
459
497
|
|
|
460
498
|
## 2.11.0
|
|
499
|
+
|
|
461
500
|
2020-06-02
|
|
462
501
|
|
|
463
502
|
### Added
|
|
464
|
-
|
|
503
|
+
|
|
504
|
+
- `notices` command to create a `NOTICE` file for each configured app (<https://github.com/github/licensed/pull/277>)
|
|
465
505
|
|
|
466
506
|
### Fixed
|
|
467
|
-
|
|
468
|
-
-
|
|
507
|
+
|
|
508
|
+
- NuGet source no longer crashes on a non-existent dependency path (<https://github.com/github/licensed/pull/280>)
|
|
509
|
+
- Go source no longer crashes on a non-existent dependency package path (<https://github.com/github/licensed/pull/274>)
|
|
469
510
|
|
|
470
511
|
## 2.10.0
|
|
512
|
+
|
|
471
513
|
2020-05-15
|
|
472
514
|
|
|
473
515
|
### Changed
|
|
474
|
-
|
|
516
|
+
|
|
517
|
+
- NPM source ignores missing peer dependencies (<https://github.com/github/licensed/pull/267>)
|
|
475
518
|
|
|
476
519
|
### Added
|
|
477
|
-
|
|
478
|
-
-
|
|
520
|
+
|
|
521
|
+
- NuGet source (:tada: @zarenner <https://github.com/github/licensed/pull/261>)
|
|
522
|
+
- Multiple apps can share a single cache location (<https://github.com/github/licensed/pull/263>)
|
|
479
523
|
|
|
480
524
|
## 2.9.2
|
|
525
|
+
|
|
481
526
|
2020-04-28
|
|
482
527
|
|
|
483
528
|
### Changed
|
|
484
|
-
|
|
529
|
+
|
|
530
|
+
- `licensee` minimum version bumped to 9.13.2 (<https://github.com/github/licensed/pull/256>)
|
|
485
531
|
|
|
486
532
|
## 2.9.1
|
|
533
|
+
|
|
487
534
|
2020-03-24
|
|
488
535
|
|
|
489
536
|
### Changed
|
|
490
|
-
|
|
537
|
+
|
|
538
|
+
- relaxed gem version restrictions on Thor (:tada: @eileencodes <https://github.com/github/licensed/pull/254>)
|
|
491
539
|
|
|
492
540
|
## 2.9.0
|
|
541
|
+
|
|
493
542
|
2020-03-19
|
|
494
543
|
|
|
495
544
|
### Added
|
|
496
|
-
|
|
545
|
+
|
|
546
|
+
- Source paths use glob pattern matching (<https://github.com/github/licensed/pull/245>)
|
|
497
547
|
|
|
498
548
|
### Fixed
|
|
499
|
-
|
|
500
|
-
-
|
|
549
|
+
|
|
550
|
+
- Mix source supports updates to mix.lock format (:tada: @bruce <https://github.com/github/licensed/pull/242>)
|
|
551
|
+
- Go source supports `go list` format changes in go 1.14 (<https://github.com/github/licensed/pull/247>)
|
|
501
552
|
|
|
502
553
|
### Changed
|
|
503
|
-
|
|
504
|
-
- `licensed
|
|
505
|
-
- `
|
|
554
|
+
|
|
555
|
+
- `licensed cache` will flag dependencies for re-review when license text changes (<https://github.com/github/licensed/pull/248>)
|
|
556
|
+
- `licensed status` will raise errors on dependencies that need re-review (<https://github.com/github/licensed/pull/248>)
|
|
557
|
+
- `licensee` minimum version bumped to 9.13.1 (<https://github.com/github/licensed/pull/251>)
|
|
506
558
|
|
|
507
559
|
## 2.8.0
|
|
560
|
+
|
|
508
561
|
2020-01-03
|
|
509
562
|
|
|
510
563
|
### Added
|
|
511
|
-
|
|
512
|
-
-
|
|
564
|
+
|
|
565
|
+
- Yarn source (<https://github.com/github/licensed/pull/232>, <https://github.com/github/licensed/pull/233>, <https://github.com/github/licensed/pull/236>)
|
|
566
|
+
- NPM source has a new option to include non-production dependencies (<https://github.com/github/licensed/pull/231>)
|
|
513
567
|
|
|
514
568
|
### Fixed
|
|
515
|
-
|
|
569
|
+
|
|
570
|
+
- Cabal source will no longer crash if packages aren't found (<https://github.com/github/licensed/pull/230>)
|
|
516
571
|
|
|
517
572
|
## 2.7.0
|
|
573
|
+
|
|
518
574
|
2019-11-10
|
|
519
575
|
|
|
520
576
|
### Added
|
|
521
|
-
|
|
577
|
+
|
|
578
|
+
- License text is automatically generated for known licenses when not otherwise available (<https://github.com/github/licensed/pull/223>)
|
|
522
579
|
|
|
523
580
|
### Changed
|
|
524
|
-
|
|
581
|
+
|
|
582
|
+
- Ignoring dependencies uses glob pattern matching (<https://github.com/github/licensed/pull/225>)
|
|
525
583
|
|
|
526
584
|
## 2.6.2
|
|
585
|
+
|
|
527
586
|
2019-11-03
|
|
528
587
|
|
|
529
588
|
### Changed
|
|
589
|
+
|
|
530
590
|
- A number of improvements to the go dependency enumerator
|
|
531
591
|
- use `go env GOPATH` as a default if no other GOPATH is found
|
|
532
592
|
- better compatibility with go modules when finding license content
|
|
@@ -535,94 +595,121 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
|
|
|
535
595
|
- better checks for standard packages, reducing the amount of cached content
|
|
536
596
|
|
|
537
597
|
## 2.6.1
|
|
598
|
+
|
|
538
599
|
2019-10-26
|
|
539
600
|
|
|
540
601
|
### Changed
|
|
541
|
-
|
|
602
|
+
|
|
603
|
+
- Performance improvements during dependency enumeration (:tada: @krzysztof-pawlik-gat <https://github.com/github/licensed/pull/204>, <https://github.com/github/licensed/pull/207>) (<https://github.com/github/licensed/pull/210>)
|
|
542
604
|
|
|
543
605
|
## 2.6.0
|
|
606
|
+
|
|
544
607
|
2019-10-22
|
|
545
608
|
|
|
546
609
|
### Added
|
|
547
|
-
|
|
610
|
+
|
|
611
|
+
- Mix source for Elixir (:tada: @bruce <https://github.com/github/licensed/pull/195>)
|
|
548
612
|
|
|
549
613
|
## 2.5.0
|
|
614
|
+
|
|
550
615
|
2019-09-26
|
|
551
616
|
|
|
552
617
|
### Added
|
|
553
|
-
|
|
618
|
+
|
|
619
|
+
- `env` command to output application environment configuration (<https://github.com/github/licensed/pull/187>, <https://github.com/github/licensed/pull/191>)
|
|
554
620
|
|
|
555
621
|
### Changed
|
|
556
|
-
|
|
622
|
+
|
|
623
|
+
- `status` command will pass if multiple allowed licenses are found (<https://github.com/github/licensed/pull/188>)
|
|
557
624
|
|
|
558
625
|
## 2.4.0
|
|
626
|
+
|
|
559
627
|
2019-09-15
|
|
560
628
|
|
|
561
629
|
### Added
|
|
562
|
-
|
|
630
|
+
|
|
631
|
+
- Composer source for PHP (<https://github.com/github/licensed/pull/182>)
|
|
563
632
|
|
|
564
633
|
## 2.3.2
|
|
634
|
+
|
|
565
635
|
2019-08-26
|
|
566
636
|
|
|
567
637
|
### Fixed
|
|
638
|
+
|
|
568
639
|
- Bundler with/without array settings are properly handled for bundler 1.15.x
|
|
569
640
|
|
|
570
641
|
## 2.3.1
|
|
642
|
+
|
|
571
643
|
2019-08-20
|
|
572
644
|
|
|
573
645
|
### Changed
|
|
574
|
-
|
|
575
|
-
-
|
|
646
|
+
|
|
647
|
+
- Using the npm source with yarn, "missing" dependencies are no longer considered errors (:tada: @krzysztof-pawlik-gat <https://github.com/github/licensed/pull/170>)
|
|
648
|
+
- The bundler source now calls `gem specification` with dependency version requirements (<https://github.com/github/licensed/pull/173>)
|
|
576
649
|
|
|
577
650
|
## 2.3.0
|
|
651
|
+
|
|
578
652
|
2019-05-19
|
|
579
653
|
|
|
580
654
|
### Added
|
|
581
|
-
|
|
655
|
+
|
|
656
|
+
- New Pipenv dependency source enumerator (:tada: @krzysztof-pawlik-gat <https://github.com/github/licensed/pull/167>)
|
|
582
657
|
|
|
583
658
|
## 2.2.0
|
|
659
|
+
|
|
584
660
|
2019-05-11
|
|
585
661
|
|
|
586
662
|
### Added
|
|
587
|
-
|
|
663
|
+
|
|
664
|
+
- Content hash versioning strategy for go and manifest sources (<https://github.com/github/licensed/pull/164>)
|
|
588
665
|
|
|
589
666
|
### Fixed
|
|
590
|
-
|
|
667
|
+
|
|
668
|
+
- Python source handles urls and package names with "-" in requirements.txt (:tada: @krzysztof-pawlik-gat <https://github.com/github/licensed/pull/165>)
|
|
591
669
|
|
|
592
670
|
## 2.1.0
|
|
671
|
+
|
|
593
672
|
2019-04-16
|
|
594
673
|
|
|
595
674
|
### Added
|
|
596
|
-
|
|
597
|
-
-
|
|
675
|
+
|
|
676
|
+
- New Gradle dependency source enumerator (:tada: @dbussink <https://github.com/github/licensed/pull/150>, @jandersson-svt <https://github.com/github/licensed/pull/159>)
|
|
677
|
+
- Metadata added to distributed packages (<https://github.com/github/licensed/pull/160>)
|
|
598
678
|
|
|
599
679
|
### Changes
|
|
600
|
-
|
|
601
|
-
-
|
|
680
|
+
|
|
681
|
+
- Bundler dependency source loads license key from a gem's cached gemspec file as a fallback (<https://github.com/github/licensed/pull/154>)
|
|
682
|
+
- Licensed will only raise errors on an empty dependency path when caching records (<https://github.com/github/licensed/pull/149>)
|
|
602
683
|
|
|
603
684
|
### Fixed
|
|
604
|
-
|
|
605
|
-
-
|
|
685
|
+
|
|
686
|
+
- Migrating to v2 will no longer crash trying to migrate cached records that don't exist (<https://github.com/github/licensed/pull/148>)
|
|
687
|
+
- Reported warnings will no longer crash licensed when caching records (<https://github.com/github/licensed/pull/147>)
|
|
606
688
|
|
|
607
689
|
## 2.0.1
|
|
690
|
+
|
|
608
691
|
2019-02-14
|
|
609
692
|
|
|
610
693
|
### Changes
|
|
694
|
+
|
|
611
695
|
- Dependency paths that don't exist on the local disk are reported as warnings
|
|
612
696
|
- Cache, status and list output is sorted by app name, source type and dependency name
|
|
613
697
|
- Bumped `licensee` gem requirement
|
|
614
698
|
|
|
615
699
|
## 2.0.0
|
|
700
|
+
|
|
616
701
|
2019-02-09
|
|
617
702
|
|
|
618
703
|
**This is a major release and includes breaking changes to the configuration and cached record file formats**
|
|
619
704
|
|
|
620
705
|
### Added
|
|
706
|
+
|
|
621
707
|
- New `migrate` command to automatically update configuration and cached record file formats
|
|
622
708
|
- New extensible reporting infrastructure
|
|
623
709
|
- New base command and source classes to abstract away implementation details
|
|
624
710
|
|
|
625
711
|
### Changes
|
|
712
|
+
|
|
626
713
|
- Cached dependency metadata files are now stored entirely as YAML, with `.dep.yml` extension
|
|
627
714
|
- The Bundler dependency source is now identified in configuration files and output as `bundler` instead of `rubygem`
|
|
628
715
|
- Refactored sources for better consistency between classes
|
|
@@ -631,134 +718,171 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
|
|
|
631
718
|
- Updated Dependency classes for better integration with `licensee`
|
|
632
719
|
|
|
633
720
|
### Fixed
|
|
721
|
+
|
|
634
722
|
- Licensed no longer exits on errors when evaluating dependency sources or finding dependencies
|
|
635
723
|
- The Bundler dependency source correctly finds the `bundler` gem as a dependency in more cases
|
|
636
724
|
|
|
637
725
|
## 1.5.2
|
|
726
|
+
|
|
638
727
|
2018-12-27
|
|
639
728
|
|
|
640
729
|
### Changes
|
|
641
|
-
|
|
730
|
+
|
|
731
|
+
- Go source added support for Go modules and Golang 1.11+ (<https://github.com/github/licensed/pull/113>)
|
|
642
732
|
|
|
643
733
|
### Fixed
|
|
644
|
-
|
|
734
|
+
|
|
735
|
+
- Licensed will have a non-zero exit code when commands fail (:tada: @parkr <https://github.com/github/licensed/pull/111>)
|
|
645
736
|
|
|
646
737
|
## 1.5.1
|
|
738
|
+
|
|
647
739
|
2018-10-30
|
|
648
740
|
|
|
649
741
|
### Fixed
|
|
650
|
-
|
|
742
|
+
|
|
743
|
+
- Fixed a scenario where licensed wasn't finding bundler dependencies when run as an executable due to a ruby version mismatch (<https://github.com/github/licensed/pull/106>)
|
|
651
744
|
|
|
652
745
|
## 1.5.0
|
|
746
|
+
|
|
653
747
|
2018-10-24
|
|
654
748
|
|
|
655
749
|
### Added
|
|
656
|
-
|
|
750
|
+
|
|
751
|
+
- `licensed (version | -v | --version)` command to see the current licensed version (:tada: @mwagz! <https://github.com/github/licensed/pull/101>)
|
|
657
752
|
|
|
658
753
|
### Fixed
|
|
659
|
-
|
|
660
|
-
-
|
|
661
|
-
-
|
|
754
|
+
|
|
755
|
+
- NPM source no longer raises an error when ignored dependencies aren't found (:tada: @mwagz! <https://github.com/github/licensed/pull/100>)
|
|
756
|
+
- Checking for a Git repo will no longer possibly modify `.git/index` (:tada: @dbussink <https://github.com/github/licensed/pull/102>)
|
|
757
|
+
- Fixed a scenario where licensed wasn't finding bundler dependencies when run as an executable (<https://github.com/github/licensed/pull/103>)
|
|
662
758
|
|
|
663
759
|
## 1.4.0
|
|
760
|
+
|
|
664
761
|
2018-10-20
|
|
665
762
|
|
|
666
763
|
### Added
|
|
764
|
+
|
|
667
765
|
- Git Submodules dependency source :tada:
|
|
668
766
|
- Configuration option to explicitly set a root absolute path
|
|
669
767
|
|
|
670
768
|
### Changes
|
|
769
|
+
|
|
671
770
|
- `COPYING` file is no longer matched as a legal file
|
|
672
771
|
|
|
673
772
|
### Fixed
|
|
773
|
+
|
|
674
774
|
- NPM source will enumerate multiple versions of the same dependency
|
|
675
775
|
- Running Licensed outside of a Git repository no longer raises an error
|
|
676
776
|
- Packaging scripts will correctly return to the previous branch when the script is finished
|
|
677
777
|
|
|
678
778
|
## 1.3.4
|
|
779
|
+
|
|
679
780
|
2018-09-20
|
|
680
781
|
|
|
681
782
|
### Changes
|
|
783
|
+
|
|
682
784
|
- Bundler source will avoid looking for a gemspec file when possible
|
|
683
785
|
|
|
684
786
|
## 1.3.3
|
|
787
|
+
|
|
685
788
|
2018-09-07
|
|
686
789
|
|
|
687
790
|
### Fixed
|
|
791
|
+
|
|
688
792
|
- Manifest source configuration globs correctly enumerates files from within submodules
|
|
689
793
|
- The manifest source no longer errors when getting version information from submodules
|
|
690
794
|
|
|
691
795
|
## 1.3.2
|
|
796
|
+
|
|
692
797
|
2018-08-15
|
|
693
798
|
|
|
694
799
|
### Fixed
|
|
800
|
+
|
|
695
801
|
- Fixed issue when multiple versions of a cabal package are found
|
|
696
802
|
|
|
697
803
|
## 1.3.1
|
|
804
|
+
|
|
698
805
|
2018-08-01
|
|
699
806
|
|
|
700
807
|
### Fixed
|
|
808
|
+
|
|
701
809
|
- Fixed regression finding ruby gems by path
|
|
702
810
|
|
|
703
811
|
## 1.3.0
|
|
812
|
+
|
|
704
813
|
2018-07-25
|
|
705
814
|
|
|
706
815
|
### Added
|
|
816
|
+
|
|
707
817
|
- Manifests for the manifest dependency source can be specified using glob patterns in the configuration
|
|
708
818
|
- Paths to licenses for dependencies from the manifest dependency source can be specified in the configuration
|
|
709
819
|
- Manifest dependency source looks for license content in C-style comments if a license file isn't found
|
|
710
820
|
|
|
711
821
|
## Changes
|
|
822
|
+
|
|
712
823
|
- GitHub is no longer queried to find remote license information
|
|
713
824
|
- Removed custom logic around determining whether to use the license key from `licensee`
|
|
714
825
|
- NPM dependency enumeration doesn't use `npm list`
|
|
715
826
|
- Licensed now tracks content from multiple license files when available
|
|
716
827
|
|
|
717
828
|
### Fixed
|
|
829
|
+
|
|
718
830
|
- Fixed regression finding platform-specific ruby gems
|
|
719
831
|
|
|
720
832
|
## 1.2.0
|
|
833
|
+
|
|
721
834
|
2018-06-22
|
|
722
835
|
|
|
723
836
|
### Added
|
|
837
|
+
|
|
724
838
|
- Building and packaging distributable exes for licensed releases
|
|
725
839
|
- Can now configure which Gemfile groups are excluded from dependency enumeration
|
|
726
840
|
|
|
727
841
|
### Fixed
|
|
842
|
+
|
|
728
843
|
- Bundler is no longer always reported as a dependency
|
|
729
844
|
- Set the minimum required ruby version for licensed
|
|
730
845
|
|
|
731
846
|
## 1.1.0
|
|
847
|
+
|
|
732
848
|
2018-06-04
|
|
733
849
|
|
|
734
850
|
### Added
|
|
851
|
+
|
|
735
852
|
- Pip dependency source :tada:
|
|
736
853
|
- Go Dep dependency source :tada:
|
|
737
854
|
|
|
738
855
|
### Changed
|
|
856
|
+
|
|
739
857
|
- Changed how `sources` configuration property affects which sources are enabled
|
|
740
858
|
- Raise informative error messages when shell commands fail
|
|
741
859
|
|
|
742
860
|
### Fixed
|
|
861
|
+
|
|
743
862
|
- Don't reuse cached license when cached version metadata is missing
|
|
744
863
|
- Disable dependency sources when dependent tools are not available
|
|
745
864
|
- Vendored packages from the go std library are properly excluded
|
|
746
865
|
- Cabal dependency enumeration properly includes executable targets
|
|
747
866
|
|
|
748
867
|
## 1.0.1
|
|
868
|
+
|
|
749
869
|
2018-04-26
|
|
750
870
|
|
|
751
871
|
### Added
|
|
872
|
+
|
|
752
873
|
- GOPATH settable in configuration file
|
|
753
874
|
|
|
754
875
|
### Changed
|
|
876
|
+
|
|
755
877
|
- Reuse "license" metadata property when license text has not changed
|
|
756
878
|
|
|
757
879
|
### Fixed
|
|
880
|
+
|
|
758
881
|
- Path expansion for cabal "ghc_package_db" configuration setting occurs from repository root
|
|
759
882
|
- Local Gemfile(.lock) files correctly used in enumerating Bundler source dependencies
|
|
760
883
|
|
|
761
884
|
## 1.0.0
|
|
885
|
+
|
|
762
886
|
2018-02-20
|
|
763
887
|
|
|
764
888
|
Initial release :tada:
|
data/Gemfile.lock
CHANGED
|
@@ -1,7 +1,8 @@
|
|
|
1
1
|
PATH
|
|
2
2
|
remote: .
|
|
3
3
|
specs:
|
|
4
|
-
licensed (5.0.
|
|
4
|
+
licensed (5.0.3)
|
|
5
|
+
csv (~> 3.3)
|
|
5
6
|
json (~> 2.6)
|
|
6
7
|
licensee (~> 9.16)
|
|
7
8
|
parallel (~> 1.22)
|
|
@@ -32,6 +33,7 @@ GEM
|
|
|
32
33
|
byebug (11.1.3)
|
|
33
34
|
concurrent-ruby (1.2.3)
|
|
34
35
|
connection_pool (2.4.1)
|
|
36
|
+
csv (3.3.2)
|
|
35
37
|
dotenv (3.1.4)
|
|
36
38
|
drb (2.2.1)
|
|
37
39
|
faraday (2.12.1)
|
|
@@ -42,7 +44,7 @@ GEM
|
|
|
42
44
|
net-http (>= 0.5.0)
|
|
43
45
|
i18n (1.14.4)
|
|
44
46
|
concurrent-ruby (~> 1.0)
|
|
45
|
-
json (2.
|
|
47
|
+
json (2.9.1)
|
|
46
48
|
licensee (9.18.0)
|
|
47
49
|
dotenv (>= 2, < 4)
|
|
48
50
|
octokit (>= 4.20, < 10.0)
|
|
@@ -51,10 +53,10 @@ GEM
|
|
|
51
53
|
thor (>= 0.19, < 2.0)
|
|
52
54
|
logger (1.6.1)
|
|
53
55
|
mini_portile2 (2.8.8)
|
|
54
|
-
minitest (5.25.
|
|
56
|
+
minitest (5.25.4)
|
|
55
57
|
minitest-hooks (1.5.2)
|
|
56
58
|
minitest (> 5.3)
|
|
57
|
-
mocha (2.
|
|
59
|
+
mocha (2.7.1)
|
|
58
60
|
ruby2_keywords (>= 0.0.5)
|
|
59
61
|
mutex_m (0.2.0)
|
|
60
62
|
net-http (0.5.0)
|
|
@@ -71,7 +73,7 @@ GEM
|
|
|
71
73
|
pathname-common_prefix (0.0.2)
|
|
72
74
|
public_suffix (6.0.1)
|
|
73
75
|
racc (1.8.1)
|
|
74
|
-
rack (3.0.
|
|
76
|
+
rack (3.0.12)
|
|
75
77
|
rainbow (3.1.1)
|
|
76
78
|
rake (13.2.1)
|
|
77
79
|
regexp_parser (2.6.2)
|
data/docs/migrations/v3.md
CHANGED
|
@@ -16,7 +16,7 @@ Using licensed to enumerate bundler dependencies in a GitHub Actions workflow wi
|
|
|
16
16
|
|
|
17
17
|
If you are using licensed in a GitHub Actions workflow, [github/setup-licensed](https://github.com/github/setup-licensed) has been updated according to this breaking change. `setup-licensed` will install the licensed gem when ruby is available, or the licensed executable when ruby is not available. Alternatively, you can `gem install` licensed directly as an actions step.
|
|
18
18
|
|
|
19
|
-
This is an example workflow definition that runs [github/licensed-ci](https://github.com/github/licensed-ci)'s opinionated license compliance workflow in CI. It includes jobs that demonstrate installing licensed using
|
|
19
|
+
This is an example workflow definition that runs [github/licensed-ci](https://github.com/github/licensed-ci)'s opinionated license compliance workflow in CI. It includes jobs that demonstrate installing licensed using
|
|
20
20
|
- `gem install`
|
|
21
21
|
- [github/setup-licensed](https://github.com/github/setup-licensed)
|
|
22
22
|
- installing when included in a bundler gem file
|
|
@@ -43,9 +43,9 @@ jobs:
|
|
|
43
43
|
steps:
|
|
44
44
|
# checkout the repo
|
|
45
45
|
- uses: actions/checkout@v1
|
|
46
|
-
|
|
46
|
+
|
|
47
47
|
# install ruby
|
|
48
|
-
- uses: ruby/setup-ruby@
|
|
48
|
+
- uses: ruby/setup-ruby@a2bbe5b1b236842c1cb7dd11e8e3b51e0a616acc
|
|
49
49
|
with:
|
|
50
50
|
ruby-version: "3.0"
|
|
51
51
|
|
|
@@ -60,8 +60,8 @@ jobs:
|
|
|
60
60
|
# run licensed-ci to cache any metadata changes and verify compliance
|
|
61
61
|
- uses: github/licensed-ci@v1
|
|
62
62
|
|
|
63
|
-
# OR
|
|
64
|
-
|
|
63
|
+
# OR
|
|
64
|
+
|
|
65
65
|
# install licensed using gem install
|
|
66
66
|
licensed-ci-gem:
|
|
67
67
|
runs-on: ubuntu-latest
|
|
@@ -69,9 +69,9 @@ jobs:
|
|
|
69
69
|
steps:
|
|
70
70
|
# checkout the repo
|
|
71
71
|
- uses: actions/checkout@v1
|
|
72
|
-
|
|
72
|
+
|
|
73
73
|
# install ruby and bundler
|
|
74
|
-
- uses: ruby/setup-ruby@
|
|
74
|
+
- uses: ruby/setup-ruby@a2bbe5b1b236842c1cb7dd11e8e3b51e0a616acc
|
|
75
75
|
with:
|
|
76
76
|
ruby-version: "3.0"
|
|
77
77
|
|
|
@@ -93,9 +93,9 @@ jobs:
|
|
|
93
93
|
steps:
|
|
94
94
|
# checkout the repo
|
|
95
95
|
- uses: actions/checkout@v1
|
|
96
|
-
|
|
96
|
+
|
|
97
97
|
# install ruby and bundler
|
|
98
|
-
- uses: ruby/setup-ruby@
|
|
98
|
+
- uses: ruby/setup-ruby@a2bbe5b1b236842c1cb7dd11e8e3b51e0a616acc
|
|
99
99
|
with:
|
|
100
100
|
ruby-version: "3.0"
|
|
101
101
|
|
data/lib/licensed/sources/npm.rb
CHANGED
|
@@ -48,7 +48,7 @@ module Licensed
|
|
|
48
48
|
end
|
|
49
49
|
|
|
50
50
|
def packages
|
|
51
|
-
root_dependencies = package_metadata["dependencies"]
|
|
51
|
+
root_dependencies = package_metadata["dependencies"] || {}
|
|
52
52
|
recursive_dependencies(root_dependencies).each_with_object({}) do |(name, results), hsh|
|
|
53
53
|
results.uniq! { |package| package["version"] }
|
|
54
54
|
if results.size == 1
|
|
@@ -18,19 +18,24 @@ module Licensed
|
|
|
18
18
|
end
|
|
19
19
|
|
|
20
20
|
def enumerate_dependencies
|
|
21
|
-
packages.
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
21
|
+
packages.flat_map do |package|
|
|
22
|
+
versions = package.key?("versions") ? package["versions"] : [package["version"]]
|
|
23
|
+
paths = package.key?("paths") ? package["paths"] : [package["path"]]
|
|
24
|
+
|
|
25
|
+
versions.zip(paths).map do |version, path|
|
|
26
|
+
name_with_version = "#{package["name"]}@#{version}"
|
|
27
|
+
Dependency.new(
|
|
28
|
+
name: name_with_version,
|
|
29
|
+
version: version,
|
|
30
|
+
path: path,
|
|
31
|
+
metadata: {
|
|
32
|
+
"type" => PNPM.type,
|
|
33
|
+
"name" => package["name"],
|
|
34
|
+
"summary" => package["description"],
|
|
35
|
+
"homepage" => package["homepage"]
|
|
36
|
+
}
|
|
37
|
+
)
|
|
38
|
+
end
|
|
34
39
|
end
|
|
35
40
|
end
|
|
36
41
|
|
data/lib/licensed/version.rb
CHANGED
data/licensed.gemspec
CHANGED
|
@@ -23,6 +23,7 @@ Gem::Specification.new do |spec|
|
|
|
23
23
|
|
|
24
24
|
spec.required_ruby_version = ">= 3.0.0"
|
|
25
25
|
|
|
26
|
+
spec.add_dependency "csv", "~> 3.3"
|
|
26
27
|
spec.add_dependency "licensee", "~> 9.16"
|
|
27
28
|
spec.add_dependency "thor", "~> 1.2"
|
|
28
29
|
spec.add_dependency "pathname-common_prefix", "~> 0.0.1"
|
metadata
CHANGED
|
@@ -1,15 +1,29 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: licensed
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 5.0.
|
|
4
|
+
version: 5.0.3
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- GitHub
|
|
8
|
-
autorequire:
|
|
8
|
+
autorequire:
|
|
9
9
|
bindir: exe
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date:
|
|
11
|
+
date: 2025-02-20 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
|
+
- !ruby/object:Gem::Dependency
|
|
14
|
+
name: csv
|
|
15
|
+
requirement: !ruby/object:Gem::Requirement
|
|
16
|
+
requirements:
|
|
17
|
+
- - "~>"
|
|
18
|
+
- !ruby/object:Gem::Version
|
|
19
|
+
version: '3.3'
|
|
20
|
+
type: :runtime
|
|
21
|
+
prerelease: false
|
|
22
|
+
version_requirements: !ruby/object:Gem::Requirement
|
|
23
|
+
requirements:
|
|
24
|
+
- - "~>"
|
|
25
|
+
- !ruby/object:Gem::Version
|
|
26
|
+
version: '3.3'
|
|
13
27
|
- !ruby/object:Gem::Dependency
|
|
14
28
|
name: licensee
|
|
15
29
|
requirement: !ruby/object:Gem::Requirement
|
|
@@ -333,7 +347,7 @@ homepage: https://github.com/github/licensed
|
|
|
333
347
|
licenses:
|
|
334
348
|
- MIT
|
|
335
349
|
metadata: {}
|
|
336
|
-
post_install_message:
|
|
350
|
+
post_install_message:
|
|
337
351
|
rdoc_options: []
|
|
338
352
|
require_paths:
|
|
339
353
|
- lib
|
|
@@ -349,7 +363,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
349
363
|
version: '0'
|
|
350
364
|
requirements: []
|
|
351
365
|
rubygems_version: 3.3.26
|
|
352
|
-
signing_key:
|
|
366
|
+
signing_key:
|
|
353
367
|
specification_version: 4
|
|
354
368
|
summary: Extract and validate the licenses of dependencies.
|
|
355
369
|
test_files: []
|