licensed 5.0.1 → 5.0.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (8) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +257 -137
  3. data/Gemfile.lock +6 -4
  4. data/docs/migrations/v3.md +9 -9
  5. data/lib/licensed/sources/npm.rb +1 -1
  6. data/lib/licensed/version.rb +1 -1
  7. data/licensed.gemspec +1 -0
  8. metadata +19 -5
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: a22bd24126e9a99d7a60f24fa920d02064d5c004c84324da503b6042f638b92d
4
- data.tar.gz: e7842f4ae50ad4ef0b597121b11b9275818ad6ce70015ddce7bde900ce9024ee
3
+ metadata.gz: d20897c4058c8e9ad19047b9739d2a8e720bfbc89c905a6bfcb49d9fc7bc3e68
4
+ data.tar.gz: e9ca15847323c009380cdb7aef13eb20115f70e9794cd789e1154d5b64521040
5
5
  SHA512:
6
- metadata.gz: c2564fe6cd8182d85c735621fb92aa449f4465cbffc23fe7ed00760b07437f8b3a6d32720277472906926d8b579152f0a3b6fe6be62b99ae61b87dabb81c68fb
7
- data.tar.gz: '038682180f0bffbe7582ef0fbaaf5d7847173fd8af06d5354e4adbc6916f5702116fb1483b645ca2956b85908140340b27fb39371d371d4b553804fcba67d1d8'
6
+ metadata.gz: 7beedc9a4c747ce3a915afd5f1b22555e59c0e96d025e184cffa8255a61b8d908ef5eaf3d29471e48c6e592e1fa19e4afbc90b647601e488ef8d67495077b988
7
+ data.tar.gz: 6a02a0c4a839d4fb907fccc6f7893e324cc9d53b9ac9aea3c7781d6a876ced89a88f7a08173fe26aa48a756addc477404037012991199f4b809d5228baefaf8f
data/CHANGELOG.md CHANGED
@@ -1,4 +1,5 @@
1
1
  # Changelog
2
+
2
3
  All notable changes to this project will be documented in this file.
3
4
 
4
5
  The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
@@ -6,6 +7,12 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
6
7
 
7
8
  ## [Unreleased]
8
9
 
10
+ ## 5.0.2
11
+
12
+ - Pin setup-ruby and set permissions in test workflow (<https://github.com/licensee/licensed/pull/768>)
13
+ - Pin action versions in test.yml (<https://github.com/licensee/licensed/pull/776>)
14
+ - Add `csv` as a dependency for Ruby 3.4+ (<https://github.com/licensee/licensed/pull/786>)
15
+ - Fix `nil` bug when there's no `dependency` key in `package.json` (<https://github.com/licensee/licensed/pull/791>)
9
16
 
10
17
  ## 5.0.1
11
18
 
@@ -32,145 +39,145 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
32
39
 
33
40
  ### Added
34
41
 
35
- - Licensed status command will alert on stale cached dependency records (https://github.com/github/licensed/pull/657)
42
+ - Licensed status command will alert on stale cached dependency records (<https://github.com/github/licensed/pull/657>)
36
43
 
37
44
  ## 4.3.1
38
45
 
39
46
  ### Changed
40
47
 
41
- - Bump nokogiri to resolve vulnerabilities (https://github.com/github/licensed/pull/648)
48
+ - Bump nokogiri to resolve vulnerabilities (<https://github.com/github/licensed/pull/648>)
42
49
 
43
50
  ## 4.3.0
44
51
 
45
52
  ### Added
46
53
 
47
- - Cocoapods support has been re-enabled using a cocoapods plugin (https://github.com/github/licensed/pull/644)
54
+ - Cocoapods support has been re-enabled using a cocoapods plugin (<https://github.com/github/licensed/pull/644>)
48
55
 
49
56
  ## 4.2.0
50
57
 
51
58
  ### Added
52
59
 
53
- - Reviewed and ignored configuration lists support matching on versions and version ranges (https://github.com/github/licensed/pull/629)
60
+ - Reviewed and ignored configuration lists support matching on versions and version ranges (<https://github.com/github/licensed/pull/629>)
54
61
 
55
62
  ### Fixed
56
63
 
57
- - Licensed should more reliably source dependencies from Gradle >= 8.0 (https://github.com/github/licensed/pull/630)
64
+ - Licensed should more reliably source dependencies from Gradle >= 8.0 (<https://github.com/github/licensed/pull/630>)
58
65
 
59
66
  ## 4.1.0
60
67
 
61
68
  ### Added
62
69
 
63
- - Custom license terms can be added to dependencies via new configuration options (https://github.com/github/licensed/pull/624)
64
- - Licensed is now integrated with pnpm to enumerate dependencies (https://github.com/github/licensed/pull/626)
70
+ - Custom license terms can be added to dependencies via new configuration options (<https://github.com/github/licensed/pull/624>)
71
+ - Licensed is now integrated with pnpm to enumerate dependencies (<https://github.com/github/licensed/pull/626>)
65
72
 
66
73
  ## 4.0.4
67
74
 
68
75
  ### Changed
69
76
 
70
- - Dependency version requirements are more relaxed (https://github.com/github/licensed/pull/619)
77
+ - Dependency version requirements are more relaxed (<https://github.com/github/licensed/pull/619>)
71
78
 
72
79
  ## 4.0.3
73
80
 
74
81
  ### Changed
75
82
 
76
- - Cocoapods dependency enumeration has been disabled (https://github.com/github/licensed/pull/616)
83
+ - Cocoapods dependency enumeration has been disabled (<https://github.com/github/licensed/pull/616>)
77
84
 
78
85
  ### Fixed
79
86
 
80
- - Fixed method signature change in Bundler API with Bundler >= 2.4.4 (:tada: @CvX https://github.com/github/licensed/pull/614)
81
- - Fixed installation dependency compatibility with Rails >= 7.0 (https://github.com/github/licensed/pull/616)
87
+ - Fixed method signature change in Bundler API with Bundler >= 2.4.4 (:tada: @CvX <https://github.com/github/licensed/pull/614>)
88
+ - Fixed installation dependency compatibility with Rails >= 7.0 (<https://github.com/github/licensed/pull/616>)
82
89
 
83
90
  ## 4.0.2
84
91
 
85
92
  ### Fixed
86
93
 
87
- - The path to a gradlew executable can be configured when enumerating gradle dependencies (:tada: @LouisBoudreau https://github.com/github/licensed/pull/610)
94
+ - The path to a gradlew executable can be configured when enumerating gradle dependencies (:tada: @LouisBoudreau <https://github.com/github/licensed/pull/610>)
88
95
 
89
96
  ## 4.0.1
90
97
 
91
98
  ### Fixed
92
99
 
93
- - Running gradle tests will no longer fail when gradle is not available (https://github.com/github/licensed/pull/606)
100
+ - Running gradle tests will no longer fail when gradle is not available (<https://github.com/github/licensed/pull/606>)
94
101
 
95
102
  ## 4.0.0
96
103
 
97
104
  ### Added
98
105
 
99
- - Licensed supports Cocoapods as a dependency source (:tada: @LouisBoudreau https://github.com/github/licensed/pull/584)
100
- - Licensed supports Gradle multi-project builds (:tada: @LouisBoudreau https://github.com/github/licensed/pull/583)
106
+ - Licensed supports Cocoapods as a dependency source (:tada: @LouisBoudreau <https://github.com/github/licensed/pull/584>)
107
+ - Licensed supports Gradle multi-project builds (:tada: @LouisBoudreau <https://github.com/github/licensed/pull/583>)
101
108
 
102
109
  ### Fixed
103
110
 
104
- - Licensed no longer crashes when run with Bundler >= 2.4.0 (:tada: @JoshReedSchramm https://github.com/github/licensed/pull/597)
111
+ - Licensed no longer crashes when run with Bundler >= 2.4.0 (:tada: @JoshReedSchramm <https://github.com/github/licensed/pull/597>)
105
112
 
106
113
  ### Changed
107
114
 
108
- - BREAKING: Licensed no longer ships executables with releases (https://github.com/github/licensed/pull/586)
109
- - BREAKING: Licensed no longer includes support for Go <= 1.11 (https://github.com/github/licensed/pull/602)
115
+ - BREAKING: Licensed no longer ships executables with releases (<https://github.com/github/licensed/pull/586>)
116
+ - BREAKING: Licensed no longer includes support for Go <= 1.11 (<https://github.com/github/licensed/pull/602>)
110
117
 
111
118
  ## 3.9.1
112
119
 
113
120
  ### Fixed
114
121
 
115
- - Updating cached dependency records will more accurately apply `review_changed_license` flag (https://github.com/github/licensed/pull/578)
122
+ - Updating cached dependency records will more accurately apply `review_changed_license` flag (<https://github.com/github/licensed/pull/578>)
116
123
 
117
124
  ## 3.9.0
118
125
 
119
126
  ### Added
120
127
 
121
- - `NOTICE` files can now be generated without cached files in a repository (https://github.com/github/licensed/pull/572)
128
+ - `NOTICE` files can now be generated without cached files in a repository (<https://github.com/github/licensed/pull/572>)
122
129
 
123
130
  ## 3.8.0
124
131
 
125
132
  ### Added
126
133
 
127
- - Licensing compliance status checks can now be used without cached files in a repository (https://github.com/github/licensed/pull/560)
134
+ - Licensing compliance status checks can now be used without cached files in a repository (<https://github.com/github/licensed/pull/560>)
128
135
 
129
136
  ## 3.7.5
130
137
 
131
138
  ### Fixed
132
139
 
133
- - Python dependency metadata will be correctly parsed from the ouput of `pip show` (https://github.com/github/licensed/pull/555)
140
+ - Python dependency metadata will be correctly parsed from the ouput of `pip show` (<https://github.com/github/licensed/pull/555>)
134
141
 
135
142
  ## 3.7.4
136
143
 
137
144
  ### Fixed
138
145
 
139
- - Licenses for Python dependencies built with Hatchling are correctly found (https://github.com/github/licensed/pull/547)
146
+ - Licenses for Python dependencies built with Hatchling are correctly found (<https://github.com/github/licensed/pull/547>)
140
147
 
141
148
  ## 3.7.3
142
149
 
143
150
  ### Fixed
144
151
 
145
- - Swift test fixtures build artifacts are now ignored (:tada: @CvX https://github.com/github/licensed/pull/524)
146
- - Running cargo test fixture setup no longer deletes test files (:tada: @CvX https://github.com/github/licensed/pull/525)
147
- - Bundler test fixtures are compatible with latest macOS silicon(:tada: @CvX https://github.com/github/licensed/pull/528)
148
- - Fix segfaults seen using licensed with ruby 3.0.4 (https://github.com/github/licensed/pull/530)
149
- - Fix compatibility with latest versions of bundler 2.3 (https://github.com/github/licensed/pull/535)
150
- - Fix compatibility with latest versions of bundler 2.3 (:tada: @CvX https://github.com/github/licensed/pull/522)
152
+ - Swift test fixtures build artifacts are now ignored (:tada: @CvX <https://github.com/github/licensed/pull/524>)
153
+ - Running cargo test fixture setup no longer deletes test files (:tada: @CvX <https://github.com/github/licensed/pull/525>)
154
+ - Bundler test fixtures are compatible with latest macOS silicon(:tada: @CvX <https://github.com/github/licensed/pull/528>)
155
+ - Fix segfaults seen using licensed with ruby 3.0.4 (<https://github.com/github/licensed/pull/530>)
156
+ - Fix compatibility with latest versions of bundler 2.3 (<https://github.com/github/licensed/pull/535>)
157
+ - Fix compatibility with latest versions of bundler 2.3 (:tada: @CvX <https://github.com/github/licensed/pull/522>)
151
158
 
152
159
  ## 3.7.2
153
160
 
154
161
  ### Fixed
155
162
 
156
- - Comparing dependency license contents now finds matching contents regardless of the order of the licenses (https://github.com/github/licensed/pull/516)
157
- - Fixed typo in a link in README.md (https://github.com/github/licensed/pull/514)
163
+ - Comparing dependency license contents now finds matching contents regardless of the order of the licenses (<https://github.com/github/licensed/pull/516>)
164
+ - Fixed typo in a link in README.md (<https://github.com/github/licensed/pull/514>)
158
165
 
159
166
  ### Changed
160
167
 
161
- - Elixir testing setup is migrated to erlef/setup-beam (https://github.com/github/licensed/pull/512)
168
+ - Elixir testing setup is migrated to erlef/setup-beam (<https://github.com/github/licensed/pull/512>)
162
169
 
163
170
  ## 3.7.1
164
171
 
165
172
  ### Fixed
166
173
 
167
- - Dependencies' legal notice file matching has been made more strict to reduce false positives on code files containing the word `legal` (https://github.com/github/licensed/pull/510)
174
+ - Dependencies' legal notice file matching has been made more strict to reduce false positives on code files containing the word `legal` (<https://github.com/github/licensed/pull/510>)
168
175
 
169
176
  ## 3.7.0
170
177
 
171
178
  ### Changed
172
179
 
173
- - Pip and pipenv sources will find dependency licenses under `dist-info/license_files` when available (https://github.com/github/licensed/pull/504)
180
+ - Pip and pipenv sources will find dependency licenses under `dist-info/license_files` when available (<https://github.com/github/licensed/pull/504>)
174
181
 
175
182
  ## 3.6.0
176
183
 
@@ -178,17 +185,17 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
178
185
 
179
186
  ### Added
180
187
 
181
- - Composer dev dependencies can optionally be included in enumerated PHP dependencies (:tada: @digilist https://github.com/github/licensed/pull/486)
182
- - Getting started usage documentation (https://github.com/github/licensed/pull/483)
183
- - Initial support for NPM workspaces (https://github.com/github/licensed/pull/485)
188
+ - Composer dev dependencies can optionally be included in enumerated PHP dependencies (:tada: @digilist <https://github.com/github/licensed/pull/486>)
189
+ - Getting started usage documentation (<https://github.com/github/licensed/pull/483>)
190
+ - Initial support for NPM workspaces (<https://github.com/github/licensed/pull/485>)
184
191
 
185
192
  ### Changed
186
193
 
187
- - Transitive dependencies are now enumerated by the `pip` source (https://github.com/github/licensed/pull/480)
194
+ - Transitive dependencies are now enumerated by the `pip` source (<https://github.com/github/licensed/pull/480>)
188
195
 
189
196
  ### Fixed
190
197
 
191
- - `licensed cache --force` will now correctly overwrite existing license classifications (https://github.com/github/licensed/pull/473)
198
+ - `licensed cache --force` will now correctly overwrite existing license classifications (<https://github.com/github/licensed/pull/473>)
192
199
 
193
200
  ## 3.5.0
194
201
 
@@ -196,7 +203,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
196
203
 
197
204
  ### Added
198
205
 
199
- - [Licensee](https://github.com/licensee/licensee) confidence thresholds can be configured in the licensed configuration file (https://github.com/github/licensed/pull/455)
206
+ - [Licensee](https://github.com/licensee/licensee) confidence thresholds can be configured in the licensed configuration file (<https://github.com/github/licensed/pull/455>)
200
207
 
201
208
  ## 3.4.4
202
209
 
@@ -204,7 +211,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
204
211
 
205
212
  ### Fixed
206
213
 
207
- - The npm and pip sources have better protection from strings causing crashes in `Hash#dig` (https://github.com/github/licensed/pull/450)
214
+ - The npm and pip sources have better protection from strings causing crashes in `Hash#dig` (<https://github.com/github/licensed/pull/450>)
208
215
 
209
216
  ## 3.4.3
210
217
 
@@ -212,7 +219,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
212
219
 
213
220
  ### Added
214
221
 
215
- - The npm source handles more cases of missing, optional, peer dependencies (https://github.com/github/licensed/pull/443)
222
+ - The npm source handles more cases of missing, optional, peer dependencies (<https://github.com/github/licensed/pull/443>)
216
223
 
217
224
  ## 3.4.2
218
225
 
@@ -220,7 +227,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
220
227
 
221
228
  ### Fixed
222
229
 
223
- - The yarn source will no longer evaluate package.json files that do not represent project dependencies (https://github.com/github/licensed/pull/439)
230
+ - The yarn source will no longer evaluate package.json files that do not represent project dependencies (<https://github.com/github/licensed/pull/439>)
224
231
 
225
232
  ## 3.4.1
226
233
 
@@ -228,7 +235,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
228
235
 
229
236
  ### Fixed
230
237
 
231
- - Malformed package.json files will no longer crash yarn dependency detection (https://github.com/github/licensed/pull/431)
238
+ - Malformed package.json files will no longer crash yarn dependency detection (<https://github.com/github/licensed/pull/431>)
232
239
 
233
240
  ## 3.4.0
234
241
 
@@ -236,17 +243,17 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
236
243
 
237
244
  ### Added
238
245
 
239
- - New Yarn enumerator with support for berry versions (https://github.com/github/licensed/pull/423)
246
+ - New Yarn enumerator with support for berry versions (<https://github.com/github/licensed/pull/423>)
240
247
 
241
248
  ### Fixed
242
249
 
243
- - Error handling cases return correct values in the Yarn enumerator (https://github.com/github/licensed/pull/425)
244
- - Fixed link in command documentation (:tada: @chibicco https://github.com/github/licensed/pull/416)
245
- - Fixed minor backwards compatibility issue for Ruby 2.3 support (:tada: @dzunk https://github.com/github/licensed/pull/414)
250
+ - Error handling cases return correct values in the Yarn enumerator (<https://github.com/github/licensed/pull/425>)
251
+ - Fixed link in command documentation (:tada: @chibicco <https://github.com/github/licensed/pull/416>)
252
+ - Fixed minor backwards compatibility issue for Ruby 2.3 support (:tada: @dzunk <https://github.com/github/licensed/pull/414>)
246
253
 
247
254
  ### Changed
248
255
 
249
- - Licensed's own dependencies are cached in the repository and kept up to date with GitHub Actions (https://github.com/github/licensed/pull/421)
256
+ - Licensed's own dependencies are cached in the repository and kept up to date with GitHub Actions (<https://github.com/github/licensed/pull/421>)
250
257
 
251
258
  ## 3.3.1
252
259
 
@@ -254,11 +261,11 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
254
261
 
255
262
  ### Fixed
256
263
 
257
- - Fix evaluation of peer dependencies with npm 7 (:tada: @manuelpuyol https://github.com/github/licensed/pull/411)
264
+ - Fix evaluation of peer dependencies with npm 7 (:tada: @manuelpuyol <https://github.com/github/licensed/pull/411>)
258
265
 
259
266
  ### Changed
260
267
 
261
- - Manifest source evaluation performance improvements (https://github.com/github/licensed/pull/407)
268
+ - Manifest source evaluation performance improvements (<https://github.com/github/licensed/pull/407>)
262
269
 
263
270
  ## 3.3.0
264
271
 
@@ -266,11 +273,11 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
266
273
 
267
274
  ### Added
268
275
 
269
- - New cargo source enumerates rust dependencies (https://github.com/github/licensed/pull/404)
276
+ - New cargo source enumerates rust dependencies (<https://github.com/github/licensed/pull/404>)
270
277
 
271
278
  ### Changed
272
279
 
273
- - Removed non-functional files from gem builds (https://github.com/github/licensed/pull/405)
280
+ - Removed non-functional files from gem builds (<https://github.com/github/licensed/pull/405>)
274
281
 
275
282
  ## 3.2.3
276
283
 
@@ -278,8 +285,8 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
278
285
 
279
286
  ### Fixed
280
287
 
281
- - Bundler source will no longer infinitely recurse when enumerating specifications (https://github.com/github/licensed/pull/402)
282
- - Using the `--sources` command line option will no longer delete skipped sources' cached files (https://github.com/github/licensed/pull/401)
288
+ - Bundler source will no longer infinitely recurse when enumerating specifications (<https://github.com/github/licensed/pull/402>)
289
+ - Using the `--sources` command line option will no longer delete skipped sources' cached files (<https://github.com/github/licensed/pull/401>)
283
290
 
284
291
  ## 3.2.2
285
292
 
@@ -287,7 +294,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
287
294
 
288
295
  ### Fixed
289
296
 
290
- - Bundler source works properly again when used outside of `bundle exec` (https://github.com/github/licensed/pull/397)
297
+ - Bundler source works properly again when used outside of `bundle exec` (<https://github.com/github/licensed/pull/397>)
291
298
 
292
299
  ## 3.2.1
293
300
 
@@ -295,13 +302,13 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
295
302
 
296
303
  ### Changed
297
304
 
298
- - Updated multiple dependency versions (:tada: @mmorel-35 https://github.com/github/licensed/pull/385, https://github.com/github/licensed/pull/389)
299
- - Go homepage links use pkg.go.dev instead of godoc.org (:tada: @mmorel-35 https://github.com/github/licensed/commit/73cfbbe954a3e8c8cbaf8b68253053b157e01b79)
300
- - Local development ruby version changed to 2.7.4 (https://github.com/github/licensed/pull/393)
305
+ - Updated multiple dependency versions (:tada: @mmorel-35 <https://github.com/github/licensed/pull/385>, <https://github.com/github/licensed/pull/389>)
306
+ - Go homepage links use pkg.go.dev instead of godoc.org (:tada: @mmorel-35 <https://github.com/github/licensed/commit/73cfbbe954a3e8c8cbaf8b68253053b157e01b79>)
307
+ - Local development ruby version changed to 2.7.4 (<https://github.com/github/licensed/pull/393>)
301
308
 
302
309
  ### Fixed
303
310
 
304
- - Bundler source correctly finds platform specific dependencies (https://github.com/github/licensed/pull/392)
311
+ - Bundler source correctly finds platform specific dependencies (<https://github.com/github/licensed/pull/392>)
305
312
 
306
313
  ## 3.2.0
307
314
 
@@ -309,18 +316,18 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
309
316
 
310
317
  ### Added
311
318
 
312
- - Application names can be dynamically generated based on the path to the application source (https://github.com/github/licensed/pull/375)
319
+ - Application names can be dynamically generated based on the path to the application source (<https://github.com/github/licensed/pull/375>)
313
320
 
314
321
  ### Changed
315
322
 
316
- - Updated command documentation (https://github.com/github/licensed/pull/378, https://github.com/github/licensed/pull/380/files)
317
- - Updated configuration documentation (https://github.com/github/licensed/pull/375)
318
- - Cache and status commands give additional diagnostic output when using JSON and YAML formatters (https://github.com/github/licensed/pull/378)
319
- - Status command will give users a link to documentation when compliance checks fail (https://github.com/github/licensed/pull/381)
323
+ - Updated command documentation (<https://github.com/github/licensed/pull/378>, <https://github.com/github/licensed/pull/380/files>)
324
+ - Updated configuration documentation (<https://github.com/github/licensed/pull/375>)
325
+ - Cache and status commands give additional diagnostic output when using JSON and YAML formatters (<https://github.com/github/licensed/pull/378>)
326
+ - Status command will give users a link to documentation when compliance checks fail (<https://github.com/github/licensed/pull/381>)
320
327
 
321
328
  ### Fixed
322
329
 
323
- - The bundler source correctly checks that the path bundler specifies a gem is loaded from is a file (https://github.com/github/licensed/pull/379)
330
+ - The bundler source correctly checks that the path bundler specifies a gem is loaded from is a file (<https://github.com/github/licensed/pull/379>)
324
331
 
325
332
  ## 3.1.0
326
333
 
@@ -328,17 +335,18 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
328
335
 
329
336
  ### Added
330
337
 
331
- - Licensed supports Swift/Swift package manager as a dependency source (:tada: @mattt https://github.com/github/licensed/pull/363)'
338
+ - Licensed supports Swift/Swift package manager as a dependency source (:tada: @mattt <https://github.com/github/licensed/pull/363>)'
332
339
 
333
340
  ### Changed
334
341
 
335
- - The `source_path` configuration property accepts arrays of inclusion and exclusion glob patterns (https://github.com/github/licensed/pull/368)
336
- - The Nuget source now uses configured fallback folders to find dependencies that are not in found in the project folder (https://github.com/github/licensed/pull/366)
337
- - The Nuget source supports a configurable property for the path from the project source path to the project's `obj` folder (https://github.com/github/licensed/pull/365)
342
+ - The `source_path` configuration property accepts arrays of inclusion and exclusion glob patterns (<https://github.com/github/licensed/pull/368>)
343
+ - The Nuget source now uses configured fallback folders to find dependencies that are not in found in the project folder (<https://github.com/github/licensed/pull/366>)
344
+ - The Nuget source supports a configurable property for the path from the project source path to the project's `obj` folder (<https://github.com/github/licensed/pull/365>)
338
345
 
339
346
  ### Fixed
340
- - The Go source's checks for local packages will correctly find paths in case-insensitive file systems (https://github.com/github/licensed/pull/370)
341
- - The Bundler source will no longer unnecessarily reset the local Bundler environment configuration (https://github.com/github/licensed/pull/372)
347
+
348
+ - The Go source's checks for local packages will correctly find paths in case-insensitive file systems (<https://github.com/github/licensed/pull/370>)
349
+ - The Bundler source will no longer unnecessarily reset the local Bundler environment configuration (<https://github.com/github/licensed/pull/372>)
342
350
 
343
351
  ## 3.0.1
344
352
 
@@ -346,7 +354,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
346
354
 
347
355
  ### Fixed
348
356
 
349
- - The bundler source will correctly enumerate dependencies pulled with a `git:` directive (https://github.com/github/licensed/pull/360)
357
+ - The bundler source will correctly enumerate dependencies pulled with a `git:` directive (<https://github.com/github/licensed/pull/360>)
350
358
 
351
359
  ## 3.0.0
352
360
 
@@ -364,7 +372,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
364
372
 
365
373
  ### Fixed
366
374
 
367
- - The pip source works with package names containing periods (:tada: @bcskda https://github.com/github/licensed/pull/350)
375
+ - The pip source works with package names containing periods (:tada: @bcskda <https://github.com/github/licensed/pull/350>)
368
376
 
369
377
  ## 2.15.1
370
378
 
@@ -372,161 +380,209 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
372
380
 
373
381
  ### Changed
374
382
 
375
- - The npm source will ignore dependencies that are marked as both extraneous and missing (https://github.com/github/licensed/pull/347)
383
+ - The npm source will ignore dependencies that are marked as both extraneous and missing (<https://github.com/github/licensed/pull/347>)
376
384
 
377
385
  ## 2.15.0
386
+
378
387
  2021-03-24
379
388
 
380
389
  ### Added
381
- - Support for npm 7 (https://github.com/github/licensed/pull/341)
390
+
391
+ - Support for npm 7 (<https://github.com/github/licensed/pull/341>)
382
392
 
383
393
  ### Fixed
384
- - Files in the manifest source will be found correctly for apps that are not at the repository root (https://github.com/github/licensed/pull/345)
394
+
395
+ - Files in the manifest source will be found correctly for apps that are not at the repository root (<https://github.com/github/licensed/pull/345>)
385
396
 
386
397
  ## 2.14.4
398
+
387
399
  2021-02-09
388
400
 
389
401
  ### Added
390
- - `list` and `cache` commands optionally print output in JSON or YML formats using the `--format/-f` flag (https://github.com/github/licensed/pull/334)
391
- - `list` command will include detected license keys using the `--licenses/-l` flag (https://github.com/github/licensed/pull/334)
402
+
403
+ - `list` and `cache` commands optionally print output in JSON or YML formats using the `--format/-f` flag (<https://github.com/github/licensed/pull/334>)
404
+ - `list` command will include detected license keys using the `--licenses/-l` flag (<https://github.com/github/licensed/pull/334>)
392
405
 
393
406
  ## 2.14.3
407
+
394
408
  2020-12-11
395
409
 
396
410
  ### Fixed
397
- - Auto-generating license text for a known license will no longer raise an error if the found license has no text (:tada: @Eun https://github.com/github/licensed/pull/328)
411
+
412
+ - Auto-generating license text for a known license will no longer raise an error if the found license has no text (:tada: @Eun <https://github.com/github/licensed/pull/328>)
398
413
 
399
414
  ## 2.14.2
415
+
400
416
  2020-11-20
401
417
 
402
418
  ### Fixed
403
- - Yarn source correctly finds dependency paths on disk (https://github.com/github/licensed/pull/326)
404
- - Go source better handles finding dependencies that have been vendored (https://github.com/github/licensed/pull/323)
419
+
420
+ - Yarn source correctly finds dependency paths on disk (<https://github.com/github/licensed/pull/326>)
421
+ - Go source better handles finding dependencies that have been vendored (<https://github.com/github/licensed/pull/323>)
405
422
 
406
423
  ## 2.14.1
424
+
407
425
  2020-10-09
408
426
 
409
427
  ### Fixed
410
- - Shell command output is encoded to UTF8 (https://github.com/github/licensed/pull/319)
428
+
429
+ - Shell command output is encoded to UTF8 (<https://github.com/github/licensed/pull/319>)
411
430
 
412
431
  ## 2.14.0
432
+
413
433
  2020-10-04
414
434
 
415
435
  ### Added
416
- - `reviewed` dependencies can use glob pattern matching (https://github.com/github/licensed/pull/313)
436
+
437
+ - `reviewed` dependencies can use glob pattern matching (<https://github.com/github/licensed/pull/313>)
417
438
 
418
439
  ### Fixed
419
- - Fix configuring source path globs that expand into a single directory (https://github.com/github/licensed/pull/312)
440
+
441
+ - Fix configuring source path globs that expand into a single directory (<https://github.com/github/licensed/pull/312>)
420
442
 
421
443
  ## 2.13.0
444
+
422
445
  2020-09-23
423
446
 
424
447
  ### Added
425
- - `status` command results can be output in YAML and JSON formats (:tada: @julianvilas https://github.com/github/licensed/pull/303)
448
+
449
+ - `status` command results can be output in YAML and JSON formats (:tada: @julianvilas <https://github.com/github/licensed/pull/303>)
426
450
 
427
451
  ### Fixed
428
- - `licensed` no longer crashes when parsing invalid YAML from cached records (https://github.com/github/licensed/pull/306)
429
- - NPM source will no longer crash when invalid JSON is returned from npm CLI calls (https://github.com/github/licensed/pull/300)
430
- - Bundler source is fixed to work properly with `gems.rb` lockfiles (https://github.com/github/licensed/pull/299)
452
+
453
+ - `licensed` no longer crashes when parsing invalid YAML from cached records (<https://github.com/github/licensed/pull/306>)
454
+ - NPM source will no longer crash when invalid JSON is returned from npm CLI calls (<https://github.com/github/licensed/pull/300>)
455
+ - Bundler source is fixed to work properly with `gems.rb` lockfiles (<https://github.com/github/licensed/pull/299>)
431
456
 
432
457
  ## 2.12.2
458
+
433
459
  2020-07-07
434
460
 
435
461
  ### Changed
436
- - Cleaned up ruby 2.7 warnings (:tada: @jurre https://github.com/github/licensed/pull/292)
437
- - Cleaned up additional warnings in tests (https://github.com/github/licensed/pull/293)
462
+
463
+ - Cleaned up ruby 2.7 warnings (:tada: @jurre <https://github.com/github/licensed/pull/292>)
464
+ - Cleaned up additional warnings in tests (<https://github.com/github/licensed/pull/293>)
438
465
 
439
466
  ## 2.12.1
467
+
440
468
  2020-06-30
441
469
 
442
470
  ### Fixed
443
- - `licensed` no longer exits an error code when using the `--sources` CLI argument (https://github.com/github/licensed/pull/290)
471
+
472
+ - `licensed` no longer exits an error code when using the `--sources` CLI argument (<https://github.com/github/licensed/pull/290>)
444
473
 
445
474
  ## 2.12.0
475
+
446
476
  2020-06-19
447
477
 
448
478
  ### Added
449
- - `--sources` argument for cache, list, status and notices commands to filter running sources (https://github.com/github/licensed/pull/287)
479
+
480
+ - `--sources` argument for cache, list, status and notices commands to filter running sources (<https://github.com/github/licensed/pull/287>)
450
481
 
451
482
  ### Fixed
452
- - `cache` command will not remove files outside of enabled source cache paths (https://github.com/github/licensed/pull/287)
483
+
484
+ - `cache` command will not remove files outside of enabled source cache paths (<https://github.com/github/licensed/pull/287>)
453
485
 
454
486
  ## 2.11.1
487
+
455
488
  2020-06-09
456
489
 
457
490
  ### Fixed
458
- - `notices` command properly reads cached dependency notices contents (https://github.com/github/licensed/pull/283)
491
+
492
+ - `notices` command properly reads cached dependency notices contents (<https://github.com/github/licensed/pull/283>)
459
493
 
460
494
  ## 2.11.0
495
+
461
496
  2020-06-02
462
497
 
463
498
  ### Added
464
- - `notices` command to create a `NOTICE` file for each configured app (https://github.com/github/licensed/pull/277)
499
+
500
+ - `notices` command to create a `NOTICE` file for each configured app (<https://github.com/github/licensed/pull/277>)
465
501
 
466
502
  ### Fixed
467
- - NuGet source no longer crashes on a non-existent dependency path (https://github.com/github/licensed/pull/280)
468
- - Go source no longer crashes on a non-existent dependency package path (https://github.com/github/licensed/pull/274)
503
+
504
+ - NuGet source no longer crashes on a non-existent dependency path (<https://github.com/github/licensed/pull/280>)
505
+ - Go source no longer crashes on a non-existent dependency package path (<https://github.com/github/licensed/pull/274>)
469
506
 
470
507
  ## 2.10.0
508
+
471
509
  2020-05-15
472
510
 
473
511
  ### Changed
474
- - NPM source ignores missing peer dependencies (https://github.com/github/licensed/pull/267)
512
+
513
+ - NPM source ignores missing peer dependencies (<https://github.com/github/licensed/pull/267>)
475
514
 
476
515
  ### Added
477
- - NuGet source (:tada: @zarenner https://github.com/github/licensed/pull/261)
478
- - Multiple apps can share a single cache location (https://github.com/github/licensed/pull/263)
516
+
517
+ - NuGet source (:tada: @zarenner <https://github.com/github/licensed/pull/261>)
518
+ - Multiple apps can share a single cache location (<https://github.com/github/licensed/pull/263>)
479
519
 
480
520
  ## 2.9.2
521
+
481
522
  2020-04-28
482
523
 
483
524
  ### Changed
484
- - `licensee` minimum version bumped to 9.13.2 (https://github.com/github/licensed/pull/256)
525
+
526
+ - `licensee` minimum version bumped to 9.13.2 (<https://github.com/github/licensed/pull/256>)
485
527
 
486
528
  ## 2.9.1
529
+
487
530
  2020-03-24
488
531
 
489
532
  ### Changed
490
- - relaxed gem version restrictions on Thor (:tada: @eileencodes https://github.com/github/licensed/pull/254)
533
+
534
+ - relaxed gem version restrictions on Thor (:tada: @eileencodes <https://github.com/github/licensed/pull/254>)
491
535
 
492
536
  ## 2.9.0
537
+
493
538
  2020-03-19
494
539
 
495
540
  ### Added
496
- - Source paths use glob pattern matching (https://github.com/github/licensed/pull/245)
541
+
542
+ - Source paths use glob pattern matching (<https://github.com/github/licensed/pull/245>)
497
543
 
498
544
  ### Fixed
499
- - Mix source supports updates to mix.lock format (:tada: @bruce https://github.com/github/licensed/pull/242)
500
- - Go source supports `go list` format changes in go 1.14 (https://github.com/github/licensed/pull/247)
545
+
546
+ - Mix source supports updates to mix.lock format (:tada: @bruce <https://github.com/github/licensed/pull/242>)
547
+ - Go source supports `go list` format changes in go 1.14 (<https://github.com/github/licensed/pull/247>)
501
548
 
502
549
  ### Changed
503
- - `licensed cache` will flag dependencies for re-review when license text changes (https://github.com/github/licensed/pull/248)
504
- - `licensed status` will raise errors on dependencies that need re-review (https://github.com/github/licensed/pull/248)
505
- - `licensee` minimum version bumped to 9.13.1 (https://github.com/github/licensed/pull/251)
550
+
551
+ - `licensed cache` will flag dependencies for re-review when license text changes (<https://github.com/github/licensed/pull/248>)
552
+ - `licensed status` will raise errors on dependencies that need re-review (<https://github.com/github/licensed/pull/248>)
553
+ - `licensee` minimum version bumped to 9.13.1 (<https://github.com/github/licensed/pull/251>)
506
554
 
507
555
  ## 2.8.0
556
+
508
557
  2020-01-03
509
558
 
510
559
  ### Added
511
- - Yarn source (https://github.com/github/licensed/pull/232, https://github.com/github/licensed/pull/233, https://github.com/github/licensed/pull/236)
512
- - NPM source has a new option to include non-production dependencies (https://github.com/github/licensed/pull/231)
560
+
561
+ - Yarn source (<https://github.com/github/licensed/pull/232>, <https://github.com/github/licensed/pull/233>, <https://github.com/github/licensed/pull/236>)
562
+ - NPM source has a new option to include non-production dependencies (<https://github.com/github/licensed/pull/231>)
513
563
 
514
564
  ### Fixed
515
- - Cabal source will no longer crash if packages aren't found (https://github.com/github/licensed/pull/230)
565
+
566
+ - Cabal source will no longer crash if packages aren't found (<https://github.com/github/licensed/pull/230>)
516
567
 
517
568
  ## 2.7.0
569
+
518
570
  2019-11-10
519
571
 
520
572
  ### Added
521
- - License text is automatically generated for known licenses when not otherwise available (https://github.com/github/licensed/pull/223)
573
+
574
+ - License text is automatically generated for known licenses when not otherwise available (<https://github.com/github/licensed/pull/223>)
522
575
 
523
576
  ### Changed
524
- - Ignoring dependencies uses glob pattern matching (https://github.com/github/licensed/pull/225)
577
+
578
+ - Ignoring dependencies uses glob pattern matching (<https://github.com/github/licensed/pull/225>)
525
579
 
526
580
  ## 2.6.2
581
+
527
582
  2019-11-03
528
583
 
529
584
  ### Changed
585
+
530
586
  - A number of improvements to the go dependency enumerator
531
587
  - use `go env GOPATH` as a default if no other GOPATH is found
532
588
  - better compatibility with go modules when finding license content
@@ -535,94 +591,121 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
535
591
  - better checks for standard packages, reducing the amount of cached content
536
592
 
537
593
  ## 2.6.1
594
+
538
595
  2019-10-26
539
596
 
540
597
  ### Changed
541
- - Performance improvements during dependency enumeration (:tada: @krzysztof-pawlik-gat https://github.com/github/licensed/pull/204, https://github.com/github/licensed/pull/207) (https://github.com/github/licensed/pull/210)
598
+
599
+ - Performance improvements during dependency enumeration (:tada: @krzysztof-pawlik-gat <https://github.com/github/licensed/pull/204>, <https://github.com/github/licensed/pull/207>) (<https://github.com/github/licensed/pull/210>)
542
600
 
543
601
  ## 2.6.0
602
+
544
603
  2019-10-22
545
604
 
546
605
  ### Added
547
- - Mix source for Elixir (:tada: @bruce https://github.com/github/licensed/pull/195)
606
+
607
+ - Mix source for Elixir (:tada: @bruce <https://github.com/github/licensed/pull/195>)
548
608
 
549
609
  ## 2.5.0
610
+
550
611
  2019-09-26
551
612
 
552
613
  ### Added
553
- - `env` command to output application environment configuration (https://github.com/github/licensed/pull/187, https://github.com/github/licensed/pull/191)
614
+
615
+ - `env` command to output application environment configuration (<https://github.com/github/licensed/pull/187>, <https://github.com/github/licensed/pull/191>)
554
616
 
555
617
  ### Changed
556
- - `status` command will pass if multiple allowed licenses are found (https://github.com/github/licensed/pull/188)
618
+
619
+ - `status` command will pass if multiple allowed licenses are found (<https://github.com/github/licensed/pull/188>)
557
620
 
558
621
  ## 2.4.0
622
+
559
623
  2019-09-15
560
624
 
561
625
  ### Added
562
- - Composer source for PHP (https://github.com/github/licensed/pull/182)
626
+
627
+ - Composer source for PHP (<https://github.com/github/licensed/pull/182>)
563
628
 
564
629
  ## 2.3.2
630
+
565
631
  2019-08-26
566
632
 
567
633
  ### Fixed
634
+
568
635
  - Bundler with/without array settings are properly handled for bundler 1.15.x
569
636
 
570
637
  ## 2.3.1
638
+
571
639
  2019-08-20
572
640
 
573
641
  ### Changed
574
- - Using the npm source with yarn, "missing" dependencies are no longer considered errors (:tada: @krzysztof-pawlik-gat https://github.com/github/licensed/pull/170)
575
- - The bundler source now calls `gem specification` with dependency version requirements (https://github.com/github/licensed/pull/173)
642
+
643
+ - Using the npm source with yarn, "missing" dependencies are no longer considered errors (:tada: @krzysztof-pawlik-gat <https://github.com/github/licensed/pull/170>)
644
+ - The bundler source now calls `gem specification` with dependency version requirements (<https://github.com/github/licensed/pull/173>)
576
645
 
577
646
  ## 2.3.0
647
+
578
648
  2019-05-19
579
649
 
580
650
  ### Added
581
- - New Pipenv dependency source enumerator (:tada: @krzysztof-pawlik-gat https://github.com/github/licensed/pull/167)
651
+
652
+ - New Pipenv dependency source enumerator (:tada: @krzysztof-pawlik-gat <https://github.com/github/licensed/pull/167>)
582
653
 
583
654
  ## 2.2.0
655
+
584
656
  2019-05-11
585
657
 
586
658
  ### Added
587
- - Content hash versioning strategy for go and manifest sources (https://github.com/github/licensed/pull/164)
659
+
660
+ - Content hash versioning strategy for go and manifest sources (<https://github.com/github/licensed/pull/164>)
588
661
 
589
662
  ### Fixed
590
- - Python source handles urls and package names with "-" in requirements.txt (:tada: @krzysztof-pawlik-gat https://github.com/github/licensed/pull/165)
663
+
664
+ - Python source handles urls and package names with "-" in requirements.txt (:tada: @krzysztof-pawlik-gat <https://github.com/github/licensed/pull/165>)
591
665
 
592
666
  ## 2.1.0
667
+
593
668
  2019-04-16
594
669
 
595
670
  ### Added
596
- - New Gradle dependency source enumerator (:tada: @dbussink https://github.com/github/licensed/pull/150, @jandersson-svt https://github.com/github/licensed/pull/159)
597
- - Metadata added to distributed packages (https://github.com/github/licensed/pull/160)
671
+
672
+ - New Gradle dependency source enumerator (:tada: @dbussink <https://github.com/github/licensed/pull/150>, @jandersson-svt <https://github.com/github/licensed/pull/159>)
673
+ - Metadata added to distributed packages (<https://github.com/github/licensed/pull/160>)
598
674
 
599
675
  ### Changes
600
- - Bundler dependency source loads license key from a gem's cached gemspec file as a fallback (https://github.com/github/licensed/pull/154)
601
- - Licensed will only raise errors on an empty dependency path when caching records (https://github.com/github/licensed/pull/149)
676
+
677
+ - Bundler dependency source loads license key from a gem's cached gemspec file as a fallback (<https://github.com/github/licensed/pull/154>)
678
+ - Licensed will only raise errors on an empty dependency path when caching records (<https://github.com/github/licensed/pull/149>)
602
679
 
603
680
  ### Fixed
604
- - Migrating to v2 will no longer crash trying to migrate cached records that don't exist (https://github.com/github/licensed/pull/148)
605
- - Reported warnings will no longer crash licensed when caching records (https://github.com/github/licensed/pull/147)
681
+
682
+ - Migrating to v2 will no longer crash trying to migrate cached records that don't exist (<https://github.com/github/licensed/pull/148>)
683
+ - Reported warnings will no longer crash licensed when caching records (<https://github.com/github/licensed/pull/147>)
606
684
 
607
685
  ## 2.0.1
686
+
608
687
  2019-02-14
609
688
 
610
689
  ### Changes
690
+
611
691
  - Dependency paths that don't exist on the local disk are reported as warnings
612
692
  - Cache, status and list output is sorted by app name, source type and dependency name
613
693
  - Bumped `licensee` gem requirement
614
694
 
615
695
  ## 2.0.0
696
+
616
697
  2019-02-09
617
698
 
618
699
  **This is a major release and includes breaking changes to the configuration and cached record file formats**
619
700
 
620
701
  ### Added
702
+
621
703
  - New `migrate` command to automatically update configuration and cached record file formats
622
704
  - New extensible reporting infrastructure
623
705
  - New base command and source classes to abstract away implementation details
624
706
 
625
707
  ### Changes
708
+
626
709
  - Cached dependency metadata files are now stored entirely as YAML, with `.dep.yml` extension
627
710
  - The Bundler dependency source is now identified in configuration files and output as `bundler` instead of `rubygem`
628
711
  - Refactored sources for better consistency between classes
@@ -631,134 +714,171 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
631
714
  - Updated Dependency classes for better integration with `licensee`
632
715
 
633
716
  ### Fixed
717
+
634
718
  - Licensed no longer exits on errors when evaluating dependency sources or finding dependencies
635
719
  - The Bundler dependency source correctly finds the `bundler` gem as a dependency in more cases
636
720
 
637
721
  ## 1.5.2
722
+
638
723
  2018-12-27
639
724
 
640
725
  ### Changes
641
- - Go source added support for Go modules and Golang 1.11+ (https://github.com/github/licensed/pull/113)
726
+
727
+ - Go source added support for Go modules and Golang 1.11+ (<https://github.com/github/licensed/pull/113>)
642
728
 
643
729
  ### Fixed
644
- - Licensed will have a non-zero exit code when commands fail (:tada: @parkr https://github.com/github/licensed/pull/111)
730
+
731
+ - Licensed will have a non-zero exit code when commands fail (:tada: @parkr <https://github.com/github/licensed/pull/111>)
645
732
 
646
733
  ## 1.5.1
734
+
647
735
  2018-10-30
648
736
 
649
737
  ### Fixed
650
- - Fixed a scenario where licensed wasn't finding bundler dependencies when run as an executable due to a ruby version mismatch (https://github.com/github/licensed/pull/106)
738
+
739
+ - Fixed a scenario where licensed wasn't finding bundler dependencies when run as an executable due to a ruby version mismatch (<https://github.com/github/licensed/pull/106>)
651
740
 
652
741
  ## 1.5.0
742
+
653
743
  2018-10-24
654
744
 
655
745
  ### Added
656
- - `licensed (version | -v | --version)` command to see the current licensed version (:tada: @mwagz! https://github.com/github/licensed/pull/101)
746
+
747
+ - `licensed (version | -v | --version)` command to see the current licensed version (:tada: @mwagz! <https://github.com/github/licensed/pull/101>)
657
748
 
658
749
  ### Fixed
659
- - NPM source no longer raises an error when ignored dependencies aren't found (:tada: @mwagz! https://github.com/github/licensed/pull/100)
660
- - Checking for a Git repo will no longer possibly modify `.git/index` (:tada: @dbussink https://github.com/github/licensed/pull/102)
661
- - Fixed a scenario where licensed wasn't finding bundler dependencies when run as an executable (https://github.com/github/licensed/pull/103)
750
+
751
+ - NPM source no longer raises an error when ignored dependencies aren't found (:tada: @mwagz! <https://github.com/github/licensed/pull/100>)
752
+ - Checking for a Git repo will no longer possibly modify `.git/index` (:tada: @dbussink <https://github.com/github/licensed/pull/102>)
753
+ - Fixed a scenario where licensed wasn't finding bundler dependencies when run as an executable (<https://github.com/github/licensed/pull/103>)
662
754
 
663
755
  ## 1.4.0
756
+
664
757
  2018-10-20
665
758
 
666
759
  ### Added
760
+
667
761
  - Git Submodules dependency source :tada:
668
762
  - Configuration option to explicitly set a root absolute path
669
763
 
670
764
  ### Changes
765
+
671
766
  - `COPYING` file is no longer matched as a legal file
672
767
 
673
768
  ### Fixed
769
+
674
770
  - NPM source will enumerate multiple versions of the same dependency
675
771
  - Running Licensed outside of a Git repository no longer raises an error
676
772
  - Packaging scripts will correctly return to the previous branch when the script is finished
677
773
 
678
774
  ## 1.3.4
775
+
679
776
  2018-09-20
680
777
 
681
778
  ### Changes
779
+
682
780
  - Bundler source will avoid looking for a gemspec file when possible
683
781
 
684
782
  ## 1.3.3
783
+
685
784
  2018-09-07
686
785
 
687
786
  ### Fixed
787
+
688
788
  - Manifest source configuration globs correctly enumerates files from within submodules
689
789
  - The manifest source no longer errors when getting version information from submodules
690
790
 
691
791
  ## 1.3.2
792
+
692
793
  2018-08-15
693
794
 
694
795
  ### Fixed
796
+
695
797
  - Fixed issue when multiple versions of a cabal package are found
696
798
 
697
799
  ## 1.3.1
800
+
698
801
  2018-08-01
699
802
 
700
803
  ### Fixed
804
+
701
805
  - Fixed regression finding ruby gems by path
702
806
 
703
807
  ## 1.3.0
808
+
704
809
  2018-07-25
705
810
 
706
811
  ### Added
812
+
707
813
  - Manifests for the manifest dependency source can be specified using glob patterns in the configuration
708
814
  - Paths to licenses for dependencies from the manifest dependency source can be specified in the configuration
709
815
  - Manifest dependency source looks for license content in C-style comments if a license file isn't found
710
816
 
711
817
  ## Changes
818
+
712
819
  - GitHub is no longer queried to find remote license information
713
820
  - Removed custom logic around determining whether to use the license key from `licensee`
714
821
  - NPM dependency enumeration doesn't use `npm list`
715
822
  - Licensed now tracks content from multiple license files when available
716
823
 
717
824
  ### Fixed
825
+
718
826
  - Fixed regression finding platform-specific ruby gems
719
827
 
720
828
  ## 1.2.0
829
+
721
830
  2018-06-22
722
831
 
723
832
  ### Added
833
+
724
834
  - Building and packaging distributable exes for licensed releases
725
835
  - Can now configure which Gemfile groups are excluded from dependency enumeration
726
836
 
727
837
  ### Fixed
838
+
728
839
  - Bundler is no longer always reported as a dependency
729
840
  - Set the minimum required ruby version for licensed
730
841
 
731
842
  ## 1.1.0
843
+
732
844
  2018-06-04
733
845
 
734
846
  ### Added
847
+
735
848
  - Pip dependency source :tada:
736
849
  - Go Dep dependency source :tada:
737
850
 
738
851
  ### Changed
852
+
739
853
  - Changed how `sources` configuration property affects which sources are enabled
740
854
  - Raise informative error messages when shell commands fail
741
855
 
742
856
  ### Fixed
857
+
743
858
  - Don't reuse cached license when cached version metadata is missing
744
859
  - Disable dependency sources when dependent tools are not available
745
860
  - Vendored packages from the go std library are properly excluded
746
861
  - Cabal dependency enumeration properly includes executable targets
747
862
 
748
863
  ## 1.0.1
864
+
749
865
  2018-04-26
750
866
 
751
867
  ### Added
868
+
752
869
  - GOPATH settable in configuration file
753
870
 
754
871
  ### Changed
872
+
755
873
  - Reuse "license" metadata property when license text has not changed
756
874
 
757
875
  ### Fixed
876
+
758
877
  - Path expansion for cabal "ghc_package_db" configuration setting occurs from repository root
759
878
  - Local Gemfile(.lock) files correctly used in enumerating Bundler source dependencies
760
879
 
761
880
  ## 1.0.0
881
+
762
882
  2018-02-20
763
883
 
764
884
  Initial release :tada:
data/Gemfile.lock CHANGED
@@ -1,7 +1,8 @@
1
1
  PATH
2
2
  remote: .
3
3
  specs:
4
- licensed (5.0.1)
4
+ licensed (5.0.2)
5
+ csv (~> 3.3)
5
6
  json (~> 2.6)
6
7
  licensee (~> 9.16)
7
8
  parallel (~> 1.22)
@@ -32,6 +33,7 @@ GEM
32
33
  byebug (11.1.3)
33
34
  concurrent-ruby (1.2.3)
34
35
  connection_pool (2.4.1)
36
+ csv (3.3.2)
35
37
  dotenv (3.1.4)
36
38
  drb (2.2.1)
37
39
  faraday (2.12.1)
@@ -42,7 +44,7 @@ GEM
42
44
  net-http (>= 0.5.0)
43
45
  i18n (1.14.4)
44
46
  concurrent-ruby (~> 1.0)
45
- json (2.8.2)
47
+ json (2.9.1)
46
48
  licensee (9.18.0)
47
49
  dotenv (>= 2, < 4)
48
50
  octokit (>= 4.20, < 10.0)
@@ -51,10 +53,10 @@ GEM
51
53
  thor (>= 0.19, < 2.0)
52
54
  logger (1.6.1)
53
55
  mini_portile2 (2.8.8)
54
- minitest (5.25.1)
56
+ minitest (5.25.4)
55
57
  minitest-hooks (1.5.2)
56
58
  minitest (> 5.3)
57
- mocha (2.6.1)
59
+ mocha (2.7.1)
58
60
  ruby2_keywords (>= 0.0.5)
59
61
  mutex_m (0.2.0)
60
62
  net-http (0.5.0)
data/docs/migrations/v3.md CHANGED
@@ -16,7 +16,7 @@ Using licensed to enumerate bundler dependencies in a GitHub Actions workflow wi
16
16
 
17
17
  If you are using licensed in a GitHub Actions workflow, [github/setup-licensed](https://github.com/github/setup-licensed) has been updated according to this breaking change. `setup-licensed` will install the licensed gem when ruby is available, or the licensed executable when ruby is not available. Alternatively, you can `gem install` licensed directly as an actions step.
18
18
 
19
- This is an example workflow definition that runs [github/licensed-ci](https://github.com/github/licensed-ci)'s opinionated license compliance workflow in CI. It includes jobs that demonstrate installing licensed using
19
+ This is an example workflow definition that runs [github/licensed-ci](https://github.com/github/licensed-ci)'s opinionated license compliance workflow in CI. It includes jobs that demonstrate installing licensed using
20
20
  - `gem install`
21
21
  - [github/setup-licensed](https://github.com/github/setup-licensed)
22
22
  - installing when included in a bundler gem file
@@ -43,9 +43,9 @@ jobs:
43
43
  steps:
44
44
  # checkout the repo
45
45
  - uses: actions/checkout@v1
46
-
46
+
47
47
  # install ruby
48
- - uses: ruby/setup-ruby@v1
48
+ - uses: ruby/setup-ruby@a2bbe5b1b236842c1cb7dd11e8e3b51e0a616acc
49
49
  with:
50
50
  ruby-version: "3.0"
51
51
 
@@ -60,8 +60,8 @@ jobs:
60
60
  # run licensed-ci to cache any metadata changes and verify compliance
61
61
  - uses: github/licensed-ci@v1
62
62
 
63
- # OR
64
-
63
+ # OR
64
+
65
65
  # install licensed using gem install
66
66
  licensed-ci-gem:
67
67
  runs-on: ubuntu-latest
@@ -69,9 +69,9 @@ jobs:
69
69
  steps:
70
70
  # checkout the repo
71
71
  - uses: actions/checkout@v1
72
-
72
+
73
73
  # install ruby and bundler
74
- - uses: ruby/setup-ruby@v1
74
+ - uses: ruby/setup-ruby@a2bbe5b1b236842c1cb7dd11e8e3b51e0a616acc
75
75
  with:
76
76
  ruby-version: "3.0"
77
77
 
@@ -93,9 +93,9 @@ jobs:
93
93
  steps:
94
94
  # checkout the repo
95
95
  - uses: actions/checkout@v1
96
-
96
+
97
97
  # install ruby and bundler
98
- - uses: ruby/setup-ruby@v1
98
+ - uses: ruby/setup-ruby@a2bbe5b1b236842c1cb7dd11e8e3b51e0a616acc
99
99
  with:
100
100
  ruby-version: "3.0"
101
101
 
data/lib/licensed/sources/npm.rb CHANGED
@@ -48,7 +48,7 @@ module Licensed
48
48
  end
49
49
 
50
50
  def packages
51
- root_dependencies = package_metadata["dependencies"]
51
+ root_dependencies = package_metadata["dependencies"] || {}
52
52
  recursive_dependencies(root_dependencies).each_with_object({}) do |(name, results), hsh|
53
53
  results.uniq! { |package| package["version"] }
54
54
  if results.size == 1
data/lib/licensed/version.rb CHANGED
@@ -1,6 +1,6 @@
1
1
  # frozen_string_literal: true
2
2
  module Licensed
3
- VERSION = "5.0.1".freeze
3
+ VERSION = "5.0.2".freeze
4
4
 
5
5
  def self.previous_major_versions
6
6
  major_version = Gem::Version.new(Licensed::VERSION).segments.first
data/licensed.gemspec CHANGED
@@ -23,6 +23,7 @@ Gem::Specification.new do |spec|
23
23
 
24
24
  spec.required_ruby_version = ">= 3.0.0"
25
25
 
26
+ spec.add_dependency "csv", "~> 3.3"
26
27
  spec.add_dependency "licensee", "~> 9.16"
27
28
  spec.add_dependency "thor", "~> 1.2"
28
29
  spec.add_dependency "pathname-common_prefix", "~> 0.0.1"
metadata CHANGED
@@ -1,15 +1,29 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: licensed
3
3
  version: !ruby/object:Gem::Version
4
- version: 5.0.1
4
+ version: 5.0.2
5
5
  platform: ruby
6
6
  authors:
7
7
  - GitHub
8
- autorequire:
8
+ autorequire:
9
9
  bindir: exe
10
10
  cert_chain: []
11
- date: 2024-12-02 00:00:00.000000000 Z
11
+ date: 2025-02-06 00:00:00.000000000 Z
12
12
  dependencies:
13
+ - !ruby/object:Gem::Dependency
14
+ name: csv
15
+ requirement: !ruby/object:Gem::Requirement
16
+ requirements:
17
+ - - "~>"
18
+ - !ruby/object:Gem::Version
19
+ version: '3.3'
20
+ type: :runtime
21
+ prerelease: false
22
+ version_requirements: !ruby/object:Gem::Requirement
23
+ requirements:
24
+ - - "~>"
25
+ - !ruby/object:Gem::Version
26
+ version: '3.3'
13
27
  - !ruby/object:Gem::Dependency
14
28
  name: licensee
15
29
  requirement: !ruby/object:Gem::Requirement
@@ -333,7 +347,7 @@ homepage: https://github.com/github/licensed
333
347
  licenses:
334
348
  - MIT
335
349
  metadata: {}
336
- post_install_message:
350
+ post_install_message:
337
351
  rdoc_options: []
338
352
  require_paths:
339
353
  - lib
@@ -349,7 +363,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
349
363
  version: '0'
350
364
  requirements: []
351
365
  rubygems_version: 3.3.26
352
- signing_key:
366
+ signing_key:
353
367
  specification_version: 4
354
368
  summary: Extract and validate the licenses of dependencies.
355
369
  test_files: []