licensed 5.0.1 → 5.0.2

Sign up to get free protection for your applications and to get access to all the features.
Files changed (8) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +257 -137
  3. data/Gemfile.lock +6 -4
  4. data/docs/migrations/v3.md +9 -9
  5. data/lib/licensed/sources/npm.rb +1 -1
  6. data/lib/licensed/version.rb +1 -1
  7. data/licensed.gemspec +1 -0
  8. metadata +19 -5
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: a22bd24126e9a99d7a60f24fa920d02064d5c004c84324da503b6042f638b92d
4
- data.tar.gz: e7842f4ae50ad4ef0b597121b11b9275818ad6ce70015ddce7bde900ce9024ee
3
+ metadata.gz: d20897c4058c8e9ad19047b9739d2a8e720bfbc89c905a6bfcb49d9fc7bc3e68
4
+ data.tar.gz: e9ca15847323c009380cdb7aef13eb20115f70e9794cd789e1154d5b64521040
5
5
  SHA512:
6
- metadata.gz: c2564fe6cd8182d85c735621fb92aa449f4465cbffc23fe7ed00760b07437f8b3a6d32720277472906926d8b579152f0a3b6fe6be62b99ae61b87dabb81c68fb
7
- data.tar.gz: '038682180f0bffbe7582ef0fbaaf5d7847173fd8af06d5354e4adbc6916f5702116fb1483b645ca2956b85908140340b27fb39371d371d4b553804fcba67d1d8'
6
+ metadata.gz: 7beedc9a4c747ce3a915afd5f1b22555e59c0e96d025e184cffa8255a61b8d908ef5eaf3d29471e48c6e592e1fa19e4afbc90b647601e488ef8d67495077b988
7
+ data.tar.gz: 6a02a0c4a839d4fb907fccc6f7893e324cc9d53b9ac9aea3c7781d6a876ced89a88f7a08173fe26aa48a756addc477404037012991199f4b809d5228baefaf8f
data/CHANGELOG.md CHANGED
@@ -1,4 +1,5 @@
1
1
  # Changelog
2
+
2
3
  All notable changes to this project will be documented in this file.
3
4
 
4
5
  The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
@@ -6,6 +7,12 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
6
7
 
7
8
  ## [Unreleased]
8
9
 
10
+ ## 5.0.2
11
+
12
+ - Pin setup-ruby and set permissions in test workflow (<https://github.com/licensee/licensed/pull/768>)
13
+ - Pin action versions in test.yml (<https://github.com/licensee/licensed/pull/776>)
14
+ - Add `csv` as a dependency for Ruby 3.4+ (<https://github.com/licensee/licensed/pull/786>)
15
+ - Fix `nil` bug when there's no `dependency` key in `package.json` (<https://github.com/licensee/licensed/pull/791>)
9
16
 
10
17
  ## 5.0.1
11
18
 
@@ -32,145 +39,145 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
32
39
 
33
40
  ### Added
34
41
 
35
- - Licensed status command will alert on stale cached dependency records (https://github.com/github/licensed/pull/657)
42
+ - Licensed status command will alert on stale cached dependency records (<https://github.com/github/licensed/pull/657>)
36
43
 
37
44
  ## 4.3.1
38
45
 
39
46
  ### Changed
40
47
 
41
- - Bump nokogiri to resolve vulnerabilities (https://github.com/github/licensed/pull/648)
48
+ - Bump nokogiri to resolve vulnerabilities (<https://github.com/github/licensed/pull/648>)
42
49
 
43
50
  ## 4.3.0
44
51
 
45
52
  ### Added
46
53
 
47
- - Cocoapods support has been re-enabled using a cocoapods plugin (https://github.com/github/licensed/pull/644)
54
+ - Cocoapods support has been re-enabled using a cocoapods plugin (<https://github.com/github/licensed/pull/644>)
48
55
 
49
56
  ## 4.2.0
50
57
 
51
58
  ### Added
52
59
 
53
- - Reviewed and ignored configuration lists support matching on versions and version ranges (https://github.com/github/licensed/pull/629)
60
+ - Reviewed and ignored configuration lists support matching on versions and version ranges (<https://github.com/github/licensed/pull/629>)
54
61
 
55
62
  ### Fixed
56
63
 
57
- - Licensed should more reliably source dependencies from Gradle >= 8.0 (https://github.com/github/licensed/pull/630)
64
+ - Licensed should more reliably source dependencies from Gradle >= 8.0 (<https://github.com/github/licensed/pull/630>)
58
65
 
59
66
  ## 4.1.0
60
67
 
61
68
  ### Added
62
69
 
63
- - Custom license terms can be added to dependencies via new configuration options (https://github.com/github/licensed/pull/624)
64
- - Licensed is now integrated with pnpm to enumerate dependencies (https://github.com/github/licensed/pull/626)
70
+ - Custom license terms can be added to dependencies via new configuration options (<https://github.com/github/licensed/pull/624>)
71
+ - Licensed is now integrated with pnpm to enumerate dependencies (<https://github.com/github/licensed/pull/626>)
65
72
 
66
73
  ## 4.0.4
67
74
 
68
75
  ### Changed
69
76
 
70
- - Dependency version requirements are more relaxed (https://github.com/github/licensed/pull/619)
77
+ - Dependency version requirements are more relaxed (<https://github.com/github/licensed/pull/619>)
71
78
 
72
79
  ## 4.0.3
73
80
 
74
81
  ### Changed
75
82
 
76
- - Cocoapods dependency enumeration has been disabled (https://github.com/github/licensed/pull/616)
83
+ - Cocoapods dependency enumeration has been disabled (<https://github.com/github/licensed/pull/616>)
77
84
 
78
85
  ### Fixed
79
86
 
80
- - Fixed method signature change in Bundler API with Bundler >= 2.4.4 (:tada: @CvX https://github.com/github/licensed/pull/614)
81
- - Fixed installation dependency compatibility with Rails >= 7.0 (https://github.com/github/licensed/pull/616)
87
+ - Fixed method signature change in Bundler API with Bundler >= 2.4.4 (:tada: @CvX <https://github.com/github/licensed/pull/614>)
88
+ - Fixed installation dependency compatibility with Rails >= 7.0 (<https://github.com/github/licensed/pull/616>)
82
89
 
83
90
  ## 4.0.2
84
91
 
85
92
  ### Fixed
86
93
 
87
- - The path to a gradlew executable can be configured when enumerating gradle dependencies (:tada: @LouisBoudreau https://github.com/github/licensed/pull/610)
94
+ - The path to a gradlew executable can be configured when enumerating gradle dependencies (:tada: @LouisBoudreau <https://github.com/github/licensed/pull/610>)
88
95
 
89
96
  ## 4.0.1
90
97
 
91
98
  ### Fixed
92
99
 
93
- - Running gradle tests will no longer fail when gradle is not available (https://github.com/github/licensed/pull/606)
100
+ - Running gradle tests will no longer fail when gradle is not available (<https://github.com/github/licensed/pull/606>)
94
101
 
95
102
  ## 4.0.0
96
103
 
97
104
  ### Added
98
105
 
99
- - Licensed supports Cocoapods as a dependency source (:tada: @LouisBoudreau https://github.com/github/licensed/pull/584)
100
- - Licensed supports Gradle multi-project builds (:tada: @LouisBoudreau https://github.com/github/licensed/pull/583)
106
+ - Licensed supports Cocoapods as a dependency source (:tada: @LouisBoudreau <https://github.com/github/licensed/pull/584>)
107
+ - Licensed supports Gradle multi-project builds (:tada: @LouisBoudreau <https://github.com/github/licensed/pull/583>)
101
108
 
102
109
  ### Fixed
103
110
 
104
- - Licensed no longer crashes when run with Bundler >= 2.4.0 (:tada: @JoshReedSchramm https://github.com/github/licensed/pull/597)
111
+ - Licensed no longer crashes when run with Bundler >= 2.4.0 (:tada: @JoshReedSchramm <https://github.com/github/licensed/pull/597>)
105
112
 
106
113
  ### Changed
107
114
 
108
- - BREAKING: Licensed no longer ships executables with releases (https://github.com/github/licensed/pull/586)
109
- - BREAKING: Licensed no longer includes support for Go <= 1.11 (https://github.com/github/licensed/pull/602)
115
+ - BREAKING: Licensed no longer ships executables with releases (<https://github.com/github/licensed/pull/586>)
116
+ - BREAKING: Licensed no longer includes support for Go <= 1.11 (<https://github.com/github/licensed/pull/602>)
110
117
 
111
118
  ## 3.9.1
112
119
 
113
120
  ### Fixed
114
121
 
115
- - Updating cached dependency records will more accurately apply `review_changed_license` flag (https://github.com/github/licensed/pull/578)
122
+ - Updating cached dependency records will more accurately apply `review_changed_license` flag (<https://github.com/github/licensed/pull/578>)
116
123
 
117
124
  ## 3.9.0
118
125
 
119
126
  ### Added
120
127
 
121
- - `NOTICE` files can now be generated without cached files in a repository (https://github.com/github/licensed/pull/572)
128
+ - `NOTICE` files can now be generated without cached files in a repository (<https://github.com/github/licensed/pull/572>)
122
129
 
123
130
  ## 3.8.0
124
131
 
125
132
  ### Added
126
133
 
127
- - Licensing compliance status checks can now be used without cached files in a repository (https://github.com/github/licensed/pull/560)
134
+ - Licensing compliance status checks can now be used without cached files in a repository (<https://github.com/github/licensed/pull/560>)
128
135
 
129
136
  ## 3.7.5
130
137
 
131
138
  ### Fixed
132
139
 
133
- - Python dependency metadata will be correctly parsed from the ouput of `pip show` (https://github.com/github/licensed/pull/555)
140
+ - Python dependency metadata will be correctly parsed from the ouput of `pip show` (<https://github.com/github/licensed/pull/555>)
134
141
 
135
142
  ## 3.7.4
136
143
 
137
144
  ### Fixed
138
145
 
139
- - Licenses for Python dependencies built with Hatchling are correctly found (https://github.com/github/licensed/pull/547)
146
+ - Licenses for Python dependencies built with Hatchling are correctly found (<https://github.com/github/licensed/pull/547>)
140
147
 
141
148
  ## 3.7.3
142
149
 
143
150
  ### Fixed
144
151
 
145
- - Swift test fixtures build artifacts are now ignored (:tada: @CvX https://github.com/github/licensed/pull/524)
146
- - Running cargo test fixture setup no longer deletes test files (:tada: @CvX https://github.com/github/licensed/pull/525)
147
- - Bundler test fixtures are compatible with latest macOS silicon(:tada: @CvX https://github.com/github/licensed/pull/528)
148
- - Fix segfaults seen using licensed with ruby 3.0.4 (https://github.com/github/licensed/pull/530)
149
- - Fix compatibility with latest versions of bundler 2.3 (https://github.com/github/licensed/pull/535)
150
- - Fix compatibility with latest versions of bundler 2.3 (:tada: @CvX https://github.com/github/licensed/pull/522)
152
+ - Swift test fixtures build artifacts are now ignored (:tada: @CvX <https://github.com/github/licensed/pull/524>)
153
+ - Running cargo test fixture setup no longer deletes test files (:tada: @CvX <https://github.com/github/licensed/pull/525>)
154
+ - Bundler test fixtures are compatible with latest macOS silicon(:tada: @CvX <https://github.com/github/licensed/pull/528>)
155
+ - Fix segfaults seen using licensed with ruby 3.0.4 (<https://github.com/github/licensed/pull/530>)
156
+ - Fix compatibility with latest versions of bundler 2.3 (<https://github.com/github/licensed/pull/535>)
157
+ - Fix compatibility with latest versions of bundler 2.3 (:tada: @CvX <https://github.com/github/licensed/pull/522>)
151
158
 
152
159
  ## 3.7.2
153
160
 
154
161
  ### Fixed
155
162
 
156
- - Comparing dependency license contents now finds matching contents regardless of the order of the licenses (https://github.com/github/licensed/pull/516)
157
- - Fixed typo in a link in README.md (https://github.com/github/licensed/pull/514)
163
+ - Comparing dependency license contents now finds matching contents regardless of the order of the licenses (<https://github.com/github/licensed/pull/516>)
164
+ - Fixed typo in a link in README.md (<https://github.com/github/licensed/pull/514>)
158
165
 
159
166
  ### Changed
160
167
 
161
- - Elixir testing setup is migrated to erlef/setup-beam (https://github.com/github/licensed/pull/512)
168
+ - Elixir testing setup is migrated to erlef/setup-beam (<https://github.com/github/licensed/pull/512>)
162
169
 
163
170
  ## 3.7.1
164
171
 
165
172
  ### Fixed
166
173
 
167
- - Dependencies' legal notice file matching has been made more strict to reduce false positives on code files containing the word `legal` (https://github.com/github/licensed/pull/510)
174
+ - Dependencies' legal notice file matching has been made more strict to reduce false positives on code files containing the word `legal` (<https://github.com/github/licensed/pull/510>)
168
175
 
169
176
  ## 3.7.0
170
177
 
171
178
  ### Changed
172
179
 
173
- - Pip and pipenv sources will find dependency licenses under `dist-info/license_files` when available (https://github.com/github/licensed/pull/504)
180
+ - Pip and pipenv sources will find dependency licenses under `dist-info/license_files` when available (<https://github.com/github/licensed/pull/504>)
174
181
 
175
182
  ## 3.6.0
176
183
 
@@ -178,17 +185,17 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
178
185
 
179
186
  ### Added
180
187
 
181
- - Composer dev dependencies can optionally be included in enumerated PHP dependencies (:tada: @digilist https://github.com/github/licensed/pull/486)
182
- - Getting started usage documentation (https://github.com/github/licensed/pull/483)
183
- - Initial support for NPM workspaces (https://github.com/github/licensed/pull/485)
188
+ - Composer dev dependencies can optionally be included in enumerated PHP dependencies (:tada: @digilist <https://github.com/github/licensed/pull/486>)
189
+ - Getting started usage documentation (<https://github.com/github/licensed/pull/483>)
190
+ - Initial support for NPM workspaces (<https://github.com/github/licensed/pull/485>)
184
191
 
185
192
  ### Changed
186
193
 
187
- - Transitive dependencies are now enumerated by the `pip` source (https://github.com/github/licensed/pull/480)
194
+ - Transitive dependencies are now enumerated by the `pip` source (<https://github.com/github/licensed/pull/480>)
188
195
 
189
196
  ### Fixed
190
197
 
191
- - `licensed cache --force` will now correctly overwrite existing license classifications (https://github.com/github/licensed/pull/473)
198
+ - `licensed cache --force` will now correctly overwrite existing license classifications (<https://github.com/github/licensed/pull/473>)
192
199
 
193
200
  ## 3.5.0
194
201
 
@@ -196,7 +203,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
196
203
 
197
204
  ### Added
198
205
 
199
- - [Licensee](https://github.com/licensee/licensee) confidence thresholds can be configured in the licensed configuration file (https://github.com/github/licensed/pull/455)
206
+ - [Licensee](https://github.com/licensee/licensee) confidence thresholds can be configured in the licensed configuration file (<https://github.com/github/licensed/pull/455>)
200
207
 
201
208
  ## 3.4.4
202
209
 
@@ -204,7 +211,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
204
211
 
205
212
  ### Fixed
206
213
 
207
- - The npm and pip sources have better protection from strings causing crashes in `Hash#dig` (https://github.com/github/licensed/pull/450)
214
+ - The npm and pip sources have better protection from strings causing crashes in `Hash#dig` (<https://github.com/github/licensed/pull/450>)
208
215
 
209
216
  ## 3.4.3
210
217
 
@@ -212,7 +219,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
212
219
 
213
220
  ### Added
214
221
 
215
- - The npm source handles more cases of missing, optional, peer dependencies (https://github.com/github/licensed/pull/443)
222
+ - The npm source handles more cases of missing, optional, peer dependencies (<https://github.com/github/licensed/pull/443>)
216
223
 
217
224
  ## 3.4.2
218
225
 
@@ -220,7 +227,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
220
227
 
221
228
  ### Fixed
222
229
 
223
- - The yarn source will no longer evaluate package.json files that do not represent project dependencies (https://github.com/github/licensed/pull/439)
230
+ - The yarn source will no longer evaluate package.json files that do not represent project dependencies (<https://github.com/github/licensed/pull/439>)
224
231
 
225
232
  ## 3.4.1
226
233
 
@@ -228,7 +235,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
228
235
 
229
236
  ### Fixed
230
237
 
231
- - Malformed package.json files will no longer crash yarn dependency detection (https://github.com/github/licensed/pull/431)
238
+ - Malformed package.json files will no longer crash yarn dependency detection (<https://github.com/github/licensed/pull/431>)
232
239
 
233
240
  ## 3.4.0
234
241
 
@@ -236,17 +243,17 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
236
243
 
237
244
  ### Added
238
245
 
239
- - New Yarn enumerator with support for berry versions (https://github.com/github/licensed/pull/423)
246
+ - New Yarn enumerator with support for berry versions (<https://github.com/github/licensed/pull/423>)
240
247
 
241
248
  ### Fixed
242
249
 
243
- - Error handling cases return correct values in the Yarn enumerator (https://github.com/github/licensed/pull/425)
244
- - Fixed link in command documentation (:tada: @chibicco https://github.com/github/licensed/pull/416)
245
- - Fixed minor backwards compatibility issue for Ruby 2.3 support (:tada: @dzunk https://github.com/github/licensed/pull/414)
250
+ - Error handling cases return correct values in the Yarn enumerator (<https://github.com/github/licensed/pull/425>)
251
+ - Fixed link in command documentation (:tada: @chibicco <https://github.com/github/licensed/pull/416>)
252
+ - Fixed minor backwards compatibility issue for Ruby 2.3 support (:tada: @dzunk <https://github.com/github/licensed/pull/414>)
246
253
 
247
254
  ### Changed
248
255
 
249
- - Licensed's own dependencies are cached in the repository and kept up to date with GitHub Actions (https://github.com/github/licensed/pull/421)
256
+ - Licensed's own dependencies are cached in the repository and kept up to date with GitHub Actions (<https://github.com/github/licensed/pull/421>)
250
257
 
251
258
  ## 3.3.1
252
259
 
@@ -254,11 +261,11 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
254
261
 
255
262
  ### Fixed
256
263
 
257
- - Fix evaluation of peer dependencies with npm 7 (:tada: @manuelpuyol https://github.com/github/licensed/pull/411)
264
+ - Fix evaluation of peer dependencies with npm 7 (:tada: @manuelpuyol <https://github.com/github/licensed/pull/411>)
258
265
 
259
266
  ### Changed
260
267
 
261
- - Manifest source evaluation performance improvements (https://github.com/github/licensed/pull/407)
268
+ - Manifest source evaluation performance improvements (<https://github.com/github/licensed/pull/407>)
262
269
 
263
270
  ## 3.3.0
264
271
 
@@ -266,11 +273,11 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
266
273
 
267
274
  ### Added
268
275
 
269
- - New cargo source enumerates rust dependencies (https://github.com/github/licensed/pull/404)
276
+ - New cargo source enumerates rust dependencies (<https://github.com/github/licensed/pull/404>)
270
277
 
271
278
  ### Changed
272
279
 
273
- - Removed non-functional files from gem builds (https://github.com/github/licensed/pull/405)
280
+ - Removed non-functional files from gem builds (<https://github.com/github/licensed/pull/405>)
274
281
 
275
282
  ## 3.2.3
276
283
 
@@ -278,8 +285,8 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
278
285
 
279
286
  ### Fixed
280
287
 
281
- - Bundler source will no longer infinitely recurse when enumerating specifications (https://github.com/github/licensed/pull/402)
282
- - Using the `--sources` command line option will no longer delete skipped sources' cached files (https://github.com/github/licensed/pull/401)
288
+ - Bundler source will no longer infinitely recurse when enumerating specifications (<https://github.com/github/licensed/pull/402>)
289
+ - Using the `--sources` command line option will no longer delete skipped sources' cached files (<https://github.com/github/licensed/pull/401>)
283
290
 
284
291
  ## 3.2.2
285
292
 
@@ -287,7 +294,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
287
294
 
288
295
  ### Fixed
289
296
 
290
- - Bundler source works properly again when used outside of `bundle exec` (https://github.com/github/licensed/pull/397)
297
+ - Bundler source works properly again when used outside of `bundle exec` (<https://github.com/github/licensed/pull/397>)
291
298
 
292
299
  ## 3.2.1
293
300
 
@@ -295,13 +302,13 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
295
302
 
296
303
  ### Changed
297
304
 
298
- - Updated multiple dependency versions (:tada: @mmorel-35 https://github.com/github/licensed/pull/385, https://github.com/github/licensed/pull/389)
299
- - Go homepage links use pkg.go.dev instead of godoc.org (:tada: @mmorel-35 https://github.com/github/licensed/commit/73cfbbe954a3e8c8cbaf8b68253053b157e01b79)
300
- - Local development ruby version changed to 2.7.4 (https://github.com/github/licensed/pull/393)
305
+ - Updated multiple dependency versions (:tada: @mmorel-35 <https://github.com/github/licensed/pull/385>, <https://github.com/github/licensed/pull/389>)
306
+ - Go homepage links use pkg.go.dev instead of godoc.org (:tada: @mmorel-35 <https://github.com/github/licensed/commit/73cfbbe954a3e8c8cbaf8b68253053b157e01b79>)
307
+ - Local development ruby version changed to 2.7.4 (<https://github.com/github/licensed/pull/393>)
301
308
 
302
309
  ### Fixed
303
310
 
304
- - Bundler source correctly finds platform specific dependencies (https://github.com/github/licensed/pull/392)
311
+ - Bundler source correctly finds platform specific dependencies (<https://github.com/github/licensed/pull/392>)
305
312
 
306
313
  ## 3.2.0
307
314
 
@@ -309,18 +316,18 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
309
316
 
310
317
  ### Added
311
318
 
312
- - Application names can be dynamically generated based on the path to the application source (https://github.com/github/licensed/pull/375)
319
+ - Application names can be dynamically generated based on the path to the application source (<https://github.com/github/licensed/pull/375>)
313
320
 
314
321
  ### Changed
315
322
 
316
- - Updated command documentation (https://github.com/github/licensed/pull/378, https://github.com/github/licensed/pull/380/files)
317
- - Updated configuration documentation (https://github.com/github/licensed/pull/375)
318
- - Cache and status commands give additional diagnostic output when using JSON and YAML formatters (https://github.com/github/licensed/pull/378)
319
- - Status command will give users a link to documentation when compliance checks fail (https://github.com/github/licensed/pull/381)
323
+ - Updated command documentation (<https://github.com/github/licensed/pull/378>, <https://github.com/github/licensed/pull/380/files>)
324
+ - Updated configuration documentation (<https://github.com/github/licensed/pull/375>)
325
+ - Cache and status commands give additional diagnostic output when using JSON and YAML formatters (<https://github.com/github/licensed/pull/378>)
326
+ - Status command will give users a link to documentation when compliance checks fail (<https://github.com/github/licensed/pull/381>)
320
327
 
321
328
  ### Fixed
322
329
 
323
- - The bundler source correctly checks that the path bundler specifies a gem is loaded from is a file (https://github.com/github/licensed/pull/379)
330
+ - The bundler source correctly checks that the path bundler specifies a gem is loaded from is a file (<https://github.com/github/licensed/pull/379>)
324
331
 
325
332
  ## 3.1.0
326
333
 
@@ -328,17 +335,18 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
328
335
 
329
336
  ### Added
330
337
 
331
- - Licensed supports Swift/Swift package manager as a dependency source (:tada: @mattt https://github.com/github/licensed/pull/363)'
338
+ - Licensed supports Swift/Swift package manager as a dependency source (:tada: @mattt <https://github.com/github/licensed/pull/363>)'
332
339
 
333
340
  ### Changed
334
341
 
335
- - The `source_path` configuration property accepts arrays of inclusion and exclusion glob patterns (https://github.com/github/licensed/pull/368)
336
- - The Nuget source now uses configured fallback folders to find dependencies that are not in found in the project folder (https://github.com/github/licensed/pull/366)
337
- - The Nuget source supports a configurable property for the path from the project source path to the project's `obj` folder (https://github.com/github/licensed/pull/365)
342
+ - The `source_path` configuration property accepts arrays of inclusion and exclusion glob patterns (<https://github.com/github/licensed/pull/368>)
343
+ - The Nuget source now uses configured fallback folders to find dependencies that are not in found in the project folder (<https://github.com/github/licensed/pull/366>)
344
+ - The Nuget source supports a configurable property for the path from the project source path to the project's `obj` folder (<https://github.com/github/licensed/pull/365>)
338
345
 
339
346
  ### Fixed
340
- - The Go source's checks for local packages will correctly find paths in case-insensitive file systems (https://github.com/github/licensed/pull/370)
341
- - The Bundler source will no longer unnecessarily reset the local Bundler environment configuration (https://github.com/github/licensed/pull/372)
347
+
348
+ - The Go source's checks for local packages will correctly find paths in case-insensitive file systems (<https://github.com/github/licensed/pull/370>)
349
+ - The Bundler source will no longer unnecessarily reset the local Bundler environment configuration (<https://github.com/github/licensed/pull/372>)
342
350
 
343
351
  ## 3.0.1
344
352
 
@@ -346,7 +354,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
346
354
 
347
355
  ### Fixed
348
356
 
349
- - The bundler source will correctly enumerate dependencies pulled with a `git:` directive (https://github.com/github/licensed/pull/360)
357
+ - The bundler source will correctly enumerate dependencies pulled with a `git:` directive (<https://github.com/github/licensed/pull/360>)
350
358
 
351
359
  ## 3.0.0
352
360
 
@@ -364,7 +372,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
364
372
 
365
373
  ### Fixed
366
374
 
367
- - The pip source works with package names containing periods (:tada: @bcskda https://github.com/github/licensed/pull/350)
375
+ - The pip source works with package names containing periods (:tada: @bcskda <https://github.com/github/licensed/pull/350>)
368
376
 
369
377
  ## 2.15.1
370
378
 
@@ -372,161 +380,209 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
372
380
 
373
381
  ### Changed
374
382
 
375
- - The npm source will ignore dependencies that are marked as both extraneous and missing (https://github.com/github/licensed/pull/347)
383
+ - The npm source will ignore dependencies that are marked as both extraneous and missing (<https://github.com/github/licensed/pull/347>)
376
384
 
377
385
  ## 2.15.0
386
+
378
387
  2021-03-24
379
388
 
380
389
  ### Added
381
- - Support for npm 7 (https://github.com/github/licensed/pull/341)
390
+
391
+ - Support for npm 7 (<https://github.com/github/licensed/pull/341>)
382
392
 
383
393
  ### Fixed
384
- - Files in the manifest source will be found correctly for apps that are not at the repository root (https://github.com/github/licensed/pull/345)
394
+
395
+ - Files in the manifest source will be found correctly for apps that are not at the repository root (<https://github.com/github/licensed/pull/345>)
385
396
 
386
397
  ## 2.14.4
398
+
387
399
  2021-02-09
388
400
 
389
401
  ### Added
390
- - `list` and `cache` commands optionally print output in JSON or YML formats using the `--format/-f` flag (https://github.com/github/licensed/pull/334)
391
- - `list` command will include detected license keys using the `--licenses/-l` flag (https://github.com/github/licensed/pull/334)
402
+
403
+ - `list` and `cache` commands optionally print output in JSON or YML formats using the `--format/-f` flag (<https://github.com/github/licensed/pull/334>)
404
+ - `list` command will include detected license keys using the `--licenses/-l` flag (<https://github.com/github/licensed/pull/334>)
392
405
 
393
406
  ## 2.14.3
407
+
394
408
  2020-12-11
395
409
 
396
410
  ### Fixed
397
- - Auto-generating license text for a known license will no longer raise an error if the found license has no text (:tada: @Eun https://github.com/github/licensed/pull/328)
411
+
412
+ - Auto-generating license text for a known license will no longer raise an error if the found license has no text (:tada: @Eun <https://github.com/github/licensed/pull/328>)
398
413
 
399
414
  ## 2.14.2
415
+
400
416
  2020-11-20
401
417
 
402
418
  ### Fixed
403
- - Yarn source correctly finds dependency paths on disk (https://github.com/github/licensed/pull/326)
404
- - Go source better handles finding dependencies that have been vendored (https://github.com/github/licensed/pull/323)
419
+
420
+ - Yarn source correctly finds dependency paths on disk (<https://github.com/github/licensed/pull/326>)
421
+ - Go source better handles finding dependencies that have been vendored (<https://github.com/github/licensed/pull/323>)
405
422
 
406
423
  ## 2.14.1
424
+
407
425
  2020-10-09
408
426
 
409
427
  ### Fixed
410
- - Shell command output is encoded to UTF8 (https://github.com/github/licensed/pull/319)
428
+
429
+ - Shell command output is encoded to UTF8 (<https://github.com/github/licensed/pull/319>)
411
430
 
412
431
  ## 2.14.0
432
+
413
433
  2020-10-04
414
434
 
415
435
  ### Added
416
- - `reviewed` dependencies can use glob pattern matching (https://github.com/github/licensed/pull/313)
436
+
437
+ - `reviewed` dependencies can use glob pattern matching (<https://github.com/github/licensed/pull/313>)
417
438
 
418
439
  ### Fixed
419
- - Fix configuring source path globs that expand into a single directory (https://github.com/github/licensed/pull/312)
440
+
441
+ - Fix configuring source path globs that expand into a single directory (<https://github.com/github/licensed/pull/312>)
420
442
 
421
443
  ## 2.13.0
444
+
422
445
  2020-09-23
423
446
 
424
447
  ### Added
425
- - `status` command results can be output in YAML and JSON formats (:tada: @julianvilas https://github.com/github/licensed/pull/303)
448
+
449
+ - `status` command results can be output in YAML and JSON formats (:tada: @julianvilas <https://github.com/github/licensed/pull/303>)
426
450
 
427
451
  ### Fixed
428
- - `licensed` no longer crashes when parsing invalid YAML from cached records (https://github.com/github/licensed/pull/306)
429
- - NPM source will no longer crash when invalid JSON is returned from npm CLI calls (https://github.com/github/licensed/pull/300)
430
- - Bundler source is fixed to work properly with `gems.rb` lockfiles (https://github.com/github/licensed/pull/299)
452
+
453
+ - `licensed` no longer crashes when parsing invalid YAML from cached records (<https://github.com/github/licensed/pull/306>)
454
+ - NPM source will no longer crash when invalid JSON is returned from npm CLI calls (<https://github.com/github/licensed/pull/300>)
455
+ - Bundler source is fixed to work properly with `gems.rb` lockfiles (<https://github.com/github/licensed/pull/299>)
431
456
 
432
457
  ## 2.12.2
458
+
433
459
  2020-07-07
434
460
 
435
461
  ### Changed
436
- - Cleaned up ruby 2.7 warnings (:tada: @jurre https://github.com/github/licensed/pull/292)
437
- - Cleaned up additional warnings in tests (https://github.com/github/licensed/pull/293)
462
+
463
+ - Cleaned up ruby 2.7 warnings (:tada: @jurre <https://github.com/github/licensed/pull/292>)
464
+ - Cleaned up additional warnings in tests (<https://github.com/github/licensed/pull/293>)
438
465
 
439
466
  ## 2.12.1
467
+
440
468
  2020-06-30
441
469
 
442
470
  ### Fixed
443
- - `licensed` no longer exits an error code when using the `--sources` CLI argument (https://github.com/github/licensed/pull/290)
471
+
472
+ - `licensed` no longer exits an error code when using the `--sources` CLI argument (<https://github.com/github/licensed/pull/290>)
444
473
 
445
474
  ## 2.12.0
475
+
446
476
  2020-06-19
447
477
 
448
478
  ### Added
449
- - `--sources` argument for cache, list, status and notices commands to filter running sources (https://github.com/github/licensed/pull/287)
479
+
480
+ - `--sources` argument for cache, list, status and notices commands to filter running sources (<https://github.com/github/licensed/pull/287>)
450
481
 
451
482
  ### Fixed
452
- - `cache` command will not remove files outside of enabled source cache paths (https://github.com/github/licensed/pull/287)
483
+
484
+ - `cache` command will not remove files outside of enabled source cache paths (<https://github.com/github/licensed/pull/287>)
453
485
 
454
486
  ## 2.11.1
487
+
455
488
  2020-06-09
456
489
 
457
490
  ### Fixed
458
- - `notices` command properly reads cached dependency notices contents (https://github.com/github/licensed/pull/283)
491
+
492
+ - `notices` command properly reads cached dependency notices contents (<https://github.com/github/licensed/pull/283>)
459
493
 
460
494
  ## 2.11.0
495
+
461
496
  2020-06-02
462
497
 
463
498
  ### Added
464
- - `notices` command to create a `NOTICE` file for each configured app (https://github.com/github/licensed/pull/277)
499
+
500
+ - `notices` command to create a `NOTICE` file for each configured app (<https://github.com/github/licensed/pull/277>)
465
501
 
466
502
  ### Fixed
467
- - NuGet source no longer crashes on a non-existent dependency path (https://github.com/github/licensed/pull/280)
468
- - Go source no longer crashes on a non-existent dependency package path (https://github.com/github/licensed/pull/274)
503
+
504
+ - NuGet source no longer crashes on a non-existent dependency path (<https://github.com/github/licensed/pull/280>)
505
+ - Go source no longer crashes on a non-existent dependency package path (<https://github.com/github/licensed/pull/274>)
469
506
 
470
507
  ## 2.10.0
508
+
471
509
  2020-05-15
472
510
 
473
511
  ### Changed
474
- - NPM source ignores missing peer dependencies (https://github.com/github/licensed/pull/267)
512
+
513
+ - NPM source ignores missing peer dependencies (<https://github.com/github/licensed/pull/267>)
475
514
 
476
515
  ### Added
477
- - NuGet source (:tada: @zarenner https://github.com/github/licensed/pull/261)
478
- - Multiple apps can share a single cache location (https://github.com/github/licensed/pull/263)
516
+
517
+ - NuGet source (:tada: @zarenner <https://github.com/github/licensed/pull/261>)
518
+ - Multiple apps can share a single cache location (<https://github.com/github/licensed/pull/263>)
479
519
 
480
520
  ## 2.9.2
521
+
481
522
  2020-04-28
482
523
 
483
524
  ### Changed
484
- - `licensee` minimum version bumped to 9.13.2 (https://github.com/github/licensed/pull/256)
525
+
526
+ - `licensee` minimum version bumped to 9.13.2 (<https://github.com/github/licensed/pull/256>)
485
527
 
486
528
  ## 2.9.1
529
+
487
530
  2020-03-24
488
531
 
489
532
  ### Changed
490
- - relaxed gem version restrictions on Thor (:tada: @eileencodes https://github.com/github/licensed/pull/254)
533
+
534
+ - relaxed gem version restrictions on Thor (:tada: @eileencodes <https://github.com/github/licensed/pull/254>)
491
535
 
492
536
  ## 2.9.0
537
+
493
538
  2020-03-19
494
539
 
495
540
  ### Added
496
- - Source paths use glob pattern matching (https://github.com/github/licensed/pull/245)
541
+
542
+ - Source paths use glob pattern matching (<https://github.com/github/licensed/pull/245>)
497
543
 
498
544
  ### Fixed
499
- - Mix source supports updates to mix.lock format (:tada: @bruce https://github.com/github/licensed/pull/242)
500
- - Go source supports `go list` format changes in go 1.14 (https://github.com/github/licensed/pull/247)
545
+
546
+ - Mix source supports updates to mix.lock format (:tada: @bruce <https://github.com/github/licensed/pull/242>)
547
+ - Go source supports `go list` format changes in go 1.14 (<https://github.com/github/licensed/pull/247>)
501
548
 
502
549
  ### Changed
503
- - `licensed cache` will flag dependencies for re-review when license text changes (https://github.com/github/licensed/pull/248)
504
- - `licensed status` will raise errors on dependencies that need re-review (https://github.com/github/licensed/pull/248)
505
- - `licensee` minimum version bumped to 9.13.1 (https://github.com/github/licensed/pull/251)
550
+
551
+ - `licensed cache` will flag dependencies for re-review when license text changes (<https://github.com/github/licensed/pull/248>)
552
+ - `licensed status` will raise errors on dependencies that need re-review (<https://github.com/github/licensed/pull/248>)
553
+ - `licensee` minimum version bumped to 9.13.1 (<https://github.com/github/licensed/pull/251>)
506
554
 
507
555
  ## 2.8.0
556
+
508
557
  2020-01-03
509
558
 
510
559
  ### Added
511
- - Yarn source (https://github.com/github/licensed/pull/232, https://github.com/github/licensed/pull/233, https://github.com/github/licensed/pull/236)
512
- - NPM source has a new option to include non-production dependencies (https://github.com/github/licensed/pull/231)
560
+
561
+ - Yarn source (<https://github.com/github/licensed/pull/232>, <https://github.com/github/licensed/pull/233>, <https://github.com/github/licensed/pull/236>)
562
+ - NPM source has a new option to include non-production dependencies (<https://github.com/github/licensed/pull/231>)
513
563
 
514
564
  ### Fixed
515
- - Cabal source will no longer crash if packages aren't found (https://github.com/github/licensed/pull/230)
565
+
566
+ - Cabal source will no longer crash if packages aren't found (<https://github.com/github/licensed/pull/230>)
516
567
 
517
568
  ## 2.7.0
569
+
518
570
  2019-11-10
519
571
 
520
572
  ### Added
521
- - License text is automatically generated for known licenses when not otherwise available (https://github.com/github/licensed/pull/223)
573
+
574
+ - License text is automatically generated for known licenses when not otherwise available (<https://github.com/github/licensed/pull/223>)
522
575
 
523
576
  ### Changed
524
- - Ignoring dependencies uses glob pattern matching (https://github.com/github/licensed/pull/225)
577
+
578
+ - Ignoring dependencies uses glob pattern matching (<https://github.com/github/licensed/pull/225>)
525
579
 
526
580
  ## 2.6.2
581
+
527
582
  2019-11-03
528
583
 
529
584
  ### Changed
585
+
530
586
  - A number of improvements to the go dependency enumerator
531
587
  - use `go env GOPATH` as a default if no other GOPATH is found
532
588
  - better compatibility with go modules when finding license content
@@ -535,94 +591,121 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
535
591
  - better checks for standard packages, reducing the amount of cached content
536
592
 
537
593
  ## 2.6.1
594
+
538
595
  2019-10-26
539
596
 
540
597
  ### Changed
541
- - Performance improvements during dependency enumeration (:tada: @krzysztof-pawlik-gat https://github.com/github/licensed/pull/204, https://github.com/github/licensed/pull/207) (https://github.com/github/licensed/pull/210)
598
+
599
+ - Performance improvements during dependency enumeration (:tada: @krzysztof-pawlik-gat <https://github.com/github/licensed/pull/204>, <https://github.com/github/licensed/pull/207>) (<https://github.com/github/licensed/pull/210>)
542
600
 
543
601
  ## 2.6.0
602
+
544
603
  2019-10-22
545
604
 
546
605
  ### Added
547
- - Mix source for Elixir (:tada: @bruce https://github.com/github/licensed/pull/195)
606
+
607
+ - Mix source for Elixir (:tada: @bruce <https://github.com/github/licensed/pull/195>)
548
608
 
549
609
  ## 2.5.0
610
+
550
611
  2019-09-26
551
612
 
552
613
  ### Added
553
- - `env` command to output application environment configuration (https://github.com/github/licensed/pull/187, https://github.com/github/licensed/pull/191)
614
+
615
+ - `env` command to output application environment configuration (<https://github.com/github/licensed/pull/187>, <https://github.com/github/licensed/pull/191>)
554
616
 
555
617
  ### Changed
556
- - `status` command will pass if multiple allowed licenses are found (https://github.com/github/licensed/pull/188)
618
+
619
+ - `status` command will pass if multiple allowed licenses are found (<https://github.com/github/licensed/pull/188>)
557
620
 
558
621
  ## 2.4.0
622
+
559
623
  2019-09-15
560
624
 
561
625
  ### Added
562
- - Composer source for PHP (https://github.com/github/licensed/pull/182)
626
+
627
+ - Composer source for PHP (<https://github.com/github/licensed/pull/182>)
563
628
 
564
629
  ## 2.3.2
630
+
565
631
  2019-08-26
566
632
 
567
633
  ### Fixed
634
+
568
635
  - Bundler with/without array settings are properly handled for bundler 1.15.x
569
636
 
570
637
  ## 2.3.1
638
+
571
639
  2019-08-20
572
640
 
573
641
  ### Changed
574
- - Using the npm source with yarn, "missing" dependencies are no longer considered errors (:tada: @krzysztof-pawlik-gat https://github.com/github/licensed/pull/170)
575
- - The bundler source now calls `gem specification` with dependency version requirements (https://github.com/github/licensed/pull/173)
642
+
643
+ - Using the npm source with yarn, "missing" dependencies are no longer considered errors (:tada: @krzysztof-pawlik-gat <https://github.com/github/licensed/pull/170>)
644
+ - The bundler source now calls `gem specification` with dependency version requirements (<https://github.com/github/licensed/pull/173>)
576
645
 
577
646
  ## 2.3.0
647
+
578
648
  2019-05-19
579
649
 
580
650
  ### Added
581
- - New Pipenv dependency source enumerator (:tada: @krzysztof-pawlik-gat https://github.com/github/licensed/pull/167)
651
+
652
+ - New Pipenv dependency source enumerator (:tada: @krzysztof-pawlik-gat <https://github.com/github/licensed/pull/167>)
582
653
 
583
654
  ## 2.2.0
655
+
584
656
  2019-05-11
585
657
 
586
658
  ### Added
587
- - Content hash versioning strategy for go and manifest sources (https://github.com/github/licensed/pull/164)
659
+
660
+ - Content hash versioning strategy for go and manifest sources (<https://github.com/github/licensed/pull/164>)
588
661
 
589
662
  ### Fixed
590
- - Python source handles urls and package names with "-" in requirements.txt (:tada: @krzysztof-pawlik-gat https://github.com/github/licensed/pull/165)
663
+
664
+ - Python source handles urls and package names with "-" in requirements.txt (:tada: @krzysztof-pawlik-gat <https://github.com/github/licensed/pull/165>)
591
665
 
592
666
  ## 2.1.0
667
+
593
668
  2019-04-16
594
669
 
595
670
  ### Added
596
- - New Gradle dependency source enumerator (:tada: @dbussink https://github.com/github/licensed/pull/150, @jandersson-svt https://github.com/github/licensed/pull/159)
597
- - Metadata added to distributed packages (https://github.com/github/licensed/pull/160)
671
+
672
+ - New Gradle dependency source enumerator (:tada: @dbussink <https://github.com/github/licensed/pull/150>, @jandersson-svt <https://github.com/github/licensed/pull/159>)
673
+ - Metadata added to distributed packages (<https://github.com/github/licensed/pull/160>)
598
674
 
599
675
  ### Changes
600
- - Bundler dependency source loads license key from a gem's cached gemspec file as a fallback (https://github.com/github/licensed/pull/154)
601
- - Licensed will only raise errors on an empty dependency path when caching records (https://github.com/github/licensed/pull/149)
676
+
677
+ - Bundler dependency source loads license key from a gem's cached gemspec file as a fallback (<https://github.com/github/licensed/pull/154>)
678
+ - Licensed will only raise errors on an empty dependency path when caching records (<https://github.com/github/licensed/pull/149>)
602
679
 
603
680
  ### Fixed
604
- - Migrating to v2 will no longer crash trying to migrate cached records that don't exist (https://github.com/github/licensed/pull/148)
605
- - Reported warnings will no longer crash licensed when caching records (https://github.com/github/licensed/pull/147)
681
+
682
+ - Migrating to v2 will no longer crash trying to migrate cached records that don't exist (<https://github.com/github/licensed/pull/148>)
683
+ - Reported warnings will no longer crash licensed when caching records (<https://github.com/github/licensed/pull/147>)
606
684
 
607
685
  ## 2.0.1
686
+
608
687
  2019-02-14
609
688
 
610
689
  ### Changes
690
+
611
691
  - Dependency paths that don't exist on the local disk are reported as warnings
612
692
  - Cache, status and list output is sorted by app name, source type and dependency name
613
693
  - Bumped `licensee` gem requirement
614
694
 
615
695
  ## 2.0.0
696
+
616
697
  2019-02-09
617
698
 
618
699
  **This is a major release and includes breaking changes to the configuration and cached record file formats**
619
700
 
620
701
  ### Added
702
+
621
703
  - New `migrate` command to automatically update configuration and cached record file formats
622
704
  - New extensible reporting infrastructure
623
705
  - New base command and source classes to abstract away implementation details
624
706
 
625
707
  ### Changes
708
+
626
709
  - Cached dependency metadata files are now stored entirely as YAML, with `.dep.yml` extension
627
710
  - The Bundler dependency source is now identified in configuration files and output as `bundler` instead of `rubygem`
628
711
  - Refactored sources for better consistency between classes
@@ -631,134 +714,171 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
631
714
  - Updated Dependency classes for better integration with `licensee`
632
715
 
633
716
  ### Fixed
717
+
634
718
  - Licensed no longer exits on errors when evaluating dependency sources or finding dependencies
635
719
  - The Bundler dependency source correctly finds the `bundler` gem as a dependency in more cases
636
720
 
637
721
  ## 1.5.2
722
+
638
723
  2018-12-27
639
724
 
640
725
  ### Changes
641
- - Go source added support for Go modules and Golang 1.11+ (https://github.com/github/licensed/pull/113)
726
+
727
+ - Go source added support for Go modules and Golang 1.11+ (<https://github.com/github/licensed/pull/113>)
642
728
 
643
729
  ### Fixed
644
- - Licensed will have a non-zero exit code when commands fail (:tada: @parkr https://github.com/github/licensed/pull/111)
730
+
731
+ - Licensed will have a non-zero exit code when commands fail (:tada: @parkr <https://github.com/github/licensed/pull/111>)
645
732
 
646
733
  ## 1.5.1
734
+
647
735
  2018-10-30
648
736
 
649
737
  ### Fixed
650
- - Fixed a scenario where licensed wasn't finding bundler dependencies when run as an executable due to a ruby version mismatch (https://github.com/github/licensed/pull/106)
738
+
739
+ - Fixed a scenario where licensed wasn't finding bundler dependencies when run as an executable due to a ruby version mismatch (<https://github.com/github/licensed/pull/106>)
651
740
 
652
741
  ## 1.5.0
742
+
653
743
  2018-10-24
654
744
 
655
745
  ### Added
656
- - `licensed (version | -v | --version)` command to see the current licensed version (:tada: @mwagz! https://github.com/github/licensed/pull/101)
746
+
747
+ - `licensed (version | -v | --version)` command to see the current licensed version (:tada: @mwagz! <https://github.com/github/licensed/pull/101>)
657
748
 
658
749
  ### Fixed
659
- - NPM source no longer raises an error when ignored dependencies aren't found (:tada: @mwagz! https://github.com/github/licensed/pull/100)
660
- - Checking for a Git repo will no longer possibly modify `.git/index` (:tada: @dbussink https://github.com/github/licensed/pull/102)
661
- - Fixed a scenario where licensed wasn't finding bundler dependencies when run as an executable (https://github.com/github/licensed/pull/103)
750
+
751
+ - NPM source no longer raises an error when ignored dependencies aren't found (:tada: @mwagz! <https://github.com/github/licensed/pull/100>)
752
+ - Checking for a Git repo will no longer possibly modify `.git/index` (:tada: @dbussink <https://github.com/github/licensed/pull/102>)
753
+ - Fixed a scenario where licensed wasn't finding bundler dependencies when run as an executable (<https://github.com/github/licensed/pull/103>)
662
754
 
663
755
  ## 1.4.0
756
+
664
757
  2018-10-20
665
758
 
666
759
  ### Added
760
+
667
761
  - Git Submodules dependency source :tada:
668
762
  - Configuration option to explicitly set a root absolute path
669
763
 
670
764
  ### Changes
765
+
671
766
  - `COPYING` file is no longer matched as a legal file
672
767
 
673
768
  ### Fixed
769
+
674
770
  - NPM source will enumerate multiple versions of the same dependency
675
771
  - Running Licensed outside of a Git repository no longer raises an error
676
772
  - Packaging scripts will correctly return to the previous branch when the script is finished
677
773
 
678
774
  ## 1.3.4
775
+
679
776
  2018-09-20
680
777
 
681
778
  ### Changes
779
+
682
780
  - Bundler source will avoid looking for a gemspec file when possible
683
781
 
684
782
  ## 1.3.3
783
+
685
784
  2018-09-07
686
785
 
687
786
  ### Fixed
787
+
688
788
  - Manifest source configuration globs correctly enumerates files from within submodules
689
789
  - The manifest source no longer errors when getting version information from submodules
690
790
 
691
791
  ## 1.3.2
792
+
692
793
  2018-08-15
693
794
 
694
795
  ### Fixed
796
+
695
797
  - Fixed issue when multiple versions of a cabal package are found
696
798
 
697
799
  ## 1.3.1
800
+
698
801
  2018-08-01
699
802
 
700
803
  ### Fixed
804
+
701
805
  - Fixed regression finding ruby gems by path
702
806
 
703
807
  ## 1.3.0
808
+
704
809
  2018-07-25
705
810
 
706
811
  ### Added
812
+
707
813
  - Manifests for the manifest dependency source can be specified using glob patterns in the configuration
708
814
  - Paths to licenses for dependencies from the manifest dependency source can be specified in the configuration
709
815
  - Manifest dependency source looks for license content in C-style comments if a license file isn't found
710
816
 
711
817
  ## Changes
818
+
712
819
  - GitHub is no longer queried to find remote license information
713
820
  - Removed custom logic around determining whether to use the license key from `licensee`
714
821
  - NPM dependency enumeration doesn't use `npm list`
715
822
  - Licensed now tracks content from multiple license files when available
716
823
 
717
824
  ### Fixed
825
+
718
826
  - Fixed regression finding platform-specific ruby gems
719
827
 
720
828
  ## 1.2.0
829
+
721
830
  2018-06-22
722
831
 
723
832
  ### Added
833
+
724
834
  - Building and packaging distributable exes for licensed releases
725
835
  - Can now configure which Gemfile groups are excluded from dependency enumeration
726
836
 
727
837
  ### Fixed
838
+
728
839
  - Bundler is no longer always reported as a dependency
729
840
  - Set the minimum required ruby version for licensed
730
841
 
731
842
  ## 1.1.0
843
+
732
844
  2018-06-04
733
845
 
734
846
  ### Added
847
+
735
848
  - Pip dependency source :tada:
736
849
  - Go Dep dependency source :tada:
737
850
 
738
851
  ### Changed
852
+
739
853
  - Changed how `sources` configuration property affects which sources are enabled
740
854
  - Raise informative error messages when shell commands fail
741
855
 
742
856
  ### Fixed
857
+
743
858
  - Don't reuse cached license when cached version metadata is missing
744
859
  - Disable dependency sources when dependent tools are not available
745
860
  - Vendored packages from the go std library are properly excluded
746
861
  - Cabal dependency enumeration properly includes executable targets
747
862
 
748
863
  ## 1.0.1
864
+
749
865
  2018-04-26
750
866
 
751
867
  ### Added
868
+
752
869
  - GOPATH settable in configuration file
753
870
 
754
871
  ### Changed
872
+
755
873
  - Reuse "license" metadata property when license text has not changed
756
874
 
757
875
  ### Fixed
876
+
758
877
  - Path expansion for cabal "ghc_package_db" configuration setting occurs from repository root
759
878
  - Local Gemfile(.lock) files correctly used in enumerating Bundler source dependencies
760
879
 
761
880
  ## 1.0.0
881
+
762
882
  2018-02-20
763
883
 
764
884
  Initial release :tada:
data/Gemfile.lock CHANGED
@@ -1,7 +1,8 @@
1
1
  PATH
2
2
  remote: .
3
3
  specs:
4
- licensed (5.0.1)
4
+ licensed (5.0.2)
5
+ csv (~> 3.3)
5
6
  json (~> 2.6)
6
7
  licensee (~> 9.16)
7
8
  parallel (~> 1.22)
@@ -32,6 +33,7 @@ GEM
32
33
  byebug (11.1.3)
33
34
  concurrent-ruby (1.2.3)
34
35
  connection_pool (2.4.1)
36
+ csv (3.3.2)
35
37
  dotenv (3.1.4)
36
38
  drb (2.2.1)
37
39
  faraday (2.12.1)
@@ -42,7 +44,7 @@ GEM
42
44
  net-http (>= 0.5.0)
43
45
  i18n (1.14.4)
44
46
  concurrent-ruby (~> 1.0)
45
- json (2.8.2)
47
+ json (2.9.1)
46
48
  licensee (9.18.0)
47
49
  dotenv (>= 2, < 4)
48
50
  octokit (>= 4.20, < 10.0)
@@ -51,10 +53,10 @@ GEM
51
53
  thor (>= 0.19, < 2.0)
52
54
  logger (1.6.1)
53
55
  mini_portile2 (2.8.8)
54
- minitest (5.25.1)
56
+ minitest (5.25.4)
55
57
  minitest-hooks (1.5.2)
56
58
  minitest (> 5.3)
57
- mocha (2.6.1)
59
+ mocha (2.7.1)
58
60
  ruby2_keywords (>= 0.0.5)
59
61
  mutex_m (0.2.0)
60
62
  net-http (0.5.0)
data/docs/migrations/v3.md CHANGED
@@ -16,7 +16,7 @@ Using licensed to enumerate bundler dependencies in a GitHub Actions workflow wi
16
16
 
17
17
  If you are using licensed in a GitHub Actions workflow, [github/setup-licensed](https://github.com/github/setup-licensed) has been updated according to this breaking change. `setup-licensed` will install the licensed gem when ruby is available, or the licensed executable when ruby is not available. Alternatively, you can `gem install` licensed directly as an actions step.
18
18
 
19
- This is an example workflow definition that runs [github/licensed-ci](https://github.com/github/licensed-ci)'s opinionated license compliance workflow in CI. It includes jobs that demonstrate installing licensed using
19
+ This is an example workflow definition that runs [github/licensed-ci](https://github.com/github/licensed-ci)'s opinionated license compliance workflow in CI. It includes jobs that demonstrate installing licensed using
20
20
  - `gem install`
21
21
  - [github/setup-licensed](https://github.com/github/setup-licensed)
22
22
  - installing when included in a bundler gem file
@@ -43,9 +43,9 @@ jobs:
43
43
  steps:
44
44
  # checkout the repo
45
45
  - uses: actions/checkout@v1
46
-
46
+
47
47
  # install ruby
48
- - uses: ruby/setup-ruby@v1
48
+ - uses: ruby/setup-ruby@a2bbe5b1b236842c1cb7dd11e8e3b51e0a616acc
49
49
  with:
50
50
  ruby-version: "3.0"
51
51
 
@@ -60,8 +60,8 @@ jobs:
60
60
  # run licensed-ci to cache any metadata changes and verify compliance
61
61
  - uses: github/licensed-ci@v1
62
62
 
63
- # OR
64
-
63
+ # OR
64
+
65
65
  # install licensed using gem install
66
66
  licensed-ci-gem:
67
67
  runs-on: ubuntu-latest
@@ -69,9 +69,9 @@ jobs:
69
69
  steps:
70
70
  # checkout the repo
71
71
  - uses: actions/checkout@v1
72
-
72
+
73
73
  # install ruby and bundler
74
- - uses: ruby/setup-ruby@v1
74
+ - uses: ruby/setup-ruby@a2bbe5b1b236842c1cb7dd11e8e3b51e0a616acc
75
75
  with:
76
76
  ruby-version: "3.0"
77
77
 
@@ -93,9 +93,9 @@ jobs:
93
93
  steps:
94
94
  # checkout the repo
95
95
  - uses: actions/checkout@v1
96
-
96
+
97
97
  # install ruby and bundler
98
- - uses: ruby/setup-ruby@v1
98
+ - uses: ruby/setup-ruby@a2bbe5b1b236842c1cb7dd11e8e3b51e0a616acc
99
99
  with:
100
100
  ruby-version: "3.0"
101
101
 
data/lib/licensed/sources/npm.rb CHANGED
@@ -48,7 +48,7 @@ module Licensed
48
48
  end
49
49
 
50
50
  def packages
51
- root_dependencies = package_metadata["dependencies"]
51
+ root_dependencies = package_metadata["dependencies"] || {}
52
52
  recursive_dependencies(root_dependencies).each_with_object({}) do |(name, results), hsh|
53
53
  results.uniq! { |package| package["version"] }
54
54
  if results.size == 1
data/lib/licensed/version.rb CHANGED
@@ -1,6 +1,6 @@
1
1
  # frozen_string_literal: true
2
2
  module Licensed
3
- VERSION = "5.0.1".freeze
3
+ VERSION = "5.0.2".freeze
4
4
 
5
5
  def self.previous_major_versions
6
6
  major_version = Gem::Version.new(Licensed::VERSION).segments.first
data/licensed.gemspec CHANGED
@@ -23,6 +23,7 @@ Gem::Specification.new do |spec|
23
23
 
24
24
  spec.required_ruby_version = ">= 3.0.0"
25
25
 
26
+ spec.add_dependency "csv", "~> 3.3"
26
27
  spec.add_dependency "licensee", "~> 9.16"
27
28
  spec.add_dependency "thor", "~> 1.2"
28
29
  spec.add_dependency "pathname-common_prefix", "~> 0.0.1"
metadata CHANGED
@@ -1,15 +1,29 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: licensed
3
3
  version: !ruby/object:Gem::Version
4
- version: 5.0.1
4
+ version: 5.0.2
5
5
  platform: ruby
6
6
  authors:
7
7
  - GitHub
8
- autorequire:
8
+ autorequire:
9
9
  bindir: exe
10
10
  cert_chain: []
11
- date: 2024-12-02 00:00:00.000000000 Z
11
+ date: 2025-02-06 00:00:00.000000000 Z
12
12
  dependencies:
13
+ - !ruby/object:Gem::Dependency
14
+ name: csv
15
+ requirement: !ruby/object:Gem::Requirement
16
+ requirements:
17
+ - - "~>"
18
+ - !ruby/object:Gem::Version
19
+ version: '3.3'
20
+ type: :runtime
21
+ prerelease: false
22
+ version_requirements: !ruby/object:Gem::Requirement
23
+ requirements:
24
+ - - "~>"
25
+ - !ruby/object:Gem::Version
26
+ version: '3.3'
13
27
  - !ruby/object:Gem::Dependency
14
28
  name: licensee
15
29
  requirement: !ruby/object:Gem::Requirement
@@ -333,7 +347,7 @@ homepage: https://github.com/github/licensed
333
347
  licenses:
334
348
  - MIT
335
349
  metadata: {}
336
- post_install_message:
350
+ post_install_message:
337
351
  rdoc_options: []
338
352
  require_paths:
339
353
  - lib
@@ -349,7 +363,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
349
363
  version: '0'
350
364
  requirements: []
351
365
  rubygems_version: 3.3.26
352
- signing_key:
366
+ signing_key:
353
367
  specification_version: 4
354
368
  summary: Extract and validate the licenses of dependencies.
355
369
  test_files: []