From d3df3de1a682f13cc7c98529e56606e5ae4851c6 Mon Sep 17 00:00:00 2001 From: Tiago Silva Date: Fri, 20 Dec 2024 16:35:56 +0000 Subject: [PATCH] dependency review: add 0BSD and Apache-2.0 variants MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Checks started failing this evening with: The following dependencies have incompatible licenses: pnpm-lock.yaml » prettier@3.4.2 – License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT pnpm-lock.yaml » rollup@4.28.1 – License: 0BSD AND ISC AND MIT The `rollup` library is MIT but some of its dependencies are ISC and 0BSD [1] The `prettier` is released under MIT but some of its dependencies use other licenses [2]. [1] https://github.com/rollup/rollup/blob/master/LICENSE.md [2] https://github.com/prettier/prettier/blob/main/LICENSE Signed-off-by: Tiago Silva --- .github/workflows/dependency-review.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/dependency-review.yaml b/.github/workflows/dependency-review.yaml index ffc8eee9..a3f5f17c 100644 --- a/.github/workflows/dependency-review.yaml +++ b/.github/workflows/dependency-review.yaml @@ -56,7 +56,7 @@ jobs: uses: actions/dependency-review-action@5bbc3ba658137598168acb2ab73b21c432dd411b # v4.2.5 with: fail-on-severity: ${{ inputs.fail-on-severity }} - allow-licenses: 0BSD, Apache-2.0, BlueOak-1.0.0, BSD-2-Clause, BSD-2-Clause-FreeBSD, BSD-3-Clause, BSD-2-Clause AND BSD-3-Clause, BSD-3-Clause AND BSD-3-Clause-Clear, CC-BY-3.0, CC-BY-4.0, CC0-1.0, ISC, LGPL-2.1, MIT, MIT-0, MPL-2.0, ODC-By-1.0, OFL-1.1, Python-2.0, Unicode-DFS-2016, Unlicense, WTFPL, Zlib, (MIT OR Apache-2.0) AND Unicode-DFS-2016, Apache-2.0 AND BSD-3-Clause, ISC AND MIT, MIT AND Zlib, MIT AND BSD-3-Clause, MIT AND WTFPL, ISC AND (Apache-2.0 OR ISC) AND OpenSSL + allow-licenses: 0BSD, 0BSD AND ISC AND MIT, Apache-2.0, Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT, BlueOak-1.0.0, BSD-2-Clause, BSD-2-Clause-FreeBSD, BSD-3-Clause, BSD-2-Clause AND BSD-3-Clause, BSD-3-Clause AND BSD-3-Clause-Clear, CC-BY-3.0, CC-BY-4.0, CC0-1.0, ISC, LGPL-2.1, MIT, MIT-0, MPL-2.0, ODC-By-1.0, OFL-1.1, Python-2.0, Unicode-DFS-2016, Unlicense, WTFPL, Zlib, (MIT OR Apache-2.0) AND Unicode-DFS-2016, Apache-2.0 AND BSD-3-Clause, ISC AND MIT, MIT AND Zlib, MIT AND BSD-3-Clause, MIT AND WTFPL, ISC AND (Apache-2.0 OR ISC) AND OpenSSL allow-ghsas: ${{ inputs.allow-ghsas }} allow-dependencies-licenses: ${{ inputs.allow-dependencies-licenses != '' && format('pkg:golang/github.com/gravitational/teleport, pkg:golang/github.com/gravitational/teleport/api, {0}', inputs.allow-dependencies-licenses) || 'pkg:golang/github.com/gravitational/teleport, pkg:golang/github.com/gravitational/teleport/api'}} comment-summary-in-pr: on-failure