github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2024-11-24 10:02:33 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity
main
discourse/.licensed.yml

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

78 lines
1.9 KiB
YAML
Raw Permalink Normal View History

DEV: Add a basic licensed config (#10128) This means a dev can run https://github.com/github/licensed in order to obtain license information easily
2020-06-26 05:01:36 +08:00
sources:
bundler: true
DEV: Update bundler `licensed` config (#19607) 1. Add `cgi` (ruby terms) 2. Move `strscan`, ~~`ruby2_keywords`, and `openssl`~~ to "reviewed" section (update: two of those are postponed, need to debug stuff in our docker image) 3. Sort
2022-12-23 21:04:03 +08:00
DEV: Add a basic licensed config (#10128) This means a dev can run https://github.com/github/licensed in order to obtain license information easily
2020-06-26 05:01:36 +08:00
allowed:
DEV: Add CI job that audits dependency licenses (#16568)
2022-04-27 02:09:42 +08:00
- 0bsd
DEV: Add a basic licensed config (#10128) This means a dev can run https://github.com/github/licensed in order to obtain license information easily
2020-06-26 05:01:36 +08:00
- apache-2.0
- bsd-2-clause
- bsd-3-clause
- cc0-1.0
- isc
DEV: Add CI job that audits dependency licenses (#16568)
2022-04-27 02:09:42 +08:00
- mit
- ruby
ignored:
bundler:
Build(deps): Bump highline from 2.1.0 to 3.0.0 (#25150) * Build(deps): Bump highline from 2.1.0 to 3.0.0 Bumps [highline](https://github.com/JEG2/highline) from 2.1.0 to 3.0.0. - [Changelog](https://github.com/JEG2/highline/blob/master/Changelog.md) - [Commits](https://github.com/JEG2/highline/compare/v2.1.0...v3.0.0) --- updated-dependencies: - dependency-name: highline dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> * add abbrev to ignored/default gems list --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Jarek Radosz <jradosz@gmail.com>
2024-01-09 05:20:15 +08:00
- abbrev # Ruby (default gem)
Build(deps): Bump faraday from 2.7.10 to 2.7.11 (#23554) * Build(deps): Bump faraday from 2.7.10 to 2.7.11 Bumps [faraday](https://github.com/lostisland/faraday) from 2.7.10 to 2.7.11. - [Release notes](https://github.com/lostisland/faraday/releases) - [Changelog](https://github.com/lostisland/faraday/blob/main/CHANGELOG.md) - [Commits](https://github.com/lostisland/faraday/compare/v2.7.10...v2.7.11) --- updated-dependencies: - dependency-name: faraday dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * add base64 --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Jarek Radosz <jradosz@gmail.com>
2023-09-14 07:33:44 +08:00
- base64 # Ruby (default gem)
Build(deps): Bump oj from 3.16.1 to 3.16.2 (#24781) * Build(deps): Bump oj from 3.16.1 to 3.16.2 Bumps [oj](https://github.com/ohler55/oj) from 3.16.1 to 3.16.2. - [Changelog](https://github.com/ohler55/oj/blob/develop/CHANGELOG.md) - [Commits](https://github.com/ohler55/oj/compare/v3.16.1...v3.16.2) --- updated-dependencies: - dependency-name: oj dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * Update .licensed.yml --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Jarek Radosz <jradosz@gmail.com>
2023-12-08 06:33:14 +08:00
- bigdecimal # Ruby (default gem)
DEV: Label and ignore all default gems (#19617) `licensed` fails to find gem's license if it's a default gem (see: https://stdgems.org) and the version you're requiring comes with the ruby version you're using. A ruby upgrade or any change to Gemfile could trigger `licensed` failures, so it's better to ignore all default gems we're using.
2022-12-24 18:59:08 +08:00
- cgi # Ruby (default gem)
- date # Ruby (default gem)
DEV: Add `digest` to licensed's default gems list (#20355)
2023-02-18 18:34:13 +08:00
- digest # Ruby (default gem)
DEV: Label and ignore all default gems (#19617) `licensed` fails to find gem's license if it's a default gem (see: https://stdgems.org) and the version you're requiring comes with the ruby version you're using. A ruby upgrade or any change to Gemfile could trigger `licensed` failures, so it's better to ignore all default gems we're using.
2022-12-24 18:59:08 +08:00
- io-wait # Ruby (default gem)
DEV: Add `logger` to default gems list (#27828) …and sort both lists alphabetically (unlocks #27781)
2024-07-10 20:36:13 +08:00
- irb # Ruby (default gem)
DEV: Label and ignore all default gems (#19617) `licensed` fails to find gem's license if it's a default gem (see: https://stdgems.org) and the version you're requiring comes with the ruby version you're using. A ruby upgrade or any change to Gemfile could trigger `licensed` failures, so it's better to ignore all default gems we're using.
2022-12-24 18:59:08 +08:00
- json # Ruby (default gem)
DEV: Add `logger` to default gems list (#27828) …and sort both lists alphabetically (unlocks #27781)
2024-07-10 20:36:13 +08:00
- logger # Ruby (default gem)
- mutex_m # BSD-2-Clause
DEV: Label and ignore all default gems (#19617) `licensed` fails to find gem's license if it's a default gem (see: https://stdgems.org) and the version you're requiring comes with the ruby version you're using. A ruby upgrade or any change to Gemfile could trigger `licensed` failures, so it's better to ignore all default gems we're using.
2022-12-24 18:59:08 +08:00
- net-http # Ruby (default gem)
- net-protocol # Ruby (default gem)
- openssl # Ruby (default gem)
Build(deps): Bump oj from 3.16.4 to 3.16.5 (#28287) * Build(deps): Bump oj from 3.16.4 to 3.16.5 Bumps [oj](https://github.com/ohler55/oj) from 3.16.4 to 3.16.5. - [Release notes](https://github.com/ohler55/oj/releases) - [Changelog](https://github.com/ohler55/oj/blob/develop/CHANGELOG.md) - [Commits](https://github.com/ohler55/oj/compare/v3.16.4...v3.16.5) --- updated-dependencies: - dependency-name: oj dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * add ostruct to default gems list --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Jarek Radosz <jradosz@gmail.com>
2024-08-12 18:16:54 +08:00
- ostruct # Ruby (default gem)
DEV: Label and ignore all default gems (#19617) `licensed` fails to find gem's license if it's a default gem (see: https://stdgems.org) and the version you're requiring comes with the ruby version you're using. A ruby upgrade or any change to Gemfile could trigger `licensed` failures, so it's better to ignore all default gems we're using.
2022-12-24 18:59:08 +08:00
- racc # Ruby (default gem)
- rchardet # LGPL
DEV: Add `logger` to default gems list (#27828) …and sort both lists alphabetically (unlocks #27781)
2024-07-10 20:36:13 +08:00
- rdoc # Ruby (default gem)
- reline # Ruby (default gem)
DEV: Label and ignore all default gems (#19617) `licensed` fails to find gem's license if it's a default gem (see: https://stdgems.org) and the version you're requiring comes with the ruby version you're using. A ruby upgrade or any change to Gemfile could trigger `licensed` failures, so it's better to ignore all default gems we're using.
2022-12-24 18:59:08 +08:00
- ruby2_keywords # Ruby (default gem)
DEV: Add `logger` to default gems list (#27828) …and sort both lists alphabetically (unlocks #27781)
2024-07-10 20:36:13 +08:00
- stringio # Ruby (default gem)
DEV: Label and ignore all default gems (#19617) `licensed` fails to find gem's license if it's a default gem (see: https://stdgems.org) and the version you're requiring comes with the ruby version you're using. A ruby upgrade or any change to Gemfile could trigger `licensed` failures, so it's better to ignore all default gems we're using.
2022-12-24 18:59:08 +08:00
- strscan # Ruby (default gem)
- timeout # Ruby (default gem)
- uri # Ruby (default gem)
DEV: Add CI job that audits dependency licenses (#16568)
2022-04-27 02:09:42 +08:00
reviewed:
bundler:
- activerecord # MIT
Build(deps): Bump the rails group with 6 updates Bumps the rails group with 6 updates: | Package | From | To | | --- | --- | --- | | [actionmailer](https://github.com/rails/rails) | `7.1.4.2` | `7.1.5` | | [actionpack](https://github.com/rails/rails) | `7.1.4.2` | `7.1.5` | | [actionview](https://github.com/rails/rails) | `7.1.4.2` | `7.1.5` | | [activerecord](https://github.com/rails/rails) | `7.1.4.2` | `7.1.5` | | [activesupport](https://github.com/rails/rails) | `7.1.4.2` | `7.1.5` | | [railties](https://github.com/rails/rails) | `7.1.4.2` | `7.1.5` | Updates `actionmailer` from 7.1.4.2 to 7.1.5 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v7.2.2/actionmailer/CHANGELOG.md) - [Commits](https://github.com/rails/rails/compare/v7.1.4.2...v7.1.5) Updates `actionpack` from 7.1.4.2 to 7.1.5 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v7.2.2/actionpack/CHANGELOG.md) - [Commits](https://github.com/rails/rails/compare/v7.1.4.2...v7.1.5) Updates `actionview` from 7.1.4.2 to 7.1.5 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v7.2.2/actionview/CHANGELOG.md) - [Commits](https://github.com/rails/rails/compare/v7.1.4.2...v7.1.5) Updates `activerecord` from 7.1.4.2 to 7.1.5 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v7.2.2/activerecord/CHANGELOG.md) - [Commits](https://github.com/rails/rails/compare/v7.1.4.2...v7.1.5) Updates `activesupport` from 7.1.4.2 to 7.1.5 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v7.2.2/activesupport/CHANGELOG.md) - [Commits](https://github.com/rails/rails/compare/v7.1.4.2...v7.1.5) Updates `railties` from 7.1.4.2 to 7.1.5 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v7.2.2/railties/CHANGELOG.md) - [Commits](https://github.com/rails/rails/compare/v7.1.4.2...v7.1.5) --- updated-dependencies: - dependency-name: actionmailer dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rails - dependency-name: actionpack dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rails - dependency-name: actionview dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rails - dependency-name: activerecord dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rails - dependency-name: activesupport dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rails - dependency-name: railties dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rails ... Signed-off-by: dependabot[bot] <support@github.com>
2024-11-05 05:29:54 +08:00
- benchmark # Ruby
DEV: Add CI job that audits dependency licenses (#16568)
2022-04-27 02:09:42 +08:00
- coderay # MIT
- concurrent-ruby # MIT
- css_parser # MIT
DEV: Add `logger` to default gems list (#27828) …and sort both lists alphabetically (unlocks #27781)
2024-07-10 20:36:13 +08:00
- drb # BSD-2-Clause
DEV: Introduce a `Service::ActionBase` class for service actions This will help to enforce a consistent pattern for creating service actions. This patch also namespaces actions and policies, making everything related to a service available directly in `app/services/<concept-name>`, making things more consistent at that level too.
2024-09-12 21:09:10 +08:00
- dry-initializer # MIT
DEV: Add CI job that audits dependency licenses (#16568)
2022-04-27 02:09:42 +08:00
- excon # MIT
- faraday-em_http # MIT
- faraday-em_synchrony # MIT
- faraday-excon # MIT
- faraday-httpclient # MIT
- faraday-net_http # MIT
DEV: Update bundler `licensed` config (#19607) 1. Add `cgi` (ruby terms) 2. Move `strscan`, ~~`ruby2_keywords`, and `openssl`~~ to "reviewed" section (update: two of those are postponed, need to debug stuff in our docker image) 3. Sort
2022-12-23 21:04:03 +08:00
- faraday-patron # MIT
DEV: Add CI job that audits dependency licenses (#16568)
2022-04-27 02:09:42 +08:00
- faraday-rack # MIT
DEV: Label and ignore all default gems (#19617) `licensed` fails to find gem's license if it's a default gem (see: https://stdgems.org) and the version you're requiring comes with the ruby version you're using. A ruby upgrade or any change to Gemfile could trigger `licensed` failures, so it's better to ignore all default gems we're using.
2022-12-24 18:59:08 +08:00
- highline # Ruby or GPL-2.0
DEV: Add CI job that audits dependency licenses (#16568)
2022-04-27 02:09:42 +08:00
- htmlentities # MIT
- image_size # MIT
- jwt # MIT
- kgio # LGPL-2.1+
- logstash-event # Apache-2.0
DEV: Label and ignore all default gems (#19617) `licensed` fails to find gem's license if it's a default gem (see: https://stdgems.org) and the version you're requiring comes with the ruby version you're using. A ruby upgrade or any change to Gemfile could trigger `licensed` failures, so it's better to ignore all default gems we're using.
2022-12-24 18:59:08 +08:00
- net-imap # Ruby (bundled gem)
- net-pop # Ruby (bundled gem)
- net-smtp # Ruby (bundled gem)
Build(deps): Bump nio4r from 2.5.8 to 2.5.9 (#20947) * Build(deps): Bump nio4r from 2.5.8 to 2.5.9 Bumps [nio4r](https://github.com/socketry/nio4r) from 2.5.8 to 2.5.9. - [Release notes](https://github.com/socketry/nio4r/releases) - [Changelog](https://github.com/socketry/nio4r/blob/main/CHANGES.md) - [Commits](https://github.com/socketry/nio4r/compare/v2.5.8...v2.5.9) --- updated-dependencies: - dependency-name: nio4r dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * Allow license --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Jarek Radosz <jradosz@gmail.com>
2023-04-04 08:28:29 +08:00
- nio4r # MIT + BSD
DEV: Add CI job that audits dependency licenses (#16568)
2022-04-27 02:09:42 +08:00
- omniauth # MIT
DEV: Label and ignore all default gems (#19617) `licensed` fails to find gem's license if it's a default gem (see: https://stdgems.org) and the version you're requiring comes with the ruby version you're using. A ruby upgrade or any change to Gemfile could trigger `licensed` failures, so it's better to ignore all default gems we're using.
2022-12-24 18:59:08 +08:00
- pg # Ruby
DEV: Add CI job that audits dependency licenses (#16568)
2022-04-27 02:09:42 +08:00
- r2 # Apache-2.0 (Twitter)
- raindrops # LGPL-2.1+
DEV: Label and ignore all default gems (#19617) `licensed` fails to find gem's license if it's a default gem (see: https://stdgems.org) and the version you're requiring comes with the ruby version you're using. A ruby upgrade or any change to Gemfile could trigger `licensed` failures, so it's better to ignore all default gems we're using.
2022-12-24 18:59:08 +08:00
- rubyzip # Ruby
Build(deps): Bump the rails group with 6 updates Bumps the rails group with 6 updates: | Package | From | To | | --- | --- | --- | | [actionmailer](https://github.com/rails/rails) | `7.1.4.2` | `7.1.5` | | [actionpack](https://github.com/rails/rails) | `7.1.4.2` | `7.1.5` | | [actionview](https://github.com/rails/rails) | `7.1.4.2` | `7.1.5` | | [activerecord](https://github.com/rails/rails) | `7.1.4.2` | `7.1.5` | | [activesupport](https://github.com/rails/rails) | `7.1.4.2` | `7.1.5` | | [railties](https://github.com/rails/rails) | `7.1.4.2` | `7.1.5` | Updates `actionmailer` from 7.1.4.2 to 7.1.5 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v7.2.2/actionmailer/CHANGELOG.md) - [Commits](https://github.com/rails/rails/compare/v7.1.4.2...v7.1.5) Updates `actionpack` from 7.1.4.2 to 7.1.5 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v7.2.2/actionpack/CHANGELOG.md) - [Commits](https://github.com/rails/rails/compare/v7.1.4.2...v7.1.5) Updates `actionview` from 7.1.4.2 to 7.1.5 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v7.2.2/actionview/CHANGELOG.md) - [Commits](https://github.com/rails/rails/compare/v7.1.4.2...v7.1.5) Updates `activerecord` from 7.1.4.2 to 7.1.5 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v7.2.2/activerecord/CHANGELOG.md) - [Commits](https://github.com/rails/rails/compare/v7.1.4.2...v7.1.5) Updates `activesupport` from 7.1.4.2 to 7.1.5 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v7.2.2/activesupport/CHANGELOG.md) - [Commits](https://github.com/rails/rails/compare/v7.1.4.2...v7.1.5) Updates `railties` from 7.1.4.2 to 7.1.5 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v7.2.2/railties/CHANGELOG.md) - [Commits](https://github.com/rails/rails/compare/v7.1.4.2...v7.1.5) --- updated-dependencies: - dependency-name: actionmailer dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rails - dependency-name: actionpack dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rails - dependency-name: actionview dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rails - dependency-name: activerecord dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rails - dependency-name: activesupport dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rails - dependency-name: railties dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rails ... Signed-off-by: dependabot[bot] <support@github.com>
2024-11-05 05:29:54 +08:00
- securerandom # Ruby
DEV: Add CI job that audits dependency licenses (#16568)
2022-04-27 02:09:42 +08:00
- sidekiq # LGPL (Sidekiq)
DEV: Update bundler `licensed` config (#19607) 1. Add `cgi` (ruby terms) 2. Move `strscan`, ~~`ruby2_keywords`, and `openssl`~~ to "reviewed" section (update: two of those are postponed, need to debug stuff in our docker image) 3. Sort
2022-12-23 21:04:03 +08:00
- tilt # MIT
DEV: Add CI job that audits dependency licenses (#16568)
2022-04-27 02:09:42 +08:00
- unf # BSD-2-Clause
DEV: Label and ignore all default gems (#19617) `licensed` fails to find gem's license if it's a default gem (see: https://stdgems.org) and the version you're requiring comes with the ruby version you're using. A ruby upgrade or any change to Gemfile could trigger `licensed` failures, so it's better to ignore all default gems we're using.
2022-12-24 18:59:08 +08:00
- unicorn # Ruby or GPLv2/GPLv3
Reference in New Issue Copy Permalink