mirrors/arti.git/maint/check_licenses, branch arti-v1.9.0mirror of https://gitlab.torproject.org/tpo/core/arti
http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v1.9.02025-12-09T10:27:27Zcheck_licenses: Adjust comment on priority-queue exception2025-12-09T10:27:27ZGabriela Moldovangabi@torproject.org2025-12-08T16:18:40Zurn:sha1:0f549dc639118c2547b96c90cad00b98b88ebba5
Technically `priority-queue` belongs in the `MPL_20_OK` list, but our
current checks are too rudimentary to be able to handle the `OR` (we
*do* split on `OR` for one of the checks, but we only compare the
resulting licenses against `RECOGNIZED_LICENSES`, not `MPL_20_OK`). So
for now, let's retain the exception for `priority-queue`.
(We could expand the logic in the branch handling the `OR'`d licenses to
fix this issue, but the result would be quite fragile; and besides, I
think we're going to eventually want to replace this with a proper
license parser).
check_licenses: Update comment about priority-queue2025-12-09T10:27:27ZGabriela Moldovangabi@torproject.org2025-12-01T11:29:06Zurn:sha1:996b669e42be3b9cbab8ea7176bfa55472b3eb77
They have in fact added the MPL "Exhibit A" text to every file in the
crate.
The license is still LGPL-3.0-or-later OR MPL-2.0, so the rest of the
comment still applies.
See
https://github.com/garro95/priority-queue/pull/54/commits/e2f90b0811c252f80165bbdb19233464289e428f
check_licenses: refactor how we handle per-crate exceptions2025-08-27T16:22:28ZNick Mathewsonnickm@torproject.org2025-08-27T16:22:28Zurn:sha1:060b98f1968996f23a590987cfec5a04b13934b7
Instead of using a specific "if" for each license/crate combo (as we
had done for priority-queue) or adding a blanket exception (as we
had done for ring and aws-lc-sys) we now use an associative array to
indicate that a license is allowed for a single crate.
Remove a workaround for older broken cargo-license2025-08-27T15:52:01ZNick Mathewsonnickm@torproject.org2025-08-27T15:52:01Zurn:sha1:b4351292ca66a9acf51f01652dd41361c20db34cRemove license exception for ring2025-08-27T15:49:31ZNick Mathewsonnickm@torproject.org2025-08-27T15:49:31Zurn:sha1:89b73625e56b7f862af281fde75d6daef47f04b7
Ring is now "Apache-2.0 AND ISC".
check_licenses: treat LGPL-3.0/LGPL-3.0-only as synonyms2025-07-30T14:10:21ZNick Mathewsonnickm@torproject.org2025-07-30T12:12:43Zurn:sha1:0d84ff43c021ca7c45d2a12ed2f2f4919a965683
cargo-license version 0.7 now normalizes the "-only" variant into
"LGPL-3.0".
check_licenses: allow sorted versions of some spdx exprs2025-07-30T14:10:21ZNick Mathewsonnickm@torproject.org2025-07-30T12:09:38Zurn:sha1:ae80586ae1f81ff3fcac65aa66a820e67fca3988
cargo-license 0.7 has started normalizing SPDX expressions, which
includes sorting the licenses in an AND or OR.
maint: Update check_license exceptions.2025-04-30T14:19:16ZWesley Aptekar-Casselsme@wesleyac.com2025-04-30T14:17:47Zurn:sha1:906a5011ee1b0dd11b4ea3451844d9b345423b6e
webpki have fixed their situation, and tinystr is now Unicode-3.0
licensed.
maint: Allow CDLA-Permissive-2.0 license.2025-04-29T21:35:34ZWesley Aptekar-Casselsme@wesleyac.com2025-04-29T17:52:38Zurn:sha1:cfccc08a7a81f4037ce0e051698deb3d1e6c567a
This seems to be compatible with our licenses, and is used by the webpki
crates.
arti-ureq: New library which integrates with ureq2025-04-09T10:59:19Znieldcontact@ndvibes.com2025-04-09T10:59:19Zurn:sha1:91d6b0ed2116e27a9764753a314911a9fc0ba814
Fixes #1519