From fd81cb117ed11794fd09df8e790a348a4031ee5b Mon Sep 17 00:00:00 2001 From: per1234 Date: Wed, 26 Feb 2025 17:28:45 -0800 Subject: [PATCH 1/3] Update project Go version to 1.24.0 --- Taskfile.yml | 2 +- go.mod | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Taskfile.yml b/Taskfile.yml index b921c974..cd5f4a6c 100644 --- a/Taskfile.yml +++ b/Taskfile.yml @@ -97,7 +97,7 @@ tasks: desc: Refresh dependency metadata dir: "{{default .DEFAULT_GO_MODULE_PATH .GO_MODULE_PATH}}" vars: - GO_VERSION: 1.23 + GO_VERSION: 1.24.0 cmds: - go mod tidy -compat={{.GO_VERSION}} diff --git a/go.mod b/go.mod index 43383264..68cfd85b 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module github.com/arduino/libraries-repository-engine -go 1.23.0 +go 1.24.0 require ( github.com/arduino/go-paths-helper v1.12.1 From 19d349b8320154ef0711beafb0a1497d24a786c4 Mon Sep 17 00:00:00 2001 From: per1234 Date: Wed, 26 Feb 2025 17:36:34 -0800 Subject: [PATCH 2/3] Update dependency license metadata cache for Go bump --- .../go/golang.org/x/crypto/hkdf.dep.yml | 63 +++++++++++++++++++ .../go/golang.org/x/crypto/sha3.dep.yml | 63 +++++++++++++++++++ 2 files changed, 126 insertions(+) create mode 100644 .licenses/libraries-repository-engine/go/golang.org/x/crypto/hkdf.dep.yml create mode 100644 .licenses/libraries-repository-engine/go/golang.org/x/crypto/sha3.dep.yml diff --git a/.licenses/libraries-repository-engine/go/golang.org/x/crypto/hkdf.dep.yml b/.licenses/libraries-repository-engine/go/golang.org/x/crypto/hkdf.dep.yml new file mode 100644 index 00000000..0ca107ea --- /dev/null +++ b/.licenses/libraries-repository-engine/go/golang.org/x/crypto/hkdf.dep.yml @@ -0,0 +1,63 @@ +--- +name: golang.org/x/crypto/hkdf +version: v0.31.0 +type: go +summary: Package hkdf implements the HMAC-based Extract-and-Expand Key Derivation + Function (HKDF) as defined in RFC 5869. +homepage: https://pkg.go.dev/golang.org/x/crypto/hkdf +license: other +licenses: +- sources: crypto@v0.31.0/LICENSE + text: | + Copyright 2009 The Go Authors. + + Redistribution and use in source and binary forms, with or without + modification, are permitted provided that the following conditions are + met: + + * Redistributions of source code must retain the above copyright + notice, this list of conditions and the following disclaimer. + * Redistributions in binary form must reproduce the above + copyright notice, this list of conditions and the following disclaimer + in the documentation and/or other materials provided with the + distribution. + * Neither the name of Google LLC nor the names of its + contributors may be used to endorse or promote products derived from + this software without specific prior written permission. + + THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS + "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT + LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR + A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT + OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, + SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT + LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, + DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY + THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT + (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE + OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. +- sources: crypto@v0.31.0/PATENTS + text: | + Additional IP Rights Grant (Patents) + + "This implementation" means the copyrightable works distributed by + Google as part of the Go project. + + Google hereby grants to You a perpetual, worldwide, non-exclusive, + no-charge, royalty-free, irrevocable (except as stated in this section) + patent license to make, have made, use, offer to sell, sell, import, + transfer and otherwise run, modify and propagate the contents of this + implementation of Go, where such license applies only to those patent + claims, both currently owned or controlled by Google and acquired in + the future, licensable by Google that are necessarily infringed by this + implementation of Go. This grant does not include claims that would be + infringed only as a consequence of further modification of this + implementation. If you or your agent or exclusive licensee institute or + order or agree to the institution of patent litigation against any + entity (including a cross-claim or counterclaim in a lawsuit) alleging + that this implementation of Go or any code incorporated within this + implementation of Go constitutes direct or contributory patent + infringement, or inducement of patent infringement, then any patent + rights granted to you under this License for this implementation of Go + shall terminate as of the date such litigation is filed. +notices: [] diff --git a/.licenses/libraries-repository-engine/go/golang.org/x/crypto/sha3.dep.yml b/.licenses/libraries-repository-engine/go/golang.org/x/crypto/sha3.dep.yml new file mode 100644 index 00000000..0865ac5a --- /dev/null +++ b/.licenses/libraries-repository-engine/go/golang.org/x/crypto/sha3.dep.yml @@ -0,0 +1,63 @@ +--- +name: golang.org/x/crypto/sha3 +version: v0.31.0 +type: go +summary: Package sha3 implements the SHA-3 fixed-output-length hash functions and + the SHAKE variable-output-length hash functions defined by FIPS-202. +homepage: https://pkg.go.dev/golang.org/x/crypto/sha3 +license: other +licenses: +- sources: crypto@v0.31.0/LICENSE + text: | + Copyright 2009 The Go Authors. + + Redistribution and use in source and binary forms, with or without + modification, are permitted provided that the following conditions are + met: + + * Redistributions of source code must retain the above copyright + notice, this list of conditions and the following disclaimer. + * Redistributions in binary form must reproduce the above + copyright notice, this list of conditions and the following disclaimer + in the documentation and/or other materials provided with the + distribution. + * Neither the name of Google LLC nor the names of its + contributors may be used to endorse or promote products derived from + this software without specific prior written permission. + + THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS + "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT + LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR + A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT + OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, + SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT + LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, + DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY + THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT + (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE + OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. +- sources: crypto@v0.31.0/PATENTS + text: | + Additional IP Rights Grant (Patents) + + "This implementation" means the copyrightable works distributed by + Google as part of the Go project. + + Google hereby grants to You a perpetual, worldwide, non-exclusive, + no-charge, royalty-free, irrevocable (except as stated in this section) + patent license to make, have made, use, offer to sell, sell, import, + transfer and otherwise run, modify and propagate the contents of this + implementation of Go, where such license applies only to those patent + claims, both currently owned or controlled by Google and acquired in + the future, licensable by Google that are necessarily infringed by this + implementation of Go. This grant does not include claims that would be + infringed only as a consequence of further modification of this + implementation. If you or your agent or exclusive licensee institute or + order or agree to the institution of patent litigation against any + entity (including a cross-claim or counterclaim in a lawsuit) alleging + that this implementation of Go or any code incorporated within this + implementation of Go constitutes direct or contributory patent + infringement, or inducement of patent infringement, then any patent + rights granted to you under this License for this implementation of Go + shall terminate as of the date such litigation is filed. +notices: [] From 52cd022cf6f7f1769207dda5e74c0c11365f3bfe Mon Sep 17 00:00:00 2001 From: per1234 Date: Wed, 26 Feb 2025 17:38:39 -0800 Subject: [PATCH 3/3] Manually define dependency license metadata that was not detected The "Licensed" dependency license checker tool uses the licensee tool to automatically determine the license type based on metadata provided by the dependency author. This must be in a standardized format without any modifications. In cases where that wasn't done, it is necessary to determine the license type and update the dependency license metadata cache in the `.licenses` folder manually. The Licensed tool will check this data whenever the dependency version is updated to make sure the license hasn't changed. --- .../go/golang.org/x/crypto/hkdf.dep.yml | 2 +- .../go/golang.org/x/crypto/sha3.dep.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.licenses/libraries-repository-engine/go/golang.org/x/crypto/hkdf.dep.yml b/.licenses/libraries-repository-engine/go/golang.org/x/crypto/hkdf.dep.yml index 0ca107ea..d904525d 100644 --- a/.licenses/libraries-repository-engine/go/golang.org/x/crypto/hkdf.dep.yml +++ b/.licenses/libraries-repository-engine/go/golang.org/x/crypto/hkdf.dep.yml @@ -5,7 +5,7 @@ type: go summary: Package hkdf implements the HMAC-based Extract-and-Expand Key Derivation Function (HKDF) as defined in RFC 5869. homepage: https://pkg.go.dev/golang.org/x/crypto/hkdf -license: other +license: bsd-3-clause licenses: - sources: crypto@v0.31.0/LICENSE text: | diff --git a/.licenses/libraries-repository-engine/go/golang.org/x/crypto/sha3.dep.yml b/.licenses/libraries-repository-engine/go/golang.org/x/crypto/sha3.dep.yml index 0865ac5a..d6c8d29f 100644 --- a/.licenses/libraries-repository-engine/go/golang.org/x/crypto/sha3.dep.yml +++ b/.licenses/libraries-repository-engine/go/golang.org/x/crypto/sha3.dep.yml @@ -5,7 +5,7 @@ type: go summary: Package sha3 implements the SHA-3 fixed-output-length hash functions and the SHAKE variable-output-length hash functions defined by FIPS-202. homepage: https://pkg.go.dev/golang.org/x/crypto/sha3 -license: other +license: bsd-3-clause licenses: - sources: crypto@v0.31.0/LICENSE text: |