v9.18.0

This version allows periods in file extensions when they form a part of a version number (e.g. LICENSE.Apache-2.0) and prioritizes listing results from files more likely to contain a standard license first (e.g., COPYING before COPYRIGHT).

What's Changed

• Bump the github-actions-all group with 3 updates by @dependabot in #752
• Bump ruby from 3.3.2 to 3.3.3 by @dependabot in #750
• Update rubocop-rspec requirement from ~> 2.0 to ~> 3.0 by @dependabot in #751
• Bump the github-actions-all group with 2 updates by @dependabot in #754
• Update vendored licenses and SPDX by @github-actions in #753
• Update vendored licenses and SPDX by @github-actions in #755
• Bump the github-actions-all group with 2 updates by @dependabot in #756
• Update vendored licenses and SPDX by @github-actions in #757
• Bump ruby from 8584c96 to 3acb1a3 by @dependabot in #758
• Bump the github-actions-all group with 2 updates by @dependabot in #759
• Bump the github-actions-all group with 3 updates by @dependabot in #760
• Bump ruby from 3.3.3 to 3.3.4 by @dependabot in #761
• Bump the github-actions-all group with 2 updates by @dependabot in #762
• Bump ruby from 4bea2a0 to 0bf712b by @dependabot in #765
• Bump the github-actions-all group with 3 updates by @dependabot in #764
• Update vendored licenses and SPDX by @github-actions in #766
• Bump the github-actions-all group across 1 directory with 3 updates by @dependabot in #768
• Bump ruby from 0bf712b to d4233f4 by @dependabot in #770
• Bump github/codeql-action from 3.26.0 to 3.26.2 in the github-actions-all group by @dependabot in #769
• Bump github/codeql-action from 3.26.2 to 3.26.5 in the github-actions-all group by @dependabot in #771
• Bump the github-actions-all group with 2 updates by @dependabot in #772
• Bump the github-actions-all group with 2 updates by @dependabot in #774
• Bump ruby from 3.3.4 to 3.3.5 by @dependabot in #773
• Bump the github-actions-all group with 3 updates by @dependabot in #775
• Bump the github-actions-all group with 3 updates by @dependabot in #777
• Bump ruby from 9ee6010 to dc4e58b by @dependabot in #778
• Bump the github-actions-all group with 3 updates by @dependabot in #779
• Bump the github-actions-all group with 2 updates by @dependabot in #780
• Bump the github-actions-all group with 4 updates by @dependabot in #781
• Bump the github-actions-all group with 2 updates by @dependabot in #784
• Bump ruby from dc4e58b to db263e7 by @dependabot in #783
• Allow periods in file extensions when they form a part of a version number by @pandaninjas in #785
• Bump the github-actions-all group with 3 updates by @dependabot in #786
• Bump ruby from db263e7 to bceec75 by @dependabot in #789
• Bump the github-actions-all group with 2 updates by @dependabot in #788
• Update reverse_markdown requirement from >= 1, < 3 to >= 1, < 4 by @dependabot in #787
• Bump ruby from 3.3.5 to 3.3.6 by @dependabot in #792
• Update vendored licenses and SPDX by @github-actions in #790
• Bump the github-actions-all group with 2 updates by @dependabot in #791
• Bump ruby from 3ae98cd to 9afef27 by @dependabot in #794
• Bump github/codeql-action from 3.27.1 to 3.27.4 in the github-actions-all group by @dependabot in #793
• Prioritize files likely to have actual license content by @mlinksva in #795

New Contributors

• @pandaninjas made their first contribution in #785

Full Changelog: v9.17.1...v9.18.0

v9.17.1

What's Changed

• Increase maximum Octokit version (#749) @alejndr0
• Bump the github-actions-all group with 4 updates (#748) @dependabot
• Update vendored licenses and SPDX (#743) @github-actions
• Bump ruby from 3.3.1 to 3.3.2 (#746) @dependabot
• Bump the github-actions-all group with 2 updates (#745) @dependabot
• Bump the github-actions-all group with 3 updates (#744) @dependabot
• Bump the github-actions-all group across 1 directory with 3 updates (#741) @dependabot
• Bump ruby from ce23a40 to 797d685 (#742) @dependabot
• Update vendored licenses and SPDX (#739) @github-actions
• Bump ruby from 3.3.0 to 3.3.1 (#735) @dependabot
• Bump the github-actions-all group across 1 directory with 7 updates (#738) @dependabot
• Bump ruby from c3c01bc to 8eb6fb9 (#733) @dependabot
• Bump the github-actions-all group with 5 updates (#734) @dependabot
• Bump peter-evans/create-pull-request from 6.0.2 to 6.0.3 in the github-actions-all group (#730) @dependabot
• Bump ruby from bf1afb9 to c3c01bc (#731) @dependabot
• Bump github/codeql-action from 3.24.9 to 3.24.10 in the github-actions-all group (#728) @dependabot
• Bump the github-actions-all group with 1 update (#727) @dependabot
• Bump the github-actions-all group with 3 updates (#725) @dependabot
• Bump the github-actions-all group with 3 updates (#723) @dependabot
• Bump ruby from 317ac91 to bf1afb9 (#724) @dependabot

v9.17.0

New

• Detects BlueOak-1.0.0 and BSD-2-Clause-Patent
• Can detect license on a commit/tag/branch other than the default, for repos on github.com

Changelog

• Bump ruby from 3.2.2 to 3.3.0 by @dependabot in #697
• Bump the github-actions-all group with 1 update by @dependabot in #698
• Update vendored licenses and SPDX by @github-actions in #699
• Bump the github-actions-all group with 1 update by @dependabot in #700
• Bump the github-actions-all group with 2 updates by @dependabot in #702
• Bump ruby from 30ff8d6 to e037df1 by @dependabot in #701
• Update vendored licenses and SPDX by @github-actions in #703
• Bump the github-actions-all group with 4 updates by @dependabot in #704
• Bump ruby from e037df1 to c4ddd95 by @dependabot in #705
• Update vendored licenses and SPDX by @github-actions in #706
• Bump the github-actions-all group with 3 updates by @dependabot in #707
• Update vendored licenses and SPDX by @github-actions in #708
• Bump the github-actions-all group with 4 updates by @dependabot in #710
• Bump ruby from c4ddd95 to 79fd4a2 by @dependabot in #709
• Bump ruby from 79fd4a2 to fb9d97f by @dependabot in #711
• Bump the github-actions-all group with 1 update by @dependabot in #712
• Bump ruby from fb9d97f to 5dbf566 by @dependabot in #714
• Update vendored licenses and SPDX by @github-actions in #713
• Bump the github-actions-all group with 2 updates by @dependabot in #715
• Update dotenv requirement from ~> 2.0 to >= 2, < 4 by @dependabot in #716
• Update vendored licenses and SPDX by @github-actions in #717
• Bump the github-actions-all group with 3 updates by @dependabot in #719
• Bump ruby from 5dbf566 to 94cb8c8 by @dependabot in #718
• Bump the github-actions-all group with 2 updates by @dependabot in #721
• Bump ruby from 94cb8c8 to 317ac91 by @dependabot in #720
• Implement ability to fetch license for ref via github by @jarrydlee in #722

New Contributors

• @jarrydlee made their first contribution in #722

Full Changelog: v9.16.1...v9.17.0

v9.16.1

Small bugfixes and dependency bumps.

What's Changed

• Remove support for Ruby 2.7 (#694) @mlinksva
• Bump ruby from e3f503d to 1e79a38 (#695) @dependabot
• Bump the github-actions-all group with 1 update (#696) @dependabot
• Bump the github-actions-all group with 3 updates (#693) @dependabot
• Bump ruby from db6b1e1 to e3f503d (#691) @dependabot
• Bump the github-actions-all group with 1 update (#692) @dependabot
• Bump the github-actions-all group with 1 update (#690) @dependabot
• Bump ruby from 39d33ab to db6b1e1 (#689) @dependabot
• Bump the github-actions-all group with 1 update (#688) @dependabot
• Bump the github-actions-all group with 2 updates (#685) @dependabot
• License-path command fix (#684) @boimw
• Bump the github-actions-all group with 2 updates (#683) @dependabot
• Try grouping actions updates (#682) @mlinksva
• Bump ruby/setup-ruby from 1.159.0 to 1.160.0 (#681) @dependabot
• Bump actions/dependency-review-action from 3.1.0 to 3.1.2 (#680) @dependabot
• Bump actions/checkout from 3.1.0 to 4.1.1 (#675) @dependabot
• Bump actions/upload-artifact from 3.1.0 to 3.1.3 (#677) @dependabot
• Bump actions/dependency-review-action from 2.5.1 to 3.1.0 (#676) @dependabot
• Bump github/codeql-action from 2.2.4 to 2.22.5 (#674) @dependabot
• Bump ossf/scorecard-action from 2.1.2 to 2.3.1 (#678) @dependabot
• Update vendored licenses and SPDX (#673) @github-actions
• Bump ruby from 4298936 to 39d33ab (#679) @dependabot
• Allow latest Octokit version (#672) @xuanxu
• Add CII Best Practices Badge (#671) @mlinksva
• [StepSecurity] Apply security best practices (#670) @step-security-bot
• Install OpenSSF scorecard (#669) @mlinksva
• Update vendored licenses and SPDX (#668) @github-actions
• Update vendored licenses and SPDX (#665) @github-actions
• Bump actions/checkout from 3 to 4 (#663) @dependabot
• Update vendored licenses and SPDX (#660) @github-actions
• remove support for ruby 2.6 (#662) @mlinksva
• Update vendored licenses and SPDX (#659) @github-actions
• Allow use of Octokit 7 (#657) @mlinksva
• Update vendored licenses and SPDX (#653) @github-actions
• Update vendored licenses and SPDX (#650) @github-actions
• Update vendored licenses and SPDX (#649) @github-actions
• rm unused lets in cran spec (#648) @mlinksva
• Fix a grammar error (#647) @yardenshoham
• Bump peter-evans/create-pull-request from 4 to 5 (#646) @dependabot
• Bump ruby from 3.2.1 to 3.2.2 (#645) @dependabot
• Update vendored licenses and SPDX (#644) @github-actions
• Update vendored licenses and SPDX (#641) @github-actions
• Bump ruby from 3.2.0 to 3.2.1 (#636) @dependabot
• Update vendored licenses and SPDX (#630) @github-actions

9.16.0

What's Changed

• Bump ruby from 3.1.3 to 3.2.0 (#629) @dependabot
• match https://spdx.org/licenses/equivalentwords.txt more precisely (#625) @mlinksva
• normalize double bullets/spans added for formatting (#627) @mlinksva
• normalize word- at end of line becomes word-firstwordonnextline (#624) @mlinksva
• detect bsd-3-clause with "Modified BSD" title (#626) @mlinksva
• add fixtures for various markdown licenses that already pass (#628) @mlinksva
• avoid annoying warning when used with faraday 2 (#623) @mlinksva
• nonzero exit on unexpected failure (#622) @mlinksva
• Reference Matcher: license minor version optional if 0 (#621) @mlinksva
• drop support for ruby 2.5 (#616) @mlinksva
• Update vendored licenses and SPDX (#618) @github-actions
• Detect BSD-2-Clause version with AUTHOR in place of COPYRIGHT HOLDER[S] (#617) @mlinksva
• test/run workflows with ruby 3.2 (#615) @mlinksva
• Update vendored licenses and SPDX (#612) @github-actions
• Bump ruby from 3.1.2 to 3.1.3 (#610) @dependabot

v9.15.3

Adds support for CERN-OHL-P/W/S-2.0 and GFDL-1.3 licenses along with small bugfixes and dependency bumps.

What's Changed

• Chore: vendor, rubocop updates by @mlinksva in #538
• Create Actions Workflow to vendor licenses and spdx by @benbalter in #539
• Update vendored licenses and SPDX by @github-actions in #543
• Update fixtures when vendored licenses updated by @mlinksva in #544
• Enable Exact matcher to detect OFL with a reserved font name by @saltcandy123 in #546
• Remove deprecated --path argument to bundler in README by @mlinksva in #552
• bundle exec ruby scripts in vendor workflow by @mlinksva in #580
• Update vendored licenses and SPDX by @github-actions in #581
• Bump github/codeql-action from 1 to 2 by @dependabot in #584
• Bump peter-evans/create-pull-request from 3 to 4 by @dependabot in #583
• Bump actions/checkout from 2 to 3 by @dependabot in #585
• Bump ruby from 3.0 to 3.1.2 by @dependabot in #582
• Update reverse_markdown requirement from ~> 1.0 to >= 1, < 3 by @dependabot in #587
• Update octokit requirement from ~> 4.20 to >= 4.20, < 6.0 by @dependabot in #586
• Update vendored licenses and SPDX by @github-actions in #588
• Update vendored licenses and SPDX by @github-actions in #590
• Tighten license equality comparison by @stanhu in #589
• Update vendored licenses and SPDX by @github-actions in #592
• Add regex for AGPL to Licensee::Matchers::Package::DistZilla by @dboehmer in #591
• Update vendored licenses and SPDX by @github-actions in #605
• Remove licensee.gemspec contents from dump test to avoid dependency bump automatically causing failure by @mlinksva in #606
• Update octokit requirement from >= 4.20, < 6.0 to >= 4.20, < 7.0 by @dependabot in #597

New Contributors

• @github-actions made their first contribution in #543
• @saltcandy123 made their first contribution in #546
• @dependabot made their first contribution in #584
• @stanhu made their first contribution in #589
• @dboehmer made their first contribution in #591

Full Changelog: v9.15.2...v9.15.3

v9.15.2

What's Changed

• Remove unused let from rspec by @kachick in #486
• Suggestions under rubocop 1.12.0 by @mlinksva in #487
• Vendor updated license description by @mlinksva in #488
• Add support for MulanPSL-2.0 by @mlinksva in #489
• Remove spurious non-captured 'portions ' from copyright regex by @mlinksva in #495
• Avoid RSpec/IdenticalEqualityAssertion by @mlinksva in #499
• Use eq rather than be in tests for floating point numbers by @mlinksva in #504
• Suggestions from newish rubocop and rubocop-spec versions by @mlinksva in #506
• maint: rubocop updates, vendor licenses and license-list-XML by @mlinksva in #505
• Add Dockerfile by @benbalter in #527
• Reset inverse confidence threshold when user override of confidence threshold is set by @jonabc in #533
• docs: update note about multiple matches by @villelahdenvuo in #536

New Contributors

• @kachick made their first contribution in #486
• @villelahdenvuo made their first contribution in #536

Full Changelog: v9.15.1...v9.15.2

v9.15.1

Content helper: Use simple delta for non-licenses (#485) @benbalter

v9.15.0

What's Changed

• Handle two more optional fragments in CC licenses (#481) @mlinksva
• Vendor licenses, license-list-XML (#483) @mlinksva
• Rubocop auto-corrections (#484) @mlinksva
• Simplify quote normalization (#482) @mlinksva
• Vendor SPDX XML license templates, use for more nuanced adjustment of expected license text variation (#477) @mlinksva
• Vendor licenses (#476) @mlinksva
• Punish length differences more, give fill-in fields more leeway (#475) @mlinksva
• add/move disabling cops that require ruby 3 to .rubocop.yml (#473) @mlinksva
• Add ruby 3 to test matrix (#472) @mlinksva
• required_ruby_version = '>= 2.5' (#471) @mlinksva
• Satisfy rubocop 1.4.1 (#469) @mlinksva
• Satisfy rubocop 1.31 (#468) @mlinksva
• Update release script (#465) @benbalter
• Bump to rubocop ~> 1.0 (#467) @mlinksva

v9.14.1

• Allow copyright line to start with _-* for md bullets and emphasis (#436) @mlinksva
• Adjust length delta for similarity calc to account for fill-in fields (#437) @mlinksva
• Ignore dotfiles with 'license' and dashes (#443) @mlinksva
• Vendor and update tests for choosealicense.com#779: Convert license using array to map (#463) @mlinksva
• markdown normalization fixes (#459) @mlinksva
• Tweaks to satisfy RuboCop Performance 1.8.0 (#458) @mlinksva
• universal newline encoding for project files, test for crlf file (#455) @mlinksva
• rm dotfile for coveralls service no longer used (#452) @mlinksva
• rm rubocop from codeclimate config (#453) @mlinksva
• followup travis->actions (#442) @mlinksva
• Updates for rubocop 0.89.1 (#450) @mlinksva
• Strip byte order mark (#444) @mlinksva
• Enable new cops, follow their recommendations (#448) @mlinksva
• gemspec: Allow use of Rugged v1.0 (#447) @pks-t
• NONE if package.json includes "license:" "UNLICENSED" (#446) @mlinksva
• Use GitHub Actions for CI (#440) @benbalter
• Update vendored licenses