From 76df04498fc21286e6ff0d11d7ad27b17c0257ca Mon Sep 17 00:00:00 2001 From: Eduardo Robles Elvira Date: Wed, 21 Feb 2024 08:25:06 +0100 Subject: [PATCH] Security dependencies update Parent issue: sequentech/meta#567 Fixing ORT --- .ort.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.ort.yml b/.ort.yml index e6f0ada..07f3c52 100644 --- a/.ort.yml +++ b/.ort.yml @@ -5,7 +5,7 @@ --- resolutions: rule_violations: - - message: "The package PIP::frestq-requirements:.* has the declared ScanCode copyleft catalogized license AGPL-3.0-only." + - message: "The package PIP::frestq-with-requirements-requirements.txt:.* has the declared ScanCode copyleft catalogized license AGPL-3.0-only." reason: "LICENSE_ACQUIRED_EXCEPTION" comment: "The project is open source so it's normal that it's set as such." @@ -21,7 +21,7 @@ resolutions: reason: "DYNAMIC_LINKAGE_EXCEPTION" comment: "This is actually a GPL-2.0 with a linking exception, allowing not to have to relicense any linking code, such as our case." - - message: "The project PIP::frestq-requirements:.* has the dependency PyPI::uwsgi:.* licensed under the ScanCode copyleft categorized license GPL-2.0-only." + - message: "The project PIP::frestq-with-requirements-requirements.txt:.* has the dependency PyPI::uwsgi:.* licensed under the ScanCode copyleft categorized license GPL-2.0-only." reason: "DYNAMIC_LINKAGE_EXCEPTION" comment: "This happens with uwsgi which is actually a GPL-2.0 with a linking exception, allowing not to have to relicense any linking code, such as our case."