Skip to content

Conversation

@salmanmkc
Copy link
Contributor

@salmanmkc salmanmkc commented Dec 11, 2025

Most important changes:

GitHub Actions dependencies:

  • Added license files for multiple versions of @actions/core, @actions/exec, @actions/glob, @actions/http-client, and @actions/io, documenting their MIT license and relevant metadata. [1] [2] [3] [4] [5] [6] [7] [8] [9]

Azure SDK dependencies:

  • Added license files for multiple versions of @azure/abort-controller and @azure/core-tracing, as well as for @azure/core-rest-pipeline, all under the MIT license. [1] [2] [3] [4] [5]

Other Azure-related dependency:

  • Added a license file for @typespec/ts-http-runtime, including its MIT license information.

Copilot AI review requested due to automatic review settings December 11, 2025 22:30
@salmanmkc salmanmkc requested a review from a team as a code owner December 11, 2025 22:30
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR adds license metadata files for npm dependencies to pass licensed status checks. The files document license information for 21 npm packages used in the project, including various versions of GitHub Actions packages, Azure SDK packages, and common utility libraries.

Key Changes

  • Added .dep.yml license metadata files for 21 npm dependencies
  • Includes multiple versions of packages like @actions/core, @actions/exec, @actions/io, @azure/abort-controller, and @azure/core-tracing
  • All packages use MIT license except tslib which uses 0BSD license

Reviewed changes

Copilot reviewed 20 out of 20 changed files in this pull request and generated 1 comment.

Show a summary per file
File Description
.licenses/npm/@actions/core-1.11.1.dep.yml License metadata for @actions/core v1.11.1 (MIT)
.licenses/npm/@actions/core-2.0.1.dep.yml License metadata for @actions/core v2.0.1 (MIT)
.licenses/npm/@actions/exec-1.1.1.dep.yml License metadata for @actions/exec v1.1.1 (MIT)
.licenses/npm/@actions/exec-2.0.0.dep.yml License metadata for @actions/exec v2.0.0 (MIT)
.licenses/npm/@actions/glob.dep.yml License metadata for @actions/glob v0.5.0 (MIT)
.licenses/npm/@actions/io-1.1.3.dep.yml License metadata for @actions/io v1.1.3 (MIT)
.licenses/npm/@actions/io-2.0.0.dep.yml License metadata for @actions/io v2.0.0 (MIT)
.licenses/npm/@azure/abort-controller-1.1.0.dep.yml License metadata for @azure/abort-controller v1.1.0 (MIT)
.licenses/npm/@azure/abort-controller-2.1.2.dep.yml License metadata for @azure/abort-controller v2.1.2 (MIT)
.licenses/npm/@azure/core-rest-pipeline.dep.yml License metadata for @azure/core-rest-pipeline v1.22.2 (MIT)
.licenses/npm/@azure/core-tracing-1.0.0-preview.13.dep.yml License metadata for @azure/core-tracing v1.0.0-preview.13 (MIT)
.licenses/npm/@azure/core-tracing-1.3.1.dep.yml License metadata for @azure/core-tracing v1.3.1 (MIT)
.licenses/npm/@typespec/ts-http-runtime.dep.yml License metadata for @typespec/ts-http-runtime v0.3.2 (MIT)
.licenses/npm/agent-base.dep.yml License metadata for agent-base v7.1.4 (MIT)
.licenses/npm/debug.dep.yml License metadata for debug v4.3.4 (MIT)
.licenses/npm/form-data.dep.yml License metadata for form-data v4.0.4 (MIT)
.licenses/npm/http-proxy-agent.dep.yml License metadata for http-proxy-agent v7.0.2 (MIT)
.licenses/npm/https-proxy-agent.dep.yml License metadata for https-proxy-agent v7.0.6 (MIT)
.licenses/npm/ms.dep.yml License metadata for ms v2.1.2 (MIT)
.licenses/npm/tslib.dep.yml License metadata for tslib v2.6.2 (0BSD)

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

text: |-
(The MIT License)
Copyright (c) 2014-2017 TJ Holowaychuk <tj@vision-media.ca>
Copy link

Copilot AI Dec 11, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The license text contains HTML entities that should be plain text. The email addresses in lines 35 and 36 use "<" and ">" instead of "<" and ">". This appears to be a copy-paste error from an HTML-rendered version of the license.

Suggested change
Copyright (c) 2014-2017 TJ Holowaychuk &lt;tj@vision-media.ca&gt;
Copyright (c) 2014-2017 TJ Holowaychuk <tj@vision-media.ca>

Copilot uses AI. Check for mistakes.
@salmanmkc salmanmkc changed the title fix: add license metadata for npm dependencies Upgrade to latest actions packages Dec 11, 2025
- Bump version from 5.0.0 to 5.0.1
- Upgrade @actions/cache from ^4.0.3 to ^5.0.0
- Upgrade @actions/core from ^1.10.0 to ^2.0.0
- Upgrade @actions/exec from ^1.1.1 to ^2.0.0
- Upgrade @actions/http-client from ^2.2.3 to ^3.0.0

Add license files for @actions/http-client versions 2.2.3 and 3.0.0
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant