Skip to content

👷 ci(deps): allow cairosvg's LGPL in dependency-review, scoped to the package - #458

Merged
konih merged 1 commit into
mainfrom
ci/cairosvg-licence-exception
Oct 10, 2026
Merged

konih merged 1 commit into
mainfrom
ci/cairosvg-licence-exception

Conversation

@konih

@konih konih commented Oct 10, 2026

Copy link
Copy Markdown
Collaborator

cairosvg is a docs-site build tool (mkdocs-material[imaging]) and never
reaches the kollect binary or image. Dependabot's 2.9.0 -> 2.9.1 bump
(#457) tripped the licence allow-list because the action only judges
changed dependencies; 2.9.0 was already on main under the same licence.

… package

cairosvg is a docs-site build tool (mkdocs-material[imaging]) and never
reaches the kollect binary or image. Dependabot's 2.9.0 -> 2.9.1 bump
(#457) tripped the licence allow-list because the action only judges
changed dependencies; 2.9.0 was already on main under the same licence.
@codecov

codecov Bot commented Oct 10, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@sonarqubecloud

Copy link
Copy Markdown

@konih
konih merged commit 4362b95 into main Oct 10, 2026
39 checks passed
@konih
konih deleted the ci/cairosvg-licence-exception branch October 10, 2026 14:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant