• 1.6.0 9e702a01d2

    1.6.0 Stable

    marvin8 released this 2026-06-07 06:25:42 +00:00 | 67 commits to main since this release

    Signed by marvin8
    SSH key fingerprint: SHA256:cyGOzvyFNw+A8J/LVjRif8v3KZLo8seQDVZbk/IhNhI

    [1.6.0] - 2026-06-07

    Bug Fixes

    • 🐛 parse SPDX OR/AND/WITH expressions in license compatibility check
    • 🐛 fix installing zaojun from local dir, instead of from pypi.org
    • 🐛 infer allowed dep set from compound project SPDX expressions

    Documentation

    • 📝 add license-checking docs page and update existing docs
    • 📝 rewrite release notes with thematic narrative for license checking
    • 📝 removed version number from first status
    • 📝 document compound SPDX expressions for project and dep licenses
    • 📝 link to SPDX license list in license-checking docs

    Features

    • add licenses module with SPDX extraction and tier inference
    • add license config keys to config.py
    • extract license from PyPI response and propagate to DependencyResult
    • wire license compliance checking into dependency processing and CLI
    • print detected project license and allowed set when using defaults

    Testing

    • add failing tests for license extraction and tier inference
    • add failing tests for new license config keys
    • add failing tests for license field in PyPI fetch and cache
    • add failing tests for license violation detection and output
    Downloads