fix: protobuf Metadata.licenses repeated (#401)

fixes #264

schema/bom-1.6.proto

@@ -465,7 +465,7 @@ message Metadata {
   // The organization that supplied the component that the BOM describes. The supplier may often be the manufacture, but may also be a distributor or repackager.
   optional OrganizationalEntity supplier = 6;
   // The license information for the BOM document. This may be different from the license(s) of the component(s) that the BOM describes.
-  optional LicenseChoice licenses = 7;
+  repeated LicenseChoice licenses = 7;
   // Specifies optional, custom, properties
   repeated Property properties = 8;
   // Lifecycles communicate the stage(s) in which data in the BOM was captured. Different types of data may be available at various phases of a lifecycle, such as the Software Development Lifecycle (SDLC), IT Asset Management (ITAM), and Software Asset Management (SAM). Thus, a BOM may include data specific to or only obtainable in a given lifecycle.

tools/src/test/resources/1.6/valid-metadata-license-1.6.json

@@ -9,6 +9,14 @@
         "license": {
           "id": "Apache-2.0"
         }
+      },
+      {
+        "license": {
+          "name": "My License",
+          "text": {
+            "content": "My License Text"
+          }
+        }
       }
     ]
   },

tools/src/test/resources/1.6/valid-metadata-license-1.6.textproto

@@ -10,4 +10,12 @@ metadata {
       id: "Apache-2.0"
     }
   }
+  licenses {
+    license {
+      name: "My License"
+      text {
+        value: "My License Text"
+      }
+    }
+  }
 }

tools/src/test/resources/1.6/valid-metadata-license-1.6.xml

@@ -1,11 +1,17 @@
 <?xml version="1.0"?>
-<bom serialNumber="urn:uuid:3e671687-395b-41f5-a30f-a58921a69b79" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
+<bom xmlns="http://cyclonedx.org/schema/bom/1.6"
+     serialNumber="urn:uuid:3e671687-395b-41f5-a30f-a58921a69b79" version="1"
+>
     <metadata>
         <licenses>
             <license>
                 <id>Apache-2.0</id>
             </license>
+            <license>
+                <name>My License</name>
+                <text>My License Text</text>
+            </license>
         </licenses>
     </metadata>
-    <components />
+    <components/>
 </bom>