build(deps): bump app.cash.licensee from 1.7.0 to 1.11.0

[dependabot]

Bumps app.cash.licensee from 1.7.0 to 1.11.0.

Release notes

Sourced from app.cash.licensee's releases.

1.11.0

New

• LicenseeTask exposes jsonOutput and validationOutput properties which are providers of the generated file that you can use to copy elsewhere or bundle into binaries.

Changed

• Invalid SPDX identifiers passed to allow will now throw an exception.
• Update SPDX database to version 3.23 (2024-02-08).

1.10.0

New

• Gradle platform dependencies (also sometimes called BOMs) are now ignored since they only contribute version constraints and no code.

1.9.1

Fixed

• Avoid task name showing up in logs when logging is disabled but unused licenses are present.

1.9.0

Added

• Add configuration option for behavior on unused license. By default we log, but you can now choose to ignore.

  licensee {
    unusedAction(IGNORE)
  }

• New fallback URL for ISC.

Changed

• Update SPDX database to version 3.22 (2023-10-05).

1.8.0

Changed

• Fallback URLs now map to multiple license SPDX IDs where appropriate. For example, https://opensource.org/license/gpl-2-0 matches both GPL-2.0 and GPL-2.0-or-later.

• Remove the use of afterEvalute internally. This causes some task names to slightly change and the output folders to slightly change when used with the Android Gradle plugin.

• Update SPDX database to version 3.21 (2023-06-18).

• Minimum Gradle version is now 8.0

Changelog

Sourced from app.cash.licensee's changelog.

[1.11.0] - 2024-03-29

New

• LicenseeTask exposes jsonOutput and validationOutput properties which are providers of the generated file that you can use to copy elsewhere or bundle into binaries.

Changed

• Invalid SPDX identifiers passed to allow will now throw an exception.
• Update SPDX database to version 3.23 (2024-02-08).

[1.10.0] - 2024-03-28

New

• Gradle platform dependencies (also sometimes called BOMs) are now ignored since they only contribute version constraints and no code.

[1.9.1] - 2024-02-09

Fixed

• Avoid task name showing up in logs when logging is disabled but unused licenses are present.

[1.9.0] - 2024-01-29

Added

• Add configuration option for behavior on unused license. By default we log, but you can now choose to ignore.

  licensee {
    unusedAction(IGNORE)
  }

• New fallback URL for ISC.

Changed

• Update SPDX database to version 3.22 (2023-10-05).

[1.8.0] - 2023-09-26

Changed

• Fallback URLs now map to multiple license SPDX IDs where appropriate.

... (truncated)

Commits

• edcfed5 Prepare version 1.11.0
• a07c418 Update licenses (#315)
• 72453d8 Fail if invalid spdx is passed to allow (#314)
• cb662e3 Add shortcuts for the file outputs of the task (#312)
• 975f4bf Prepare next development version
• 94543d7 Prepare version 1.10.0
• 07aa054 Exclude platform files (#311)
• e355a3e Update dependency gradle to v8.7 (#294)
• 92fb252 Update dependency com.android.tools.build:gradle-api to v8.3.1 (#309)
• d846ca2 Update plugin publish to v0.28.0 (#308)
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.