From 915e79fc0d3dfca87bdfcb19485db8a84d8c9e6b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Adam=20Wa=C5=82ach?= Date: Thu, 20 Aug 2026 13:40:36 +0200 Subject: [PATCH 1/2] fix: allow the parenthesized (Apache-2.0 AND MIT) SPDX expression posthog-js declares its license as "(Apache-2.0 AND MIT)". The allow-list only contained the unparenthesized form, so the exact-string match rejected it even though both licenses are individually allowed. --- licenses/license-engine.sh | 1 + 1 file changed, 1 insertion(+) diff --git a/licenses/license-engine.sh b/licenses/license-engine.sh index e0a746b..06e644f 100755 --- a/licenses/license-engine.sh +++ b/licenses/license-engine.sh @@ -13,6 +13,7 @@ ALLOWED_LICENSES=( 'Apache-2.0' '(Apache-2.0 OR MPL-1.1)' 'Apache-2.0 AND MIT' + '(Apache-2.0 AND MIT)' 'Apache License, Version 2.0' 'Apache*' 'Artistic-2.0' From 503b941c8036ade6ef6641561abc731aecc24f76 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Adam=20Wa=C5=82ach?= Date: Thu, 20 Aug 2026 13:40:47 +0200 Subject: [PATCH 2/2] chore: pin license assets to the revision allowing (Apache-2.0 AND MIT) --- licenses/install | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/licenses/install b/licenses/install index 8acafc0..532db48 100755 --- a/licenses/install +++ b/licenses/install @@ -1,7 +1,7 @@ #!/bin/sh set -e -ORY_CI_REF=${ORY_CI_REF:-747531b2acc027b7308a27722efb2dc6d43377db} +ORY_CI_REF=${ORY_CI_REF:-915e79fc0d3dfca87bdfcb19485db8a84d8c9e6b} install_asset() { source_path=$1