feat(build): RAT license-header enforcement as a buildSrc convention plugin (stacked on #138) - #150

Merged

epugh merged 29 commits into

apache:mainfrom

adityamparikh:add-rat-validation-buildsrc

Jun 15, 2026

Commits on Jun 5, 2026

docs: add Apache LICENSE and NOTICE files

claude
authored and
adityamparikh
committed
d856105
docs(spec): add SBOM generation design
adityamparikh
committed
c476d41
docs(plan): add SBOM generation implementation plan
adityamparikh
committed
ac0ca0a
chore(deps): add CycloneDX Gradle plugin 1.10.0 to version catalog
adityamparikh
committed
8e4c3c2
feat(build): generate and embed CycloneDX SBOM
adityamparikh
committed
1cf5f0f
feat(actuator): enable /actuator/sbom endpoint explicitly
adityamparikh
committed
6a0d39e
docs(spec): drop integration-test scope, document plugin-version decisions
adityamparikh
committed
0c0a165
docs(spec): drop stale 1.10.0 version reference
adityamparikh
committed
52347bc
docs(spec): inline the plugin-version constraints explanation
adityamparikh
committed
2cedf64
ci: upload CycloneDX SBOM as workflow artifact
adityamparikh
committed
74992d6
ci(release): strict SBOM generation + upload + release attachment
adityamparikh
committed
c3b4aa8
docs(readme): document SBOM location, retrieval, and scanning
adityamparikh
committed
9d3d70b
refactor(build): drop unnecessary cyclonedxBom configuration
adityamparikh
committed
e179ac3
docs(agents): note SBOM generation in commands + architecture
adityamparikh
committed
452799d
style: apply spotless
adityamparikh
committed
21df7ac

Commits on Jun 11, 2026

feat(build): derive binary-release LICENSE/NOTICE from the SBOM

adityamparikh
and
claude
committed
8e6f187
refactor(build): extract LICENSE/NOTICE generation to a buildSrc plugin

adityamparikh
and
claude
committed
685ff4c
test(build): unit-test the LICENSE/NOTICE buildSrc tasks

adityamparikh
and
claude
committed
82bacc2
docs(build): explain the LICENSE/NOTICE tasks in comments and AGENTS.md

adityamparikh
and
claude
committed
da3c5d8
refactor(build): drop license-policy.json; disclose SBOM licenses verbatim

adityamparikh
and
claude
committed
748a70b
docs(build): point the LICENSE appendix to the bundled SBOM

adityamparikh
and
claude
committed
3ceb2a7
docs: document where/when the binary LICENSE & NOTICE are available

adityamparikh
and
claude
committed
d2711c9
docs(build): explain the buildSrc LICENSE/NOTICE plugin for non-Gradle readers

adityamparikh
and
claude
committed
033c03e
docs(build): comment the convention plugin body for non-Gradle readers

adityamparikh
and
claude
committed
230b706

Commits on Jun 13, 2026

Merge remote-tracking branch 'upstream/main' into pr/138
epugh
committed
fd7eedf
Dont double load the root files
epugh
committed
1721a0f
feat(build): enforce Apache license headers via RAT convention plugin

adityamparikh
and
claude
committed
9ec8521

Commits on Jun 15, 2026

Merge remote-tracking branch 'upstream/main' into pr/150
epugh
committed
23f3866
Merge branch 'main' into add-rat-validation-buildsrc
epugh
authored
c626eeb