Skip to content

OPENNLP-1835: Tolerate unsupported XML parser security options (#1067) #324

OPENNLP-1835: Tolerate unsupported XML parser security options (#1067)

OPENNLP-1835: Tolerate unsupported XML parser security options (#1067) #324

Workflow file for this run

# Licensed to the Apache Software Foundation (ASF) under one or more
# contributor license agreements. See the NOTICE file distributed with
# this work for additional information regarding copyright ownership.
# The ASF licenses this file to You under the Apache License, Version 2.0
# (the "License"); you may not use this file except in compliance with
# the License. You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
name: CI Main - Regenerate NOTICE
on:
push:
branches:
- main
workflow_dispatch:
jobs:
build:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
- name: Set up JDK 21
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
with:
java-version: '21'
distribution: 'temurin'
- name: Cache Maven packages
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
with:
path: ~/.m2
key: ${{ runner.os }}-master-m2-${{ hashFiles('**/pom.xml') }}
restore-keys: ${{ runner.os }}-master-m2
- name: Generate Dependency Licenses
run: |
mvn license:aggregate-add-third-party@generate-and-check-licenses \
-Dlicense.skipAggregateAddThirdParty=false \
-B \
-Dlicense.thirdPartyFilename=DEPENDENCY-LICENSES \
-Dlicense.outputDirectory=target
- name: Create NOTICE File
run: |
cat src/license/NOTICE.template target/DEPENDENCY-LICENSES > NOTICE
cp NOTICE opennlp-distr/src/main/readme/NOTICE
- name: Create Pull Request after License Regeneration
uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
with:
base: main
token: ${{ secrets.GITHUB_TOKEN }}
commit-message: "Minor: Regenerated NOTICE File for ${{ github.sha }}"
committer: GitHub <noreply@github.com>
author: ${{ github.actor }} <${{ github.actor }}@users.noreply.github.com>
signoff: true
branch: regenerate_notice_file_after_dep_upgrade
delete-branch: true
title: "Regenerated NOTICE file after dependency changes"
body: |
Found some uncommited changes (from NOTICE regeneration) after running build on OpenNLP
labels: |
dependency