Skip to content

MAINT update NOTICE - #4065

Open
Roman Lutz (romanlutz) wants to merge 13 commits into
microsoft:mainfrom
romanlutz:romanlutz-maint-update-notice
Open

Roman Lutz (romanlutz) wants to merge 13 commits into
microsoft:mainfrom
romanlutz:romanlutz-maint-update-notice

Conversation

@romanlutz

@romanlutz Roman Lutz (romanlutz) commented Nov 8, 2026 •

Copy link
Copy Markdown
Contributor

Description

Updates NOTICE.txt from the latest Azure DevOps Component Governance baseline while restoring complete attribution for exact-version dependencies omitted by the generated artifact.

  • Refreshes the generated baseline from Component Governance pipeline 133 against the latest main dependency inventory.
  • Restores all 192 omitted exact-version components from authoritative package and source evidence, reusing prior entries only where exact license-file hashes match.
  • Contributes the corresponding license curations upstream in Curate licenses for 192 PyRIT dependencies clearlydefined/curated-data#32705.
  • Normalizes the resulting file to LF line endings.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot AI balanced review requested due to automatic review settings November 8, 2026 19:12

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request. Copilot's per-file or total diff limits were exceeded. Try reducing the changed content or splitting the changes into smaller pull requests, then request a review from Copilot again.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
@romanlutz
Roman Lutz (romanlutz) marked this pull request as ready for review November 9, 2026 07:05
Comment thread NOTICE.txt Resolved
@romanlutz
Roman Lutz (romanlutz) marked this pull request as draft November 9, 2026 21:49
@romanlutz
Roman Lutz (romanlutz) marked this pull request as ready for review November 10, 2026 00:08
@romanlutz

Copy link
Copy Markdown
Contributor Author

The generated NOTICE is necessarily a single large file, so splitting the diff would make the attribution update incomplete rather than improve reviewability. The dependency-completeness concern raised separately has been addressed by restoring all 192 omitted exact-version entries from verified evidence.

🤖 AI-authored reply via Agency Finish PR.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants