Update SPDX vendor file to 3.27.0

What does this MR do and why?

This MR updates the SPDX (Software Package Data Exchange) vendor file from version 3.26.0 to 3.27.0. The SPDX license list is a standardized list of commonly found licenses and exceptions used in free and open source software.

Changes:

  • Updates vendor/spdx.json with the latest SPDX license list (version 3.27.0)
  • Includes new licenses, updated license metadata, and any changes to existing license definitions from the upstream SPDX project
  • Ensures GitLab's license detection and compliance features use the most current license information

Why this update is needed:

  • Keeps GitLab's license detection capabilities up-to-date with the latest industry standards
  • Ensures accurate license identification for dependency scanning and compliance features
  • Maintains compatibility with the latest SPDX specification

References

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Alan (Maciej) Paruszewski

Merge request reports

Loading
Loading