Merge pull request #459 from wphillipmoore/feature/458-pip-licenses-from-file

fix(ci): read pip-licenses --allow-only from .pip-licenses-allowlist file

Author: wphillipmoore

.github/workflows/ci.yml

@@ -127,18 +127,7 @@ jobs:
       - name: Run pip-licenses (license compliance)
         run: >-
           uv run pip-licenses
-          --allow-only="Apache-2.0;
-          Apache-2.0 OR BSD-2-Clause;
-          Apache Software License;
-          BSD License;
-          BSD-2-Clause;
-          BSD-3-Clause;
-          GPL-3.0-or-later;
-          MIT;
-          MIT License;
-          Mozilla Public License 2.0 (MPL 2.0);
-          PSF-2.0;
-          Python Software Foundation License"
+          --allow-only="$(grep -v '^#' .pip-licenses-allowlist | grep -v '^$' | paste -sd ';' -)"
 
   # ---------------------------------------------------------------------------
   # Integration tests

requirements-dev.txt

@@ -1,6 +1,5 @@
 # This file was autogenerated by uv via the following command:
-#    uv export --no-hashes --group dev -o requirements-dev.txt
--e .
+#    uv export --no-hashes --only-group dev -o requirements-dev.txt
 boolean-py==5.0
     # via license-expression
 cachecontrol==0.14.4
@@ -45,7 +44,7 @@ packaging==26.0
     #   pytest
 pathspec==1.0.4
     # via mypy
-pip==26.0.1
+pip==26.1
     # via pip-api
 pip-api==0.0.34
     # via pip-audit
@@ -76,7 +75,6 @@ requests==2.33.1
     # via
     #   cachecontrol
     #   pip-audit
-    #   pymqrest
 rich==14.3.3
     # via pip-audit
 ruff==0.15.4

requirements.txt

@@ -1,100 +1,13 @@
 # This file was autogenerated by uv via the following command:
-#    uv export --no-hashes -o requirements.txt
+#    uv export --no-hashes --no-dev -o requirements.txt
 -e .
-boolean-py==5.0
-    # via license-expression
-cachecontrol==0.14.4
-    # via pip-audit
 certifi==2026.2.25
     # via requests
 charset-normalizer==3.4.4
     # via requests
-colorama==0.4.6 ; sys_platform == 'win32'
-    # via pytest
-coverage==7.13.4
-    # via pytest-cov
-cyclonedx-python-lib==11.6.0
-    # via pip-audit
-defusedxml==0.7.1
-    # via py-serializable
-filelock==3.25.0
-    # via cachecontrol
 idna==3.11
     # via requests
-iniconfig==2.3.0
-    # via pytest
-librt==0.8.1 ; platform_python_implementation != 'PyPy'
-    # via mypy
-license-expression==30.4.4
-    # via cyclonedx-python-lib
-markdown-it-py==4.0.0
-    # via rich
-mdurl==0.1.2
-    # via markdown-it-py
-msgpack==1.1.2
-    # via cachecontrol
-mypy==1.19.1
-mypy-extensions==1.1.0
-    # via mypy
-packageurl-python==0.17.6
-    # via cyclonedx-python-lib
-packaging==26.0
-    # via
-    #   pip-audit
-    #   pip-requirements-parser
-    #   pytest
-pathspec==1.0.4
-    # via mypy
-pip==26.0.1
-    # via pip-api
-pip-api==0.0.34
-    # via pip-audit
-pip-audit==2.10.0
-pip-licenses==5.5.1
-pip-requirements-parser==32.0.1
-    # via pip-audit
-platformdirs==4.9.2
-    # via pip-audit
-pluggy==1.6.0
-    # via
-    #   pytest
-    #   pytest-cov
-prettytable==3.17.0
-    # via pip-licenses
-py-serializable==2.1.0
-    # via cyclonedx-python-lib
-pygments==2.20.0
-    # via
-    #   pytest
-    #   rich
-pyparsing==3.3.2
-    # via pip-requirements-parser
-pytest==9.0.3
-    # via pytest-cov
-pytest-cov==7.0.0
 requests==2.33.1
-    # via
-    #   cachecontrol
-    #   pip-audit
-    #   pymqrest
-rich==14.3.3
-    # via pip-audit
-ruff==0.15.4
-sortedcontainers==2.4.0
-    # via cyclonedx-python-lib
-tomli==2.4.0
-    # via pip-audit
-tomli-w==1.2.0
-    # via pip-audit
-ty==0.0.19
-types-requests==2.32.4.20260107
-typing-extensions==4.15.0
-    # via
-    #   cyclonedx-python-lib
-    #   mypy
+    # via pymqrest
 urllib3==2.6.3
-    # via
-    #   requests
-    #   types-requests
-wcwidth==0.6.0
-    # via prettytable
+    # via requests