From ece09bced31082c6bbb19e68a02b1858d9ac5d8a Mon Sep 17 00:00:00 2001
From: "renovate-update-app[bot]"
 <291053684+renovate-update-app[bot]@users.noreply.github.com>
Date: Thu, 15 Oct 2026 14:59:20 +0000
Subject: [PATCH 1/2] Update module github.com/google/go-licenses to v2

---
 .github/workflows/ci.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 51b9c5a..aa7e6cf 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -60,7 +60,7 @@ jobs:
       contents: read
     env:
       # renovate: datasource=go depName=github.com/google/go-licenses
-      GO_LICENSES_VERSION: v1.6.0
+      GO_LICENSES_VERSION: v2.0.1
       REPORT_FILE: gl-license-scanning-report.json
 
     steps:

From b9256bca3b4db2eb4a18bf21728b72c6e6d394d0 Mon Sep 17 00:00:00 2001
From: Remco Beckers <remco.beckers@suse.com>
Date: Fri, 16 Oct 2026 17:07:32 +0200
Subject: [PATCH 2/2] Fix go-licenses v2 scanning

Verify MIT-0 text because the upstream classifier does not recognize it.
---
 .github/workflows/ci.yml         | 17 +++++++++++++----
 renovate.json                    |  2 +-
 scripts/renovate-config-test.cjs |  2 +-
 3 files changed, 15 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d318226..5bfd6d4 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -59,7 +59,7 @@ jobs:
     permissions:
       contents: read
     env:
-      # renovate: datasource=go depName=github.com/google/go-licenses
+      # renovate: datasource=go depName=github.com/google/go-licenses/v2
       GO_LICENSES_VERSION: v2.0.1
       REPORT_FILE: gl-license-scanning-report.json
 
@@ -71,13 +71,22 @@ jobs:
         with:
           go-version-file: go.mod
           cache: false
+      - name: Verify MIT-0 license unsupported by go-licenses
+        run: |
+          go mod download github.com/segmentio/asm
+          printf '%s  %s\n' \
+            cca993712df289a5958bdef69031a5dac0f951ac15afeb313f9eeea55ed59443 \
+            "$(go list -m -f '{{.Dir}}/LICENSE' github.com/segmentio/asm)" |
+            sha256sum --check
       - name: License scanning
         run: |
-          scripts/install-go-tool.sh "github.com/google/go-licenses@${GO_LICENSES_VERSION}"
-          go-licenses check . --disallowed_types=forbidden,restricted
+          scripts/install-go-tool.sh "github.com/google/go-licenses/v2@${GO_LICENSES_VERSION}"
+          go-licenses check . --disallowed_types=forbidden,restricted --ignore=github.com/segmentio/asm/
       - name: Generate license report
         run: |
-          go-licenses report . > licenses.csv
+          go-licenses report . --ignore=github.com/segmentio/asm/ > licenses.csv
+          printf 'github.com/segmentio/asm,https://github.com/segmentio/asm/blob/%s/LICENSE,MIT-0\n' \
+            "$(go list -m -f '{{.Version}}' github.com/segmentio/asm)" >> licenses.csv
       - name: Save license scan report
         uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
diff --git a/renovate.json b/renovate.json
index e59eb9f..b09043b 100644
--- a/renovate.json
+++ b/renovate.json
@@ -174,7 +174,7 @@
       "matchPackageNames": [
         "golangci/golangci-lint",
         "goreleaser/goreleaser",
-        "github.com/google/go-licenses",
+        "github.com/google/go-licenses/v2",
         "golang.org/x/vuln"
       ],
       "matchUpdateTypes": ["patch", "minor", "digest", "pin", "pinDigest"],
diff --git a/scripts/renovate-config-test.cjs b/scripts/renovate-config-test.cjs
index 7559bab..e846591 100644
--- a/scripts/renovate-config-test.cjs
+++ b/scripts/renovate-config-test.cjs
@@ -374,7 +374,7 @@ async function main() {
   ];
   for (const name of [
     'golangci/golangci-lint', 'goreleaser/goreleaser',
-    'github.com/google/go-licenses', 'golang.org/x/vuln',
+    'github.com/google/go-licenses/v2', 'golang.org/x/vuln',
   ]) {
     const dep = extracted.find(dep => (dep.packageName ?? dep.depName) === name);
     assert(dep, `Missing CI tool extraction: ${name}`);