workflows: bump license_finder to v7.0.1 (#43787)

* workflows: bump license_finder to v7.0.1

* add codeowners

* install yarn and add comment about yarn

* add license plugin

* plugin-licenses yarn plugin

* fix spec for plugin licenses

Co-authored-by: William Bezuidenhout <william.bezuidenhout@sourcegraph.com>

.github/workflows/licenses-check.yml

@@ -18,7 +18,7 @@ jobs:
       with: { node-version: '${{ steps.nvmrc.outputs.NODE_VERSION }}' }
 
     - name: Install license_finder
-      run: gem install license_finder:6.9.0 # sync with licenses-update.yml
+      run: gem install license_finder:7.0.1 # sync with licenses-update.yml
 
     - name: Check dependencies
       run: LICENSE_CHECK=true ./dev/licenses.sh

.github/workflows/licenses-update.yml

@@ -11,17 +11,15 @@ jobs:
     - uses: actions/checkout@v2
     - uses: actions/setup-ruby@v1
       with: { ruby-version: '2.6' }
-    - uses: actions/setup-go@v2
-      with: { go-version: '1.18' }
+    - name: Install asdf plugins
+      uses: asdf-vm/actions/install@v1
 
-    # set up correct version of node
-    - id: nvmrc
-      run: echo ::set-output name=NODE_VERSION::$(cat .nvmrc)
-    - uses: actions/setup-node@v2
-      with: { node-version: '${{ steps.nvmrc.outputs.NODE_VERSION }}' }
+    # we use classic yarn to install the new version of yarn
+    - name: ensure the correct version of yarn
+      run: yarn
 
     - name: Install license_finder
-      run: gem install license_finder:6.9.0 # sync with licenses-check.yml
+      run: gem install license_finder:7.0.1 # sync with licenses-check.yml
 
     - name: Generate report
       run: ./dev/licenses.sh

.tool-versions

@@ -1,6 +1,8 @@
 golang 1.19.3
 nodejs 16.7.0
-# We're using yarn classic to install yarn 3.x as defined in package.json
+# We install classic yarn with asdf, and then use yarn itself to upgrade to 3.2.3
+# This is done because there is a problem fetching yarn via asdf, instead the version is
+# specified in .yarnrc via the yarnPath.
 yarn 1.22.19
 fd 7.4.0
 shfmt 3.5.0

.yarnrc.yml

@@ -1,29 +1,25 @@
+logFilters:
+  - code: YN0002
+    level: discard
+  - code: YN0060
+    level: discard
+  - code: YN0013
+    level: discard
+  - code: YN0007
+    level: discard
+  - code: YN0061
+    level: discard
+
 nodeLinker: node-modules
 
-npmRegistryServer: 'https://registry.npmjs.org/'
+npmRegistryServer: "https://registry.npmjs.org/"
 
 plugins:
   - path: .yarn/plugins/@yarnpkg/plugin-interactive-tools.cjs
-    spec: '@yarnpkg/plugin-interactive-tools'
+    spec: "@yarnpkg/plugin-interactive-tools"
   - path: .yarn/plugins/@yarnpkg/plugin-workspace-tools.cjs
-    spec: '@yarnpkg/plugin-workspace-tools'
+    spec: "@yarnpkg/plugin-workspace-tools"
+  - path: .yarn/plugins/@yarnpkg/plugin-licenses.cjs
+    spec: ".yarn/plugins/@yarnpkg/plugin-licenses.js"
 
 yarnPath: .yarn/releases/yarn-3.2.3.cjs
-
-# See all yarn log codes here: https://yarnpkg.com/advanced/error-codes
-logFilters:
-  # MISSING_PEER_DEPENDENCY
-  - code: YN0002
-    level: discard
-  # INCOMPATIBLE_PEER_DEPENDENCY
-  - code: YN0060
-    level: discard
-  # FETCH_NOT_CACHED
-  - code: YN0013
-    level: discard
-  # MUST_BUILD
-  - code: YN0007
-    level: discard
-  # DEPRECATED_PACKAGE
-  - code: YN0061
-    level: discard

third-party-licenses/CODEOWNERS

@@ -0,0 +1 @@
+*   @sourcegraph/dev-experience