Update notices

.github/pre-commit/spelling_allowlist.txt

@@ -368,6 +368,7 @@ toolchains
 toolset
 transmon
 transpile
+trixie
 trotterization
 uccsd
 unary
@@ -381,6 +382,7 @@ unmarshal
 unmarshalling
 unoptimized
 upvote
+url
 variadic
 variational
 vazirani

.github/workflows/build_package_sources.yml

@@ -322,6 +322,38 @@ jobs:
           fi
           ls -la "$d"/*trimmed* 2>/dev/null || true
 
+      - name: Generate pip attribution (NOTICE_PIP per variant + CUDA version)
+        run: |
+          cuda_major=$(echo "${{ matrix.cuda }}" | cut -d. -f1)
+          suffix="_cu${cuda_major}"
+          python3 scripts/generate_pip_attribution.py \
+            package-source-diff/pip_packages_cudaq.txt \
+            -o "NOTICE_PIP_cudaq${suffix}"
+
+          python3 scripts/generate_pip_attribution.py \
+            package-source-diff/pip_packages_cudaqx.txt \
+            -o "NOTICE_PIP_cudaqx${suffix}"
+
+          python3 scripts/generate_pip_attribution.py \
+            package-source-diff/pip_packages_macos.txt \
+            -o "NOTICE_PIP_macos${suffix}"
+          ls -la NOTICE_PIP_*
+          head -50 "NOTICE_PIP_cudaq${suffix}"
+
+      - name: Generate apt attribution (NOTICE_APT per variant + CUDA version)
+        run: |
+          cuda_major=$(echo "${{ matrix.cuda }}" | cut -d. -f1)
+          suffix="_cu${cuda_major}"
+          python3 scripts/generate_apt_attribution.py \
+            package-source-diff/apt_packages_cudaq.txt \
+            -o "NOTICE_APT_cudaq${suffix}"
+
+          python3 scripts/generate_apt_attribution.py \
+            package-source-diff/apt_packages_cudaqx.txt \
+            -o "NOTICE_APT_cudaqx${suffix}"
+          ls -la NOTICE_APT_*
+          head -50 "NOTICE_APT_cudaq${suffix}"
+
       - name: Generate tpls lock file
         run: |
           chmod +x scripts/generate_tpls_lock.sh

NOTICE

@@ -1,21 +1,25 @@
 CUDA-Q
 
+Copyright (c) 2022-2026 NVIDIA Corporation & Affiliates.
+
 This product includes software developed by NVIDIA corporation and affiliates and includes material from third parties. It includes work released under the following licenses:
 
 ----------------------------------------------------------------
 
 LLVM - Apache License 2.0 with LLVM Exceptions
 <https://github.com/llvm/llvm-project> and <https://github.com/llvm/circt/>
 
-Originally developed by University of Illinois at Urbana Campaign.
-The incorporated source code and its license can be found as as submodule on the CUDA-Q repository.
+Copyright (c) 2003-2019 University of Illinois at Urbana-Champaign. All rights reserved.
+Originally developed by University of Illinois at Urbana-Champaign.
+The incorporated source code and its license can be found as a submodule on the CUDA-Q repository.
 License at <https://github.com/llvm/llvm-project/blob/main/LICENSE.TXT>
 
 ----------------------------------------------------------------
 
 Eigen - various licenses, primarily MPL2 and BSD
 <https://gitlab.com/libeigen/eigen>
 
+TODO: COPYRIGHT YEAR
 The incorporated source code and its licenses can be found as a submodule on the CUDA-Q repository.
 See also <https://gitlab.com/libeigen/eigen/-/blob/master/COPYING.README>.
 
@@ -24,30 +28,38 @@ See also <https://gitlab.com/libeigen/eigen/-/blob/master/COPYING.README>.
 PyBind11 - BSD-style license
 <https://github.com/pybind/pybind11>
 
+Copyright (c) 2016 Wenzel Jakob and pybind11 contributors.
 The source code is based on the work originally developed by Wenzel Jakob
 License at <https://github.com/pybind/pybind11/blob/master/LICENSE>
 
 ----------------------------------------------------------------
 
-Ensmallen - 3-Clause BSD License
-<https://github.com/mlpack/ensmallen>
+Ensmallen
+https://github.com/mlpack/ensmallen
 
+Copyright (c) 2011–2018, ensmallen contributors
+
+This software is licensed under the BSD 3-Clause License.
 The incorporated source code and its license can be found as a submodule on the CUDA-Q repository.
-License at <https://github.com/mlpack/ensmallen/blob/master/LICENSE.txt>
+https://github.com/mlpack/ensmallen/blob/master/LICENSE.txt
 
 ----------------------------------------------------------------
 
 Armadillo - Apache License 2.0
 <https://gitlab.com/conradsnicta/armadillo-code>
 
-The incorporated source code and its license can be found as as submodule on the CUDA-Q repository.
+Copyright 2008-2023 Conrad Sanderson (https://conradsanderson.id.au)
+Copyright 2008-2016 National ICT Australia (NICTA)
+Copyright 2017-2023 Data61 / CSIRO
+The incorporated source code and its license can be found as a submodule on the CUDA-Q repository.
 License at <https://gitlab.com/conradsnicta/armadillo-code/-/blob/12.0.x/LICENSE.txt>
 
 ----------------------------------------------------------------
 
 NLohmann JSON - MIT License
 <https://github.com/nlohmann/json>
 
+Copyright (c) 2013-2026 Niels Lohmann.
 The source code is based on the work originally developed by Niels Lohmann
 License at <https://github.com/nlohmann/json/blob/develop/LICENSE.MIT>
 
@@ -56,23 +68,26 @@ License at <https://github.com/nlohmann/json/blob/develop/LICENSE.MIT>
 Quantum++ - MIT License
 <https://github.com/softwareqinc/qpp/>
 
+Copyright (c) 2017-2025 SoftwareQ Inc.
 The source code is based on the work originally developed by SoftwareQ Inc
-License at <https://github.com/softwareQinc/qpp/blob/main/LICENSE>
+License at <https://github.com/softwareQinc/qpp/blob/main/LICENSE.txt>
 
 ----------------------------------------------------------------
 
 {fmt} - MIT License
 <https://github.com/fmtlib/fmt>
 
+Copyright (c) 2012-present Victor Zverovich and {fmt} contributors.
 Originally developed by Victor Zverovich and contributors.
 The incorporated source code and its license can be found as a submodule on the CUDA-Q repository.
-License at <https://github.com/fmtlib/fmt/blob/master/LICENSE.rst>
+License at <https://github.com/fmtlib/fmt/blob/master/LICENSE>
 
 ----------------------------------------------------------------
 
 SPDLog - MIT License
 <https://github.com/gabime/spdlog>
 
+Copyright (c) 2016-present Gabi Melman and spdlog contributors.
 Originally developed by Gabi Melman.
 The incorporated source code and its license can be found as a submodule on the CUDA-Q repository.
 License at <https://github.com/gabime/spdlog/blob/v1.x/LICENSE>
@@ -91,21 +106,24 @@ See also <https://github.com/stevengj/nlopt/blob/master/COPYING>
 ExaTN - 3-Clause BSD License
 <https://github.com/ORNL-QCI/exatn>
 
+Copyright (c) 2017, UT-Battelle
 License at <https://github.com/ORNL-QCI/exatn/blob/devel/LICENSE>
 
 ----------------------------------------------------------------
 
 CuQuantum - 3-Clause BSD License
 <https://github.com/NVIDIA/cuQuantum>
 
+Copyright (c) 2021-2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
 License at <https://github.com/NVIDIA/cuQuantum/blob/main/LICENSE>
 
 ----------------------------------------------------------------
 
 C++ Requests - MIT License
 <https://github.com/libcpr/cpr>
 
-Originally developed by Huu Nguyen, libcpr and contributors.
+Copyright (c) 2017-2021 Huu Nguyen
+Copyright (c) 2022 libcpr and many other contributors
 License at <https://github.com/libcpr/cpr/blob/master/LICENSE>
 
 ----------------------------------------------------------------
@@ -120,62 +138,77 @@ See also <https://netlib.org/blas/#_licensing>
 XTL - BSD-3-Clause
 <https://github.com/xtensor-stack/xtl>
 
+Copyright (c) 2016, Johan Mabille, Sylvain Corlay and Wolf Vollprecht
+Copyright (c) 2016, QuantStack
 License at <https://github.com/xtensor-stack/xtensor/blob/master/LICENSE>
 
 ----------------------------------------------------------------
 
 XTensor - BSD-3-Clause
 <https://github.com/xtensor-stack/xtensor>
 
+Copyright (c) 2016, Johan Mabille, Sylvain Corlay and Wolf Vollprecht
+Copyright (c) 2016, QuantStack
 License at <https://github.com/xtensor-stack/xtensor/blob/master/LICENSE>
 
 ----------------------------------------------------------------
 
 zlib - custom license
 <https://github.com/madler/zlib>
 
+(C) 1995-2026 Jean-loup Gailly and Mark Adler
 License at <https://github.com/madler/zlib/blob/master/LICENSE>
 
 ----------------------------------------------------------------
 
 OpenSSL - Apache License 2.0
 <https://www.openssl.org>
 
+Copyright (c) 1998-2025 The OpenSSL Project Authors
+Copyright (c) 1995-1998 Eric A. Young, Tim J. Hudson
 Licenses at <https://www.openssl.org/source/license.html>
 
 ----------------------------------------------------------------
 
 Curl - custom license
 <https://github.com/curl/curl/>
 
+Copyright (c) 1996 - 2026, Daniel Stenberg, <daniel@haxx.se>, and many
+contributors, see the THANKS file.
 Licenses at <https://github.com/curl/curl/tree/master/LICENSES>
 
 ----------------------------------------------------------------
 
 ASIO - Boost Software License - Version 1.0
 <https://github.com/chriskohlhoff/asio>
 
-License at <https://github.com/chriskohlhoff/asio/blob/master/asio/LICENSE_1_0.txt>
+Copyright (c) 2003-2026 Christopher M. Kohlhoff (chris at kohlhoff dot com)
+License at <https://github.com/chriskohlhoff/asio/blob/master/LICENSE_1_0.txt>
 
 ----------------------------------------------------------------
 
 Crow - BSD-3-Clause
 <https://github.com/CrowCpp/Crow>
 
+Copyright (c) 2014-2017, ipkn
+              2020-2022, CrowCpp
 License at <https://github.com/CrowCpp/Crow/blob/master/LICENSE>
 
 ----------------------------------------------------------------
 
 Tweedledum - MIT License
 <https://github.com/boschmitt/tweedledum>
 
+Copyright (c) 2018 - Present, EPFL
+Copyright (c) 2018 - Present, Bruno Schmitt <bruno [dot] schmitt [at] epfl [dot] ch>
 License at <https://github.com/boschmitt/tweedledum/blob/master/LICENSE>
 
 ----------------------------------------------------------------
 
 Stim - Apache License 2.0
 <https://github.com/quantumlib/Stim>
 
+Copyright 2025 Google LLC.
 The incorporated source code and its license can be found as a submodule on the CUDA-Q repository.
 License at <https://github.com/quantumlib/Stim/blob/main/LICENSE>
 

docker/build/package_sources.Dockerfile

@@ -29,7 +29,9 @@
 #   tpls_commits.lock                      - "<commit> <path>" per submodule (same as install_prerequisites.sh -l)
 #   .gitmodules                            - submodule paths and URLs
 #   scripts/clone_tpls_from_lock.sh        - clone script
-#   NOTICE, LICENSE                        - attribution
+#   NOTICE, LICENSE                          - attribution
+#   NOTICE_PIP_cudaq_cu<N>, NOTICE_PIP_cudaqx_cu<N>, NOTICE_PIP_macos_cu<N> - pip attribution per variant (from generate_pip_attribution.py)
+#   NOTICE_APT_cudaq_cu<N>, NOTICE_APT_cudaqx_cu<N> - apt attribution per variant (from generate_apt_attribution.py)
 
 ARG base_image=ubuntu:24.04
 FROM ${base_image}
@@ -67,7 +69,8 @@ RUN if [ -f /etc/apt/sources.list.d/ubuntu.sources ]; then \
 RUN apt-get update
 
 ENV SOURCES_ROOT=/sources
-RUN mkdir -p "${SOURCES_ROOT}/cudaq/apt" \
+RUN mkdir -p "${SOURCES_ROOT}/NOTICES" \
+              "${SOURCES_ROOT}/cudaq/apt" \
               "${SOURCES_ROOT}/cudaq/pip" \
               "${SOURCES_ROOT}/cudaqx/apt" \
               "${SOURCES_ROOT}/cudaqx/pip" \
@@ -84,8 +87,10 @@ COPY scripts/clone_tpls_from_lock.sh "${SCRIPTS_DIR}"/clone_tpls_from_lock.sh
 COPY package-source-diff/apt_packages_cudaq.txt package-source-diff/apt_packages_cudaqx.txt package-source-diff/apt_packages_cudaqx_trimmed.txt "${SCRIPTS_DIR}"/
 COPY package-source-diff/pip_packages_cudaq.txt package-source-diff/pip_packages_cudaqx.txt package-source-diff/pip_packages_cudaqx_trimmed.txt package-source-diff/pip_packages_macos.txt package-source-diff/pip_packages_macos_trimmed.txt "${SCRIPTS_DIR}"/
 
-# Copy attribution
-COPY NOTICE LICENSE "${SOURCES_ROOT}/"
+# Copy attribution into NOTICES folder (NOTICE_PIP_* and NOTICE_APT_* generated per variant with CUDA version, e.g. NOTICE_PIP_cudaq_cu12)
+COPY NOTICE LICENSE "${SOURCES_ROOT}/NOTICES/"
+COPY NOTICE_PIP_cudaq_cu* NOTICE_PIP_cudaqx_cu* NOTICE_PIP_macos_cu* "${SOURCES_ROOT}/NOTICES/"
+COPY NOTICE_APT_cudaq_cu* NOTICE_APT_cudaqx_cu* "${SOURCES_ROOT}/NOTICES/"
 
 # Fetch apt source, pip sdists, and clone tpls in parallel (prefix lines so logs stay readable)
 RUN apt-get update && set -o pipefail && \