Conan2 migration (#40)

* Disable scanning of Conan packages due to bug of Pivotal License Finder
* Set version to 1.3.0

Author: BjoernAtBosch

NOTICE-3RD-PARTY-CONTENT.md

@@ -3,17 +3,17 @@
 ## Python
 | Dependency | Version | License |
 |:-----------|:-------:|--------:|
-|certifi|2025.1.31|Mozilla Public License 2.0|
-|charset-normalizer|3.4.1|MIT|
+|certifi|2025.4.26|Mozilla Public License 2.0|
+|charset-normalizer|3.4.2|MIT|
 |gitdb|4.0.12|BSD|
 |GitPython|3.1.44|New BSD|
 |idna|3.10|BSD|
 |PyYAML|6.0.2|MIT|
 |requests|2.32.3|Apache 2.0|
 |smmap|5.0.2|New BSD|
 |str2bool|1.1|BSD|
-|types-PyYAML|6.0.12.20241230|Apache 2.0|
-|types-requests|2.32.0.20250306|Apache 2.0|
+|types-pyyaml|6.0.12.20250402|unknown|
+|types-requests|2.32.0.20250328|Apache 2.0|
 |urllib3|2.0.7|MIT|
 ## Workflows
 | Dependency | Version | License |

README.md

@@ -6,7 +6,7 @@ Dependencies are detected using the respective languages' package manager.
 ## Supported Languages
 
 * Python3 via pip
-* CPP via Conan
+* CPP via Conan (currently disabled due to bugs in Pivotal License Finder, see below)
 * Rust via Cargo
 * JavaScript via NPM
 
@@ -104,7 +104,14 @@ scan-dirs:
 
 ### Limitations
 
-The currently used version (v7.0.1) of the Pivotal License Finder has limited support for the Conan Package Manager:
+The support of the Conan C++ package manager is disabled for time being:
+
+The currently used version (v7.2.1) of the Pivotal License Finder basically does support Conan 2 but has a bug
+(https://github.com/pivotal/LicenseFinder/issues/1057) reuslting in an endless loop while scanning a directory
+containing a conanfile which is Connan 2 based. That's the reason while we currently have completely commented out
+the call of that part of the finder (file src/licensevalidator/findlicenses.py).
+
+The previously used version (v7.0.1) of the Pivotal License Finder has limited support for the Conan Package Manager:
 * No direct support of conanfile.py; as a workaround you can add an empty conanfile.txt aside of your conanfile.py.
 * It expects a file called "LICENSE*" in some subfolder of the package. If this is not present the scan will fail.
 * It internally uses "conan install" to determine the dependencies, which tries to download those from Conan-Center.

setup.py

@@ -22,7 +22,7 @@
 
 setuptools.setup(
     name="licensevalidator",
-    version="1.2.6",
+    version="1.3.0",
     description="A validator for dependency licenses",
     long_description=long_description,
     long_description_content_type="text/markdown",

src/licensevalidator/findlicenses.py

@@ -112,6 +112,23 @@ def __use_conan_profile_if_present(conan_profile_file: str):
                 f'Failed to use Conan profile file "{conan_profile_file}"!'
             )
 
+        conan2_home_dir = os.environ.get("CONAN_HOME")
+        if not conan2_home_dir:
+            conan2_home_dir = os.environ.get("HOME")
+            if not conan2_home_dir:
+                conan2_home_dir = "/root"
+            os.path.join(conan2_home_dir, ".conan2")
+        conan2_default_profile_file = os.path.join(
+            conan2_home_dir, "profiles", "default"
+        )
+
+        os.makedirs(os.path.dirname(conan2_default_profile_file), exist_ok=True)
+        shutil.copyfile(conan_profile_file, conan2_default_profile_file)
+        if not os.path.isfile(conan2_default_profile_file):
+            raise FileNotFoundError(
+                f'Failed to use Conan2 profile file "{conan_profile_file}"!'
+            )
+
 
 def sort_dependencies(deps: list[DependencyInfo]) -> list[DependencyInfo]:
     """Sort the passed DependencyInfo list by name 1st and version 2nd
@@ -167,14 +184,16 @@ def find_licenses(
                 package_managers=["cargo"],
             ),
         ),
-        (
-            "c++",
-            lambda config: __get_cpp_licenses(
-                project_root,
-                config.get("path"),
-                config.get("cpp-conan-included-profile-files"),
-            ),
-        ),
+        # Disable Conan scan - not working yet - enable once fixed
+        # GitHub issue: https://github.com/pivotal/LicenseFinder/issues/1057
+        # (
+        #     "c++",
+        #     lambda config: __get_cpp_licenses(
+        #         project_root,
+        #         config.get("path"),
+        #         config.get("cpp-conan-included-profile-files"),
+        #     ),
+        # ),
         (
             "JavaScript",
             lambda config: execute_license_finder(