fix(deps): update dependency app.cash.licensee:licensee-gradle-plugin to v1.14.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
app.cash.licensee:licensee-gradle-plugin	1.7.0 -> 1.14.1

---

Release Notes

cashapp/licensee (app.cash.licensee:licensee-gradle-plugin)

v1.14.1

Compare Source

Changed

• The minimum-supported Gradle version is now (tested as) 8.12. What was it before? Entirely unspecified!

v1.14.0

Compare Source

New

• Support overriding artifacts.json report path bundled into your Android APK (under assets/ path).

  licensee {
    bundleAndroidAsset = true
    androidAssetReportPath = "example/licenses.json"
  }
  

• Update SPDX database to version 3.27 (2025-07-01).

Changed

• In-development snapshots are now published to the Central Portal Snapshots repository at https://central.sonatype.com/repository/maven-snapshots/.

• Limit the plugin used Kotlin language version to 1.8 to ensure support for Gradle 8.

  This is the last release with Gradle 8 support.

v1.13.0

Compare Source

New

• DSL now has a type-safe version of allow which accepts a SpdxId constant.

  licensee {
    allow(SpdxId.Apache_20)
  }
  

• The artifacts.json report can now be automatically bundled into your Android APK (at assets/app/cash/licensee/artifacts.json path).

  licensee {
    bundleAndroidAsset = true
  }
  

• Update SPDX database to version 3.26 (2024-12-30).

Changed

• Removed Kotlin stdlib dependency. This is provided by the enclosing Gradle classpath in which the plugin is running.

v1.12.0

Compare Source

Changed

• Update SPDX database to version 3.25 (2024-08-19).
• Add fallback URL for popular MIT variant.

v1.11.0

Compare Source

New

• LicenseeTask exposes jsonOutput and validationOutput properties which are providers of the generated file that you can use to copy elsewhere or bundle into binaries.

Changed

• Invalid SPDX identifiers passed to allow will now throw an exception.
• Update SPDX database to version 3.23 (2024-02-08).

v1.10.0

Compare Source

New

• Gradle platform dependencies (also sometimes called BOMs) are now ignored since they only contribute version constraints and no code.

v1.9.1

Compare Source

Fixed

• Avoid task name showing up in logs when logging is disabled but unused licenses are present.

v1.9.0

Compare Source

Added

• Add configuration option for behavior on unused license. By default we log, but you can now choose to ignore.

  licensee {
    unusedAction(IGNORE)
  }

• New fallback URL for ISC.

Changed

• Update SPDX database to version 3.22 (2023-10-05).

v1.8.0

Compare Source

Changed

• Fallback URLs now map to multiple license SPDX IDs where appropriate.
  For example, https://opensource.org/license/gpl-2-0 matches both GPL-2.0 and GPL-2.0-or-later.

• Remove the use of afterEvalute internally. This causes some task names to slightly change and the output folders
  to slightly change when used with the Android Gradle plugin.

• Update SPDX database to version 3.21 (2023-06-18).

• Minimum Gradle version is now 8.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.