exclude "foreign" license texts from Ditto jars

as those texts confuse e.g. ClearlyDefined scans which detect multiple licenses occurring in the Ditto artifacts
* linked to spdx website instead for license texts
* add a link where to download the dependencies as maven sources
* update Bosch.IO "to" copyright holders year to 2021
* renamed ".empty" files to "._" in order to exclude them by default in the maven-resources-plugin

Signed-off-by: Thomas Jaeckle <thomas.jaeckle@bosch.io>

java/pom.xml

@@ -265,8 +265,11 @@
                 <filtering>false</filtering>
                 <targetPath>META-INF</targetPath>
                 <excludes>
+                    <exclude>README.md</exclude>
                     <exclude>NOTICE-THIRD-PARTY.md</exclude>
                     <exclude>templates/**</exclude>
+                    <exclude>3rd-party-dependencies/**</exclude>
+                    <exclude>headers/**</exclude>
                 </excludes>
             </resource>
         </resources>

legal/3rd-party-dependencies/test.txt

@@ -2,44 +2,52 @@ biz.aQute.bnd:bndlib:jar:2.4.0:test
 ch.qos.logback:logback-classic:jar:1.2.3:test
 ch.qos.logback:logback-core:jar:1.2.3:test
 com.beust:jcommander:jar:1.72:test
-junit:junit:jar:4.12:test
+junit:junit:jar:4.13.1:test
 net.bytebuddy:byte-buddy-agent:jar:1.9.10:test
 net.bytebuddy:byte-buddy:jar:1.9.10:test
 net.javacrumbs.json-unit:json-unit-core:jar:1.28.1:test
 net.javacrumbs.json-unit:json-unit:jar:1.28.1:test
 nl.jqno.equalsverifier:equalsverifier:jar:3.0.3:test
 org.apache-extras.beanshell:bsh:jar:2.0b6:test
 org.apache.felix:org.apache.felix.framework:jar:6.0.3:test
+org.apache.maven.resolver:maven-resolver-api:jar:1.3.1:test
+org.apache.maven.resolver:maven-resolver-impl:jar:1.3.1:test
+org.apache.maven.resolver:maven-resolver-spi:jar:1.3.1:test
+org.apache.maven.resolver:maven-resolver-util:jar:1.3.1:test
 org.apache.servicemix.bundles:org.apache.servicemix.bundles.javax-inject:jar:1_2:test
 org.assertj:assertj-core:jar:3.12.0:test
+org.awaitility:awaitility:jar:4.0.3:test
 org.codehaus.mojo:animal-sniffer-annotations:jar:1.9:test
 org.hamcrest:hamcrest-core:jar:1.3:test
+org.hamcrest:hamcrest:jar:2.1:test
 org.json:json:jar:20090211:test
 org.mockito:mockito-core:jar:3.1.0:test
 org.mutabilitydetector:MutabilityDetector:jar:0.10.2:test
 org.objenesis:objenesis:jar:2.6:test
-org.ops4j.base:ops4j-base-io:jar:1.5.0:test
-org.ops4j.base:ops4j-base-lang:jar:1.5.0:test
-org.ops4j.base:ops4j-base-monitors:jar:1.5.0:test
-org.ops4j.base:ops4j-base-net:jar:1.5.0:test
-org.ops4j.base:ops4j-base-spi:jar:1.5.0:test
-org.ops4j.base:ops4j-base-store:jar:1.5.0:test
-org.ops4j.base:ops4j-base-util-property:jar:1.5.0:test
-org.ops4j.pax.exam:pax-exam-container-native:jar:4.13.0:test
-org.ops4j.pax.exam:pax-exam:jar:4.13.0:test
-org.ops4j.pax.exam:pax-exam-junit4:jar:4.13.0:test
-org.ops4j.pax.exam:pax-exam-link-mvn:jar:4.13.0:test
-org.ops4j.pax.exam:pax-exam-spi:jar:4.13.0:test
-org.ops4j.pax.swissbox:pax-swissbox-core:jar:1.8.2:test
-org.ops4j.pax.swissbox:pax-swissbox-lifecycle:jar:1.8.2:test
-org.ops4j.pax.swissbox:pax-swissbox-optional-jcl:jar:1.8.2:test
-org.ops4j.pax.swissbox:pax-swissbox-property:jar:1.8.2:test
-org.ops4j.pax.swissbox:pax-swissbox-tracker:jar:1.8.2:test
+org.ops4j.base:ops4j-base-exec:jar:1.5.1:test
+org.ops4j.base:ops4j-base-io:jar:1.5.1:test
+org.ops4j.base:ops4j-base-lang:jar:1.5.1:test
+org.ops4j.base:ops4j-base-monitors:jar:1.5.1:test
+org.ops4j.base:ops4j-base-net:jar:1.5.1:test
+org.ops4j.base:ops4j-base-spi:jar:1.5.1:test
+org.ops4j.base:ops4j-base-store:jar:1.5.1:test
+org.ops4j.base:ops4j-base-util-property:jar:1.5.1:test
+org.ops4j.pax.exam:pax-exam-container-native:jar:4.13.3:test
+org.ops4j.pax.exam:pax-exam:jar:4.13.3:test
+org.ops4j.pax.exam:pax-exam-junit4:jar:4.13.3:test
+org.ops4j.pax.exam:pax-exam-link-mvn:jar:4.13.3:test
+org.ops4j.pax.exam:pax-exam-spi:jar:4.13.3:test
+org.ops4j.pax.swissbox:pax-swissbox-core:jar:1.8.3:test
+org.ops4j.pax.swissbox:pax-swissbox-lifecycle:jar:1.8.3:test
+org.ops4j.pax.swissbox:pax-swissbox-optional-jcl:jar:1.8.3:test
+org.ops4j.pax.swissbox:pax-swissbox-property:jar:1.8.3:test
+org.ops4j.pax.swissbox:pax-swissbox-tracker:jar:1.8.3:test
 org.ops4j.pax.tinybundles:tinybundles:jar:2.1.1:test
-org.ops4j.pax.url:pax-url-aether:jar:2.4.5:test
-org.ops4j.pax.url:pax-url-classpath:jar:2.4.5:test
-org.ops4j.pax.url:pax-url-commons:jar:2.4.5:test
-org.ops4j.pax.url:pax-url-link:jar:2.4.5:test
+org.ops4j.pax.url:pax-url-aether:jar:2.6.2:test
+org.ops4j.pax.url:pax-url-aether-support:jar:2.6.2:test
+org.ops4j.pax.url:pax-url-classpath:jar:2.6.2:test
+org.ops4j.pax.url:pax-url-commons:jar:2.6.2:test
+org.ops4j.pax.url:pax-url-link:jar:2.6.2:test
 org.reactivestreams:reactive-streams-examples:jar:1.0.3:test
 org.reactivestreams:reactive-streams-tck:jar:1.0.3:test
 org.skyscreamer:jsonassert:jar:1.2.3:test

legal/NOTICE.md

@@ -22,7 +22,7 @@ SPDX-License-Identifier: EPL-2.0
 # Copyright holders
 
 * Copyright 2019 Bosch Software Innovations GmbH
-* Copyright 2020 Bosch.IO GmbH
+* Copyright 2020-2021 Bosch.IO GmbH
 * Copyright 2020 Zeptio AB
 * Copyright 2020 Othermo GmBH