ci: Add a check for open source licenses (#184)

# Summary
Uses [licensecheck](https://github.com/FHPythonUtils/LicenseCheck) to
make sure that all dependencies are compatible with our own licence.

# Changes
* Add `licensecheck` to dev dependencies.
* Add Step in CI.
* Also adds a fallback version in `hatch-vcs`, which should resolve an
issue where dependabot fails to run correctly.

Author: toby-coleman

.github/workflows/lint-test.yaml

@@ -58,6 +58,9 @@ jobs:
         run: find . -name '*.ipynb' -not -path "./.venv/*" -exec uv run nbstripout --verify {} +
         if: always()
 
+      - name: Check open source licenses
+        run: uv run licensecheck --requirements-paths ./pyproject.toml --zero --skip-dependencies plugboard-schemas
+
       - name: Build docs
         run: uv run mkdocs build --site-dir /tmp/site
         if: always()

pyproject.toml

@@ -59,6 +59,7 @@ dev = [
     "ipython>=8.26,<9",
     "ipywidgets>=8.1.5,<9",
     "jupyterlab>=4.2,<5",
+    "licensecheck>=2025.1.0",
     "mypy>=1.11,<2",
     "nbstripout>=0.8,<1",
     "pre-commit>=3.8,<4",
@@ -106,6 +107,10 @@ build-backend = "hatchling.build"
 [tool.hatch.version]
 source = "vcs"
 
+[tool.hatch.version.raw-options]
+# Use fallback to all dependabot to run https://github.com/dependabot/dependabot-core/issues/12340
+fallback_version = "0.0.0"
+
 [tool.uv]
 package = true
 default-groups = ["all"]