From 2d920f7e5afa8d52a2a4ab5ad69ad63eea47817b Mon Sep 17 00:00:00 2001
From: Philipp Page <pagejep@amazon.com>
Date: Sat, 10 Oct 2026 18:21:33 +0200
Subject: [PATCH] chore(ci): allow native-maven-plugin and junit licenses in
 dependency review

---
 .github/dependency-review-config.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/dependency-review-config.yml b/.github/dependency-review-config.yml
index 2ea218503..520956965 100644
--- a/.github/dependency-review-config.yml
+++ b/.github/dependency-review-config.yml
@@ -29,4 +29,9 @@ allow-licenses:
   - 'BSD-3-Clause-Open-MPI'
   # TT: D290816995
   - 'UPL-1.0'
+allow-dependencies-licenses:
+  # UPL-1.0: https://github.com/graalvm/native-build-tools/blob/1.1.14/LICENSE
+  - 'pkg:maven/org.graalvm.buildtools/native-maven-plugin'
+  # EPL-2.0 (test scope only): https://github.com/junit-team/junit-framework/blob/r6.1.3/LICENSE.md
+  - 'pkg:maven/org.junit/junit-bom'
 comment-summary-in-pr: on-failure