Investigate Hashicorp MPL -> BUSL Changes/Impact

[MrAlias]

Related OTel issue: open-telemetry/community#1643
Related CNCF issue: cncf/foundation#617

Our dependencies need to be audited and the impact reported back to open-telemetry/community#1643

[MrAlias]

Version evaluated:

git rev-parse --short HEAD
a5ff7af3

Looking at our go.sum files to determine all transitive dependencies:

grep -Rn 'github.com/hashicorp' | grep 'go\.sum' | cut -d: -f3 | cut -d' ' -f1 | sort -u
github.com/hashicorp/errwrap
github.com/hashicorp/golang-lru
github.com/hashicorp/go-multierror
github.com/hashicorp/go-version
github.com/hashicorp/hcl

For this list:

• github.com/hashicorp/errwrap: Still using MPL-2.0
  • https://github.com/hashicorp/errwrap/blob/3622ed43b5c382494ba1496673ff8d4a9d4f6ea7/LICENSE
• github.com/hashicorp/golang-lru: Still using MPL-2.0
  • https://github.com/hashicorp/golang-lru/blob/3afaa48530f711754c178ceb61ff060d86c17b95/LICENSE
• github.com/hashicorp/go-multierror: Still using MPL-2.0
  • https://github.com/hashicorp/go-multierror/blob/09fc6ae401b42e7af2af3bb1e9c02fdc7268be17/LICENSE
• github.com/hashicorp/go-version: Still using MPL-2.0
  • https://github.com/hashicorp/go-version/blob/644291d14038339745c2d883a1a114488e30b702/LICENSE
• github.com/hashicorp/hcl: Still using MPL-2.0
  • https://github.com/hashicorp/hcl/blob/527ec318631dc6db59da91e8ca7f205fc989ebc5/LICENSE

[MrAlias]

Double check using GitHub search:

• https://github.com/search?q=org%3Aopen-telemetry+repo%3Aopen-telemetry%2Fopentelemetry-go++hashicorp&type=code
• https://github.com/search?q=org%3Aopen-telemetry+repo%3Aopen-telemetry%2Fopentelemetry-go++terraform&type=code

Nothing found other than already reported.

[MrAlias]

Closing as the audit looks complete and no dependencies of the project are listed as having their licenses changed.