Merge branch 'devel' into security/bounded-stringssecurity/bounded-strings

10 files changed, 19 insertions, 12 deletions

diff --git a/.github/ISSUE_TEMPLATE/bug_report.md b/.github/ISSUE_TEMPLATE/bug_report.md
index 81c651c9..f704f815 100644
--- a/.github/ISSUE_TEMPLATE/bug_report.md
+++ b/.github/ISSUE_TEMPLATE/bug_report.md
@@ -4,8 +4,11 @@ about: Report a reproducible problem in Progmasoft Catch3
 title: "[Bug] "
 ---
 
-<!-- SPDX-FileCopyrightText: 2026 Progmasoft <support@progmasoft.com> -->
-<!-- SPDX-License-Identifier: MPL-2.0 WITH AdditionRef-Progmasoft-Exception-2.0 -->
+<!--
+SPDX-FileCopyrightText: Catch2 Authors
+SPDX-FileCopyrightText: 2026 Progmasoft <support@progmasoft.com>
+SPDX-License-Identifier: LGPL-3.0-or-later AND BSL-1.0
+-->
 
 Before filing, check the latest code and [current limitations](https://github.com/Progmasoft/catch3/blob/devel/docs/why-catch3.md). Catch3 is an independent project, not an official Catch2 release. Please do not post credentials or private test data. Send security vulnerabilities privately to support@progmasoft.com.
 
diff --git a/.github/ISSUE_TEMPLATE/feature_request.md b/.github/ISSUE_TEMPLATE/feature_request.md
index dd1ca2b2..7ea4ab89 100644
--- a/.github/ISSUE_TEMPLATE/feature_request.md
+++ b/.github/ISSUE_TEMPLATE/feature_request.md
@@ -4,8 +4,11 @@ about: Propose an improvement to Progmasoft Catch3
 title: "[Feature] "
 ---
 
-<!-- SPDX-FileCopyrightText: 2026 Progmasoft <support@progmasoft.com> -->
-<!-- SPDX-License-Identifier: MPL-2.0 WITH AdditionRef-Progmasoft-Exception-2.0 -->
+<!--
+SPDX-FileCopyrightText: Catch2 Authors
+SPDX-FileCopyrightText: 2026 Progmasoft <support@progmasoft.com>
+SPDX-License-Identifier: LGPL-3.0-or-later AND BSL-1.0
+-->
 
 Read [Catch3's scope and compatibility policy](https://github.com/Progmasoft/catch3/blob/devel/docs/why-catch3.md) before proposing a change. Catch3 additions and changes to the Catch2-compatible engine have different ownership and compatibility constraints.
 
diff --git a/.github/codeql/codeql-config.yml b/.github/codeql/codeql-config.yml
index b48d1ea3..a5817782 100644
--- a/.github/codeql/codeql-config.yml
+++ b/.github/codeql/codeql-config.yml
@@ -1,5 +1,5 @@
 # SPDX-FileCopyrightText: 2026 Progmasoft <support@progmasoft.com>
-# SPDX-License-Identifier: MPL-2.0 WITH AdditionRef-Progmasoft-Exception-2.0
+# SPDX-License-Identifier: LGPL-3.0-or-later
 
 name: Catch3 maintained sources
 paths-ignore:
diff --git a/.github/pull_request_template.md b/.github/pull_request_template.md
index 510239ac..d18e09af 100644
--- a/.github/pull_request_template.md
+++ b/.github/pull_request_template.md
@@ -1,6 +1,7 @@
 <!--
+SPDX-FileCopyrightText: Catch2 Authors
 SPDX-FileCopyrightText: 2026 Progmasoft <support@progmasoft.com>
-SPDX-License-Identifier: MPL-2.0 WITH AdditionRef-Progmasoft-Exception-2.0
+SPDX-License-Identifier: LGPL-3.0-or-later AND BSL-1.0
 -->
 
 ## What changes
diff --git a/.github/renovate.json5 b/.github/renovate.json5
index deaa4062..f7880e0a 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -1,5 +1,5 @@
 // SPDX-FileCopyrightText: 2026 Progmasoft <support@progmasoft.com>
-// SPDX-License-Identifier: MPL-2.0 WITH AdditionRef-Progmasoft-Exception-2.0
+// SPDX-License-Identifier: LGPL-3.0-or-later
 
 // Renovate proposes the version updates of this repository. Dependabot keeps
 // its alerts and its security updates, which are repository settings; its
diff --git a/.github/workflows/bazel-builds.yml b/.github/workflows/bazel-builds.yml
index 5ca56649..8033e3d7 100644
--- a/.github/workflows/bazel-builds.yml
+++ b/.github/workflows/bazel-builds.yml
@@ -1,5 +1,5 @@
 # SPDX-FileCopyrightText: 2026 Progmasoft <support@progmasoft.com>
-# SPDX-License-Identifier: MPL-2.0 WITH AdditionRef-Progmasoft-Exception-2.0
+# SPDX-License-Identifier: LGPL-3.0-or-later
 
 name: Bazel Builds
 
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 183a69cb..2e00790c 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -1,5 +1,5 @@
 # SPDX-FileCopyrightText: 2026 Progmasoft <support@progmasoft.com>
-# SPDX-License-Identifier: MPL-2.0 WITH AdditionRef-Progmasoft-Exception-2.0
+# SPDX-License-Identifier: LGPL-3.0-or-later
 
 name: CodeQL
 on:
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index 58d7dfa0..7a1e78aa 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -1,5 +1,5 @@
 # SPDX-FileCopyrightText: 2026 Progmasoft <support@progmasoft.com>
-# SPDX-License-Identifier: MPL-2.0 WITH AdditionRef-Progmasoft-Exception-2.0
+# SPDX-License-Identifier: LGPL-3.0-or-later
 
 name: Native coverage
 
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index e12f80c0..3482adbd 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -1,5 +1,5 @@
 # SPDX-FileCopyrightText: 2026 Progmasoft <support@progmasoft.com>
-# SPDX-License-Identifier: MPL-2.0 WITH AdditionRef-Progmasoft-Exception-2.0
+# SPDX-License-Identifier: LGPL-3.0-or-later
 
 name: Dependency Review
 
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index 05f1f1b1..eab9c4f9 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -1,5 +1,5 @@
 # SPDX-FileCopyrightText: 2026 Progmasoft <support@progmasoft.com>
-# SPDX-License-Identifier: MPL-2.0 WITH AdditionRef-Progmasoft-Exception-2.0
+# SPDX-License-Identifier: LGPL-3.0-or-later
 
 name: Workflow Security