# Open Source Attribution

Component notices follow the [OSS policy](../policy/oss.md). ConfigKit's own
grant is in [COPYRIGHT](../../COPYRIGHT); dependency notices do not change it.

## go-yaml v4

Version: `go.yaml.in/yaml/v4 v4.0.0-rc.6`.

Copyright 2011-2019 Canonical Ltd

Copyright 2025 The go-yaml Project Contributors

Copyright 2006-2010 Kirill Simonov

SPDX-License-Identifier: Apache-2.0 AND MIT

License and notices: [Apache 2.0](licenses/Apache-2.0.txt) |
[MIT](licenses/MIT.txt) |
[upstream NOTICE](https://github.com/yaml/go-yaml/blob/1c17b9cee72bf81ae73a8be50fbd7dd3a9985125/NOTICE) |
[upstream LICENSE](https://github.com/yaml/go-yaml/blob/1c17b9cee72bf81ae73a8be50fbd7dd3a9985125/LICENSE)

Source: [go-yaml](https://github.com/yaml/go-yaml/tree/1c17b9cee72bf81ae73a8be50fbd7dd3a9985125).

The upstream NOTICE identifies the libyaml-derived portion as MIT-licensed and
the remaining project files as Apache-2.0-licensed; these are not alternative
licenses for the entire module. The statements above preserve the NOTICE's
wording. The module declares no additional Go module requirements.