License scan failures on AppInsights in source-build-externals

[oleksandr-didyk]

main build: https://dev.azure.com/dnceng/internal/_build/results?buildId=2413356&view=results
9.0.1xx-preview3 build: https://dev.azure.com/dnceng/internal/_build/results?buildId=2413354&view=results

Generated baseline:

{
  "files": [
    {
      "path": "patches/application-insights-2.21.0/0002-Remove-WebGrease-from-TPN-2816.patch",
      "detected_license_expression": "ms-net-library AND ms-rl"
    },
    {
      "path": "src/application-insights-2.21.0/LOGGING/ThirdPartyNotices.txt",
      "detected_license_expression": "unknown AND apache-2.0 AND mit AND bsd-new"
    },
    {
      "path": "src/application-insights-2.21.0/LOGGING/test/Shared/CustomTelemetryChannel.cs",
      "detected_license_expression": "proprietary-license"
    },
    {
      "path": "src/application-insights-2.21.0/NETCORE/ThirdPartyNotices.txt",
      "detected_license_expression": "unknown AND apache-2.0"
    },
    {
      "path": "src/application-insights-2.21.0/WEB/ThirdPartyNotices.txt",
      "detected_license_expression": "bsd-new AND mit AND ms-pl AND apache-2.0 AND (cc-by-3.0-us AND cc-by-3.0 AND mit) AND ms-net-library AND ms-rl"
    },
    {
      "path": "src/application-insights-2.22.0/LOGGING/ThirdPartyNotices.txt",
      "detected_license_expression": "unknown AND apache-2.0 AND mit AND bsd-new"
    },
    {
      "path": "src/application-insights-2.22.0/NETCORE/ThirdPartyNotices.txt",
      "detected_license_expression": "unknown AND apache-2.0"
    },
    {
      "path": "src/application-insights-2.22.0/WEB/ThirdPartyNotices.txt",
      "detected_license_expression": "bsd-new AND mit AND ms-pl AND apache-2.0 AND (cc-by-3.0-us AND cc-by-3.0 AND mit) AND ms-rl"
    }
  ]
}

I couldn't figure out the best area label to add to this issue. If you have write-permissions please help me learn by adding exactly one area label.

[MichaelSimons]

@ellahathaway - Can you please investigate?

[mthalman]

This is related to dotnet/installer#18968. That can be merged now that main is for Preview 4. However, I need to update the paths on it to reflect the version number in the directory name.

[ellahathaway]

Thanks for looking into this Matt. I have a tracking issue to remove AppInsights 2.21 from SBE once the VMR is rebootstrapped (#4248).

[mthalman]

Thanks for looking into this Matt. I have a tracking issue to remove AppInsights 2.21 from SBE once the VMR is rebootstrapped (#4248).

VMR has been bootstrapped: dotnet/installer#19085

[ellahathaway]

VMR has been bootstrapped: dotnet/installer#19085

That's for P3, so should I wait for the bootstrap to backport to main? dotnet/installer#19145