Updated NOTICE file with new dependency information

Looks like MR !2 brought in a lot of changes. This updates the attribution and FOSSA configuration to match.

.fossa.yml

@@ -5,7 +5,7 @@ version: 2
 cli:
   server: https://app.fossa.com
   fetcher: custom
-  project: os-crs-catalog-service
+  project: CRS Catalog
 analyze:
   modules:
   - name: crs-catalog-service
@@ -14,13 +14,13 @@ analyze:
     path: .
   - name: crs-catalog-core
     type: mvn
-    target: pom.xml
-    path: crs-catalog-core
+    target: crs-catalog-core/pom.xml
+    path: .
   - name: crs-catalog-aks
     type: mvn
-    target: pom.xml
-    path: provider/crs-catalog-azure/crs-catalog-aks
+    target: provider/crs-catalog-azure/crs-catalog-aks/pom.xml
+    path: .
   - name: crs-catalog-gke
     type: mvn
-    target: pom.xml
-    path: provider/crs-catalog-gcp/crs-catalog-gke
+    target: provider/crs-catalog-gcp/crs-catalog-gke/pom.xml
+    path: .

NOTICE

@@ -35,6 +35,7 @@ The following software have components provided under the terms of this license:
 - Apache Commons Validator (from http://commons.apache.org/proper/commons-validator/)
 - Apache HttpAsyncClient (from http://hc.apache.org/httpcomponents-asyncclient)
 - Apache HttpClient (from http://hc.apache.org/httpcomponents-client)
+- Apache HttpClient Cache (from http://hc.apache.org/httpcomponents-client)
 - Apache HttpCore (from http://hc.apache.org/httpcomponents-core-ga)
 - Apache HttpCore NIO (from http://hc.apache.org/httpcomponents-core-ga)
 - Apache Log4j API (from )
@@ -56,6 +57,7 @@ The following software have components provided under the terms of this license:
 - ClassMate (from http://github.com/cowtowncoder/java-classmate)
 - Cobertura code coverage (from http://cobertura.sourceforge.net)
 - Commons Digester (from http://commons.apache.org/digester/)
+- Commons IO (from http://commons.apache.org/io/)
 - Commons Lang (from http://commons.apache.org/lang/)
 - Doxia :: APT Module (from )
 - Doxia :: Core (from )
@@ -70,25 +72,26 @@ The following software have components provided under the terms of this license:
 - FindBugs-jsr305 (from http://findbugs.sourceforge.net/)
 - Google HTTP Client Library for Java (from https://github.com/google/google-http-java-client.git)
 - Gson (from https://github.com/google/gson)
+- Guava InternalFutureFailureAccess and InternalFutures (from )
+- Guava ListenableFuture only (from )
 - Guava: Google Core Libraries for Java (from https://github.com/google/guava.git)
 - HPPC Collections (from http://labs.carrotsearch.com)
 - Hibernate Validator Engine (from )
 - J2ObjC Annotations (from https://github.com/google/j2objc/)
 - JBoss Logging 3 (from http://www.jboss.org)
+- JCIP Annotations under Apache License (from http://stephenc.github.com/jcip-annotations)
 - JDO API (from )
 - JDOM (from http://www.jdom.org)
 - JSON Small and Fast Parser (from http://www.minidev.net/)
 - JSON Web Token support for the JVM (from https://github.com/jwtk/jjwt.git)
 - JSON library from Android SDK (from http://developer.android.com/sdk)
 - JSONassert (from https://github.com/skyscreamer/JSONassert)
-- Jackson dataformat: CBOR (from http://github.com/FasterXML/jackson-dataformats-binary)
 - Jackson datatype: JSR310 (from http://wiki.fasterxml.com/JacksonModuleJSR310)
 - Jackson-annotations (from http://github.com/FasterXML/jackson)
 - Jackson-core (from https://github.com/FasterXML/jackson-core)
 - Jackson-dataformat-Smile (from http://github.com/FasterXML/jackson-dataformat-smile)
 - Jackson-dataformat-YAML (from https://github.com/FasterXML/jackson)
 - Jackson-datatype-jdk8 (from )
-- Jackson-module-parameter-names (from )
 - Jakarta Bean Validation API (from https://beanvalidation.org)
 - Java Servlet API (from https://projects.eclipse.org/projects/ee4j.servlet)
 - Javassist (from http://www.javassist.org/)
@@ -157,6 +160,9 @@ The following software have components provided under the terms of this license:
 - Netty/Handler (from )
 - Netty/Resolver (from )
 - Netty/Transport (from http://netty.io/)
+- Nimbus JOSE+JWT (from https://bitbucket.org/connect2id/nimbus-jose-jwt)
+- Nimbus LangTag (from https://bitbucket.org/connect2id/nimbus-language-tags)
+- OAuth 2.0 SDK with OpenID Connect extensions (from https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions)
 - Objenesis (from http://objenesis.org)
 - OpenCensus (from https://github.com/census-instrumentation/opencensus-java)
 - OpenCensus (from https://github.com/census-instrumentation/opencensus-java)
@@ -198,6 +204,7 @@ The following software have components provided under the terms of this license:
 - commons-collections (from )
 - compiler (from http://github.com/spullara/mustache.java)
 - elasticsearch-core (from https://github.com/elastic/elasticsearch)
+- error-prone annotations (from )
 - io.grpc:grpc-context (from https://github.com/grpc/grpc-java)
 - jackson-databind (from http://github.com/FasterXML/jackson)
 - javax.inject (from http://code.google.com/p/atinject/)
@@ -275,6 +282,13 @@ The following software have components provided under the terms of this license:
 - jakarta.xml.bind-api (from )
 - jaxen (from http://jaxen.codehaus.org/)
 
+========================================================================
+CC-BY-2.5
+========================================================================
+The following software have components provided under the terms of this license:
+
+- Checker Qual (from https://checkerframework.org)
+
 ========================================================================
 CC-BY-3.0
 ========================================================================
@@ -288,6 +302,8 @@ CDDL-1.0
 The following software have components provided under the terms of this license:
 
 - Java EE Transaction API (from http://jcp.org/en/jsr/detail?id=907)
+- JavaBeans(TM) Activation Framework (from http://java.sun.com/javase/technologies/desktop/javabeans/jaf/index.jsp)
+- JavaMail API (from )
 - Servlet Specification 2.5 API (from )
 
 ========================================================================
@@ -354,6 +370,7 @@ The following software have components provided under the terms of this license:
 - Cobertura Limited Runtime (from http://cobertura.sourceforge.net)
 - Cobertura code coverage (from http://cobertura.sourceforge.net)
 - Commons Lang (from http://commons.apache.org/lang/)
+- JavaMail API (from )
 - Mojo's Maven plugin for Cobertura (from http://mojo.codehaus.org/cobertura-maven-plugin/)
 
 ========================================================================
@@ -368,9 +385,11 @@ GPL-2.0-with-classpath-exception
 ========================================================================
 The following software have components provided under the terms of this license:
 
+- Checker Qual (from https://checkerframework.org)
 - Cobertura code coverage (from http://cobertura.sourceforge.net)
 - Jakarta WebSocket - Server API (from https://projects.eclipse.org/projects/ee4j.websocket)
 - Java Servlet API (from https://projects.eclipse.org/projects/ee4j.servlet)
+- JavaMail API (from )
 - jakarta.annotation-api (from https://projects.eclipse.org/projects/ee4j.ca)
 
 ========================================================================
@@ -416,6 +435,11 @@ MIT
 ========================================================================
 The following software have components provided under the terms of this license:
 
+- Animal Sniffer Annotations (from )
+- Azure AD Spring Security Integration Spring Boot Starter (from https://github.com/Microsoft/azure-spring-boot)
+- Azure Spring Boot AutoConfigure (from https://github.com/Microsoft/azure-spring-boot)
+- Azure Spring Boot Starter (from https://github.com/Microsoft/azure-spring-boot)
+- Checker Qual (from https://checkerframework.org)
 - JOpt Simple (from http://pholser.github.io/jopt-simple)
 - JUL to SLF4J bridge (from http://www.slf4j.org)
 - Java JWT (from http://www.jwt.io)
@@ -429,6 +453,8 @@ The following software have components provided under the terms of this license:
 - Plexus Default Interactivity Handler (from )
 - Project Lombok (from https://projectlombok.org)
 - SLF4J API Module (from http://www.slf4j.org)
+- adal4j (from https://github.com/AzureAD/azure-activedirectory-library-for-java)
+- jwks-rsa (from http://www.auth0.com)
 - mockito-junit-jupiter (from https://github.com/mockito/mockito)
 - spring-security-core (from http://spring.io/spring-security)
 
@@ -462,7 +488,6 @@ Public-Domain
 ========================================================================
 The following software have components provided under the terms of this license:
 
-- Guava: Google Core Libraries for Java (from https://github.com/google/guava.git)
 - HdrHistogram (from http://hdrhistogram.github.io/HdrHistogram/)
 - JTidy (from http://jtidy.sourceforge.net)
 - Plexus Common Utilities (from http://plexus.codehaus.org/plexus-utils)
@@ -475,6 +500,13 @@ The following software have components provided under the terms of this license:
 
 - Servlet Specification 2.5 API (from )
 
+========================================================================
+SPL-1.0
+========================================================================
+The following software have components provided under the terms of this license:
+
+- Checker Qual (from https://checkerframework.org)
+
 ========================================================================
 W3C
 ========================================================================
@@ -496,6 +528,7 @@ public-domain
 ========================================================================
 The following software have components provided under the terms of this license:
 
+- Guava: Google Core Libraries for Java (from https://github.com/google/guava.git)
 - HdrHistogram (from http://hdrhistogram.github.io/HdrHistogram/)
 - Joda-Time (from http://www.joda.org/joda-time/)
 - Project Lombok (from https://projectlombok.org)
@@ -509,6 +542,7 @@ The following software have components provided under the terms of this license:
 - Byte Buddy (without dependencies) (from )
 - JUnit Jupiter (Aggregator) (from https://junit.org/junit5/)
 - JavaBeans Activation Framework API jar (from )
+- JavaMail API (from )
 - Servlet Specification 2.5 API (from )
 - jakarta.xml.bind-api (from )
 - org.junit.jupiter:junit-jupiter-api (from http://junit.org/junit5/)