Create an acknowledgement bundle on release for third party licenses

.goreleaser.yml

@@ -1,7 +1,10 @@
 before:
   hooks:
   - go mod download
-  - go-licenses save . --save_path=licenses --force
+  - go install github.com/google/go-licenses@latest
+  - go-licenses save . --save_path=./acknowledgements --force --ignore github.com/package-url/packageurl-go
+  - tar -cvf ./acknowledgements.tar.gz -C ./acknowledgements .
+  - rm -rf ./acknowledgements
 
 builds:
 - main: ./main.go
@@ -39,6 +42,10 @@ archives:
 checksum:
   name_template: 'checksums.txt'
 
+release:
+  extra_files:
+    - glob: ./acknowledgements.tar.gz
+
 changelog:
   use: github
   groups:

NOTICE

@@ -14,4 +14,4 @@ limitations under the License.
 
 ### Third party software ###
 We use third-party libraries, whose license information is included
-in the repository folder 'licenses'.
+the acknowledgements.tar.gz file as part of each release..