golang.org/x/sys's patent LicenseRef fails the licence check #1689

golang.org/x/sys fails the organization's licence check. btclib PR 2622 (btclib-org/btclib#2622) adds a Go module, fuzz/btcd_decode, which requires btcd's wire/v2. wire/v2 requires golang.org/x/crypto (for sha3), and that requires golang.org/x/sys. The lint / Dependency review job of that pull request concludes:

fuzz/btcd_decode/go.mod » golang.org/x/sys@0.45.0 – License: BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang
Dependency review detected incompatible licenses.

(job https://github.com/btclib-org/btclib/actions/runs/38135711354/job/114459026189)

.github/dependency-review.yml says a dependency whose conclusion carries a LicenseRef term gets an entry in allow-dependencies-licenses, with its reason. That is a decision made in a pull request on that file. The term is Go's additional patent grant (the PATENTS file every golang.org/x module ships). It sits beside BSD-3-Clause, so it adds a grant and takes nothing away. The module is a CI-only tool. It is built on a runner and shipped in no package.

Done when:

• the maintainer decides whether pkg:golang/golang.org/x/sys gets an entry in allow-dependencies-licenses, with its reason; and
• if it does, the entry lands, and btclib PR 2622's Dependency review passes on a re-run.