They have to sign copyright over (or otherwise license their contributions to you in a way you can relicense). Many projects require you to sign over copyright if you contribute - e.g. Cygwin, and IIRC ZeroMQ too.

Others just require you to let THEM relicense it, e.g. web2py.

And other projects (mostly those that consider closing source at some point) just refuse contributions.