[
https://issues.apache.org/jira/browse/CASSANDRA-18969?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17785375#comment-17785375
]
Henry Hughes edited comment on CASSANDRA-18969 at 11/13/23 6:07 AM:
--------------------------------------------------------------------
{quote}are there any releases that bundle dependencies (like shaded jars
published to maven central) ?{quote}
Yes one of the published artifacts is
[java-driver-core-shaded|https://central.sonatype.com/artifact/com.datastax.oss/java-driver-core-shaded]
which includes shaded versions of [netty and
jackson|https://github.com/apache/cassandra-java-driver/blob/4.x/core-shaded/pom.xml#L152],
jackson doesn't have a NOTICE file but netty has [a pretty long
one|https://github.com/netty/netty/blob/4.1/NOTICE.txt].
There is also a dependency on
[java-driver-shaded-guava|https://github.com/datastax/java-driver-shaded-guava],
but this was not part of the donation so may be out of scope for this ticket.
was (Author: JIRAUSER301149):
{quote}are there any releases that bundle dependencies (like shaded jars
published to maven central) ?{quote}
Yes there is
[java-driver-core-shaded|https://central.sonatype.com/artifact/com.datastax.oss/java-driver-core-shaded]
which includes shaded versions of [netty and
jackson|https://github.com/apache/cassandra-java-driver/blob/4.x/core-shaded/pom.xml#L152],
jackson doesn't have a NOTICE file but netty has [a pretty long
one|https://github.com/netty/netty/blob/4.1/NOTICE.txt].
There is also a dependency on
[java-driver-shaded-guava|https://github.com/datastax/java-driver-shaded-guava],
but this was not part of the donation so may be out of scope for this ticket.
> Pre-release required legal changes for cassandra-java-driver
> ------------------------------------------------------------
>
> Key: CASSANDRA-18969
> URL: https://issues.apache.org/jira/browse/CASSANDRA-18969
> Project: Cassandra
> Issue Type: Sub-task
> Components: Client/java-driver
> Reporter: Michael Semb Wever
> Priority: Urgent
> Time Spent: 15h 50m
> Remaining Estimate: 0h
>
> TODO
> * there is still code copyrighted to others that isn't mentioned in LICENSE
> (e.g. ci/install-jdk.sh )
> * "© DataStax" still appears in the README
> * -spotbugs is LGPL, in 4.x, and not correctly made provided scope-
> * add any BSD/MIT deps to LICENCE
> * -ensure copyright headers are on all files, use rat plugin-
> * ensure NOTICE propagates NOTICES
> In short…
> {quote}
> LICENSE must contain the ASL, plus references to all code that includes
> someone else's copyright, and all BSD and MIT dependencies (including
> transitive).
> NOTICE must the standard header, plus the shorten content of any NOTICE file
> (minus its header) found in any ASL dependency (including transitive).
> {quote}
> These things must be done before a release.
> Cat X deps we included as build tool by using scope provided we should put a
> test in to ensure they work at runtime without the dep doesn't regress in the
> future.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
