tuhaihe opened a new pull request, #156: URL: https://github.com/apache/cloudberry-pxf/pull/156
org.json:json:20090211 is declared in pxf-hive as an `implementation` dependency, so it is packed into the pxf-service Spring Boot application JAR and ships inside every convenience RPM, DEB and tarball we publish. Its license carries the "The Software shall be used for Good, not Evil" clause. The ASF moved the JSON license to Category X on 2016-11-03, which forbids it in any Apache release, source or binary. This is a release blocker that documentation cannot fix: the dependency has to go. Nothing in PXF references org.json. The declaration is annotated "transitive dependency required by MapR", which does not apply to Apache Cloudberry. Remove it along with its dependencyManagement pin. Verified on Rocky 9: the build succeeds, the full unit test suite stays green (1807 tests, 0 failures), and the application JAR drops from 153 bundled JARs to 152 with json-20090211.jar gone. See: https://www.apache.org/legal/resolved.html#category-x Backpatch-through: REL_2_STABLE <!--Thank you for contributing! --> <!--In case of an existing issue or discussions, please reference it--> closes: #ISSUE_Number <!--Remove this section if no corresponding issue.--> --- ## Change logs > Describe your change clearly, including what problem is being solved or what document is being added or updated. ## Contributor's checklist Here are some reminders before you submit your pull request: * Make sure that your Pull Request has a clear title and commit message. You can take the [Git commit template](https://github.com/apache/cloudberry/blob/main/.gitmessage) as a reference. * Learn the [code contribution](https://cloudberry.apache.org/contribute/code) and [doc contribution](https://cloudberry.apache.org/contribute/doc) guides for better collaboration. * Make sure that CICD workflow is successful. * List your communications in the [GitHub Issues](https://github.com/apache/cloudberry-pxf/issues) or [Discussions](https://github.com/apache/cloudberry/discussions) (if has or needed). * Feel free to ask for the [cloudberry committers](https://github.com/orgs/apache/teams/cloudberry-committers) or other people to help review and approve. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
