This is an automated email from the ASF dual-hosted git repository.
yuxiqian pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/flink-cdc.git
The following commit(s) were added to refs/heads/master by this push:
new 1c9f2aa09 [legal] Update NOTICE for bundled dependencies (#4565)
1c9f2aa09 is described below
commit 1c9f2aa091c6f71868006668aae25f1dccb9710a
Author: yuxiqian <[email protected]>
AuthorDate: Tue Oct 13 17:51:30 2026 +0800
[legal] Update NOTICE for bundled dependencies (#4565)
---
LICENSE | 12 +
NOTICE | 362 +++++++++++----------
.../src/main/resources/META-INF/NOTICE | 24 ++
.../src/main/resources/META-INF/NOTICE | 18 +
.../src/main/resources/META-INF/NOTICE | 18 +
.../src/main/resources/META-INF/NOTICE | 8 +
.../src/main/resources/META-INF/NOTICE | 11 +
.../src/main/resources/META-INF/NOTICE | 8 +
.../src/main/resources/META-INF/NOTICE | 24 ++
.../src/main/resources/META-INF/NOTICE | 24 ++
.../src/main/resources/META-INF/NOTICE | 3 +
licenses/LICENSE.anchorjs | 21 ++
licenses/LICENSE.chroma | 19 ++
licenses/LICENSE.font-awesome | 97 ++++++
tools/ci/license_check.rb | 47 ++-
tools/releasing/create_source_release.sh | 23 +-
16 files changed, 539 insertions(+), 180 deletions(-)
diff --git a/LICENSE b/LICENSE
index 261eeb9e9..1740981c4 100644
--- a/LICENSE
+++ b/LICENSE
@@ -199,3 +199,15 @@
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
+
+THIRD-PARTY LICENSES FOR SOURCE-BUNDLED ASSETS
+
+The source distribution includes the following third-party assets. Their
+license terms are provided in the indicated files:
+
+- AnchorJS v3.1.0 in docs/static/js/anchor.min.js: licenses/LICENSE.anchorjs
(MIT).
+- Font Awesome 4.6.3 CSS in docs/static/font-awesome/css/:
+ licenses/LICENSE.font-awesome (MIT).
+- Font Awesome 4.6.3 fonts in docs/static/font-awesome/fonts/:
+ licenses/LICENSE.font-awesome (SIL OFL 1.1).
+- Chroma-generated CSS in docs/assets/github.css: licenses/LICENSE.chroma
(MIT).
diff --git a/NOTICE b/NOTICE
index 88d76db3e..f19cfb976 100644
--- a/NOTICE
+++ b/NOTICE
@@ -4,6 +4,153 @@ Copyright 2024-2026 The Apache Software Foundation
This product includes software developed at
The Apache Software Foundation (http://www.apache.org/).
+This project bundles the following dependencies under the MIT license.
+In the source distribution, see licenses/LICENSE.anchorjs,
licenses/LICENSE.font-awesome,
+and licenses/LICENSE.chroma for details.
+
+- AnchorJS v3.1.0 (https://github.com/bryanbraun/anchorjs) Copyright (c) 2016
Bryan Braun
+ -> in "docs/static/js/anchor.min.js"
+- font-awesome:4.6.3 (css) (https://fontawesome.com/) - Created by Dave Gandy
+ -> css in "docs/static/font-awesome/css"
+- chroma (css generated by Hugo) (https://github.com/alecthomas/chroma)
Copyright (C) 2017 Alec Thomas
+ -> in "docs/assets/github.css"
+
+The Flink CDC binary distributions bundle the following dependencies under the
MIT license.
+See bundled license files for details.
+
+- Argparse4j
+- Microsoft JDBC Driver for SQL Server
+- SLF4J
+- Uber Tally
+
+The Flink CDC binary distributions bundle the following dependencies under
BSD-style licenses.
+See bundled license files for details.
+
+- ANTLR
+- Janino and Commons Compiler
+- Kryo and MinLog
+- Protocol Buffers
+- Reflections
+- ThreeTen-Extra
+- TreeLayout
+- zstd-jni
+
+This project bundles the following dependencies under SIL OFL 1.1 license
(https://opensource.org/licenses/OFL-1.1).
+In the source distribution, see licenses/LICENSE.font-awesome for details.
+
+- font-awesome:4.6.3 (Font) (https://fontawesome.com/) - Created by Dave Gandy
+ -> fonts in "docs/static/font-awesome/fonts"
+
+The Flink CDC binary distributions bundle the following dependencies under the
Apache License, Version 2.0.
+See bundled license files for details.
+
+- Aircompressor
+- Alibaba Druid and Fastjson
+- Apache Arrow
+- Apache Avro
+- Apache Calcite
+- Apache Commons
+- Apache Doris
+- Apache Flink
+- Apache Fluss
+- Apache Hadoop
+- Apache Hive
+- Apache HttpComponents
+- Apache Hudi
+- Apache Iceberg
+- Apache Kafka
+- Apache Logging Services
+- Apache ORC
+- Apache Paimon
+- Apache Parquet
+- Caffeine
+- Debezium
+- Dropwizard Metrics
+- Elasticsearch Java clients
+- Esri Geometry API for Java
+- FlatBuffers
+- gRPC
+- Gson
+- Guava
+- HikariCP
+- Jackson
+- JCommander
+- Javalin
+- Javassist
+- Joda-Time
+- JSqlParser
+- Kotlin standard library and reflection
+- LMAX Disruptor
+- MongoDB Java Driver
+- mysql-binlog-connector-java
+- Nessie
+- Netty
+- Objenesis
+- OceanBase Flink Connector
+- ODPS SDK
+- OkHttp and Okio
+- OpenAI Java
+- PemJa
+- PerfMark
+- Prometheus client_java
+- RoaringBitmap
+- RocksDB JNI
+- SnakeYAML
+- SOFA Bolt and SOFA Common Tools
+- StarRocks Connector for Apache Flink
+- Swagger Annotations
+- TiKV Java Client
+- victools/jsonschema-generator
+- Vitess
+
+The Flink CDC binary distributions bundle the following dependencies under the
Eclipse Distribution License, Version 1.0.
+See bundled license files for details.
+
+- Eclipse Collections
+- Jakarta XML Binding
+- JTS Topology Suite
+
+The Flink CDC binary distributions bundle AspectJ under the Eclipse Public
License, Version 1.0.
+See bundled license files for details.
+
+The Flink CDC binary distributions bundle Jakarta JSON Processing under the
Eclipse Public License, Version 2.0,
+or the GNU General Public License, Version 2, with the Classpath Exception.
+See bundled license files for details.
+
+The Flink CDC binary distributions bundle the following dependencies under the
Common Development and Distribution
+License, or the GNU General Public License, Version 2, with the Classpath
Exception.
+See bundled license files for details.
+
+- Java Activation Framework
+- JavaMail
+- Java Servlet API
+- JSON Processing reference implementation
+
+The Flink CDC binary distributions bundle the Public Suffix List under the
Mozilla Public License, Version 2.0
+(https://mozilla.org/MPL/2.0/).
+See bundled license files for details.
+
+The Flink CDC binary distributions bundle the following dependencies under the
Mulan Permissive Software License,
+Version 2.
+See bundled license files for details.
+
+- OceanBase OBKV Table Client
+- OceanBase Partition Calculator
+
+The Flink CDC binary distributions bundle JavaCSV under the GNU Lesser General
Public License.
+See bundled license files for details.
+
+The Flink CDC binary distributions bundle Java Object Layout under the GNU
General Public License, Version 2,
+with the Classpath Exception.
+See bundled license files for details.
+
+The Flink CDC binary distributions bundle the PostgreSQL JDBC Driver under the
PostgreSQL License.
+See bundled license files for details.
+
+The Apache Flink CDC project contains or reuses code that is licensed under
the ISC license from the following projects.
+
+- BoringSSL (https://boringssl.googlesource.com/boringssl/)
+
Permission to use, copy, modify, and/or distribute this software for any
purpose with or without fee is hereby
granted, provided that this permission notice appear in all copies.
@@ -13,194 +160,55 @@ DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
WHATSOEVER RESULTING F
WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING
OUT OF OR IN CONNECTION WITH THE
USE OR PERFORMANCE OF THIS SOFTWARE.
-----------------------------------------------------------
-
-This product includes software developed at
-The Apache Software Foundation (http://www.apache.org/).
-
-Apache Calcite
-Copyright 2014 - 2024 The Apache Software Foundation
-
-Apache Commons
-Copyright 2022 - 2024 The Apache Software Foundation
-
-Apache Doris
-Copyright 2022 - 2024 The Apache Software Foundation
-
-Apache Flink
-Copyright 2014 - 2024 The Apache Software Foundation
-
-Apache Kafka
-Copyright 2011 - 2024 The Apache Software Foundation
-
-Apache Logging Services
-Copyright 2001 - 2024 The Apache Software Foundation
-
-Apache Paimon
-Copyright 2023 - 2024 The Apache Software Foundation
-
-----------------------------------------------------------
-
-Debezium
-
-Copyright 2020 - 2024 Debezium Community. All rights reserved.
-
-Code released under Apache License, v2.0.
-
-----------------------------------------------------------
-
-Elasticsearch
-
-Copyright 2010 - 2024 Elasticsearch B.V. All Rights Reserved.
-
-Source code in this repository is covered by (i) a triple license under the
"GNU
-Affero General Public License v3.0 only", "the Server Side Public License, v
1",
-and the "Elastic License 2.0", or (ii) an "Apache License 2.0" compatible
-license or (iii) solely under the "Elastic License 2.0", in each case, as noted
-in the applicable header. The default throughout the repository is a triple
-license under the "GNU Affero General Public License v3.0 only", "the Server
-Side Public License, v 1", and the "Elastic License 2.0", unless the header
-specifies another license. Code that is licensed solely under the "Elastic
-License 2.0" is found only in the x-pack folder.
-
----------------------------------------------------------
-
-Guava - Google core libraries for Java
-
-Copyright 2009 - 2024 Google LLC. All Rights Reserved.
-
-Licensed under Apache License Version 2.0, January 2004
-
-----------------------------------------------------------
-
-HikariCP
-
-Copyright 2013 - 2024 Brett Wooldridge, et al. All Rights Reserved.
-
-Licensed under Apache License Version 2.0, January 2004
-
-----------------------------------------------------------
-
-Jackson
-
-Copyright 2011 - 2024 FasterXML, LLC. All Rights Reserved.
-
-Licensed under Apache License Version 2.0, January 2004
-
-----------------------------------------------------------
-
-Janino - An embedded Java[TM] compiler
-
-Copyright (c) 2001-2016, Arno Unkrig
-Copyright (c) 2015-2016 TIBCO Software Inc.
-All rights reserved.
-
-Redistribution and use in source and binary forms, with or without
-modification, are permitted provided that the following conditions
-are met:
-
- 1. Redistributions of source code must retain the above copyright
- notice, this list of conditions and the following disclaimer.
- 2. Redistributions in binary form must reproduce the above
- copyright notice, this list of conditions and the following
- disclaimer in the documentation and/or other materials
- provided with the distribution.
- 3. Neither the name of JANINO nor the names of its contributors
- may be used to endorse or promote products derived from this
- software without specific prior written permission.
-
-THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
-AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
-IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
-ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDERS OR CONTRIBUTORS BE
-LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
-CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
-SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
-INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER
-IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
-OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
-IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-
-----------------------------------------------------------
-
-Microsoft JDBC Driver for SQL Server
-
-Copyright(c) 2021 - 2024 Microsoft Corporation
-
-The Microsoft JDBC Driver for SQL Server is licensed under the MIT license.
-
-----------------------------------------------------------
-
-Mongo Java Driver
-
-Copyright 2013 - 2024 MongoDB, Inc. All Rights Reserved.
-
-Licensed under Apache License Version 2.0.
-
-----------------------------------------------------------
-
-mysql-binlog-connector-java
-
-Copyright 2013 - 2024 Stanley Shyiko, et al. All Rights Reserved.
-
-Licensed under Apache License Version 2.0.
-
-----------------------------------------------------------
-
-PostgreSQL Database Management System
-(formerly known as Postgres, then as Postgres95)
-
-Portions Copyright (c) 1996-2024, PostgreSQL Global Development Group
-
-Portions Copyright (c) 1994, The Regents of the University of California
-
-Permission to use, copy, modify, and distribute this software and its
-documentation for any purpose, without fee, and without a written agreement
-is hereby granted, provided that the above copyright notice and this
-paragraph and the following two paragraphs appear in all copies.
-
-IN NO EVENT SHALL THE UNIVERSITY OF CALIFORNIA BE LIABLE TO ANY PARTY FOR
-DIRECT, INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, INCLUDING
-LOST PROFITS, ARISING OUT OF THE USE OF THIS SOFTWARE AND ITS
-DOCUMENTATION, EVEN IF THE UNIVERSITY OF CALIFORNIA HAS BEEN ADVISED OF THE
-POSSIBILITY OF SUCH DAMAGE.
-
-THE UNIVERSITY OF CALIFORNIA SPECIFICALLY DISCLAIMS ANY WARRANTIES,
-INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
-AND FITNESS FOR A PARTICULAR PURPOSE. THE SOFTWARE PROVIDED HEREUNDER IS
-ON AN "AS IS" BASIS, AND THE UNIVERSITY OF CALIFORNIA HAS NO OBLIGATIONS TO
-PROVIDE MAINTENANCE, SUPPORT, UPDATES, ENHANCEMENTS, OR MODIFICATIONS.
-
-----------------------------------------------------------
-
-SnakeYAML
-
-Copyright 2018 - 2024 Andrey Somov, et al. All Rights Reserved.
+**********************
+THIRD PARTY COMPONENTS
+**********************
-Licensed under Apache License Version 2.0.
+Apache Fluss includes software developed for Orekit by
+CS Systèmes d'Information (http://www.c-s.fr/)
+Copyright 2010-2012 CS Systèmes d'Information
-----------------------------------------------------------
+Apache Fluss includes Jackson, originally written by Tatu Saloranta.
+Copyright 2007-, Tatu Saloranta
-StarRocks, and starrocks-connector-for-apache-flink
+Jackson Core bundles a shaded copy of FastDoubleParser.
+Copyright © 2023 Werner Randelshofer, Switzerland. MIT License.
-Copyright 2021 - 2024 StarRocks, Inc. All rights reserved.
+Apache Iceberg includes code from Kite, developed at Cloudera, Inc.
+Copyright 2013 Cloudera Inc.
-Licensed under Apache License Version 2.0.
+Eclipse Jetty
+Copyright 1995-2018 Mort Bay Consulting Pty Ltd.
-----------------------------------------------------------
+The UnixCrypt.java code included by Jetty is Copyright 1996 Aki Yoshida,
+modified April 2001 by Iris Van den Broeke and Daniel Deville. Permission to
+use, copy, modify and distribute UnixCrypt for non-commercial or commercial
+purposes and without fee is granted provided that the copyright notice
+appears in all copies.
-TiDB
+OceanBase Flink Connector
+Copyright 2023-2024 OceanBase
-Copyright 2016 - 2024 PingCAP Inc. All Rights Reserved.
+Nessie
+Copyright 2015-2025 Dremio Corporation
-Licensed under Apache License Version 2.0.
+Nessie includes code from Apache Polaris (incubating). The initial code for
+Apache Polaris was donated to the Apache Software Foundation by Snowflake Inc.,
+copyright 2024.
-----------------------------------------------------------
+The Netty Project
+Copyright 2016 The Netty Project
-Vitess
+Netty contains a forked and modified version of Tomcat Native, Maven Wrapper
+scripts, code to support AIX taken from NetBSD, and code from BoringSSL.
-Copyright 1998 - 2024 The Linux Foundation. All Rights Reserved.
+Jakarta XML Binding
+Copyright (c) 2018, 2019 Oracle and/or its affiliates. All rights reserved.
+Jakarta XML Binding is a trademark of the Eclipse Foundation.
-Licensed under Apache License Version 2.0.
+Jakarta JSON Processing
+Copyright (c) 2018, 2020 Oracle and/or its affiliates. All rights reserved.
+Jakarta JSON Processing is a trademark of the Eclipse Foundation.
-----------------------------------------------------------
+The OpenAI Java client bundles publicsuffixes.gz, compiled from the Public
+Suffix List (https://publicsuffix.org/list/public_suffix_list.dat).
diff --git
a/flink-cdc-connect/flink-cdc-pipeline-connectors/flink-cdc-pipeline-connector-doris/src/main/resources/META-INF/NOTICE
b/flink-cdc-connect/flink-cdc-pipeline-connectors/flink-cdc-pipeline-connector-doris/src/main/resources/META-INF/NOTICE
new file mode 100644
index 000000000..a46b7977e
--- /dev/null
+++
b/flink-cdc-connect/flink-cdc-pipeline-connectors/flink-cdc-pipeline-connector-doris/src/main/resources/META-INF/NOTICE
@@ -0,0 +1,24 @@
+flink-cdc-pipeline-connector-doris
+Copyright 2024-2026 The Apache Software Foundation
+
+This product includes software developed at
+The Apache Software Foundation (http://www.apache.org/).
+
+The Netty Project
+Copyright 2016 The Netty Project
+
+Netty contains a forked and modified version of Tomcat Native, Maven Wrapper
+scripts, code to support AIX taken from NetBSD, and code from BoringSSL.
+
+The Apache Flink CDC project contains or reuses code that is licensed under
the ISC license from the following projects.
+
+- BoringSSL (https://boringssl.googlesource.com/boringssl/)
+
+Permission to use, copy, modify, and/or distribute this software for any
purpose with or without fee is hereby
+granted, provided that this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
REGARD TO THIS SOFTWARE INCLUDING
+ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE
AUTHOR BE LIABLE FOR ANY SPECIAL,
+DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING
FROM LOSS OF USE, DATA OR PROFITS,
+WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING
OUT OF OR IN CONNECTION WITH THE
+USE OR PERFORMANCE OF THIS SOFTWARE.
diff --git
a/flink-cdc-connect/flink-cdc-pipeline-connectors/flink-cdc-pipeline-connector-fluss/src/main/resources/META-INF/NOTICE
b/flink-cdc-connect/flink-cdc-pipeline-connectors/flink-cdc-pipeline-connector-fluss/src/main/resources/META-INF/NOTICE
new file mode 100644
index 000000000..6e50d1488
--- /dev/null
+++
b/flink-cdc-connect/flink-cdc-pipeline-connectors/flink-cdc-pipeline-connector-fluss/src/main/resources/META-INF/NOTICE
@@ -0,0 +1,18 @@
+flink-cdc-pipeline-connector-fluss
+Copyright 2024-2026 The Apache Software Foundation
+
+This product includes software developed at
+The Apache Software Foundation (http://www.apache.org/).
+
+Apache Fluss includes software developed for Orekit by
+CS Systèmes d'Information (http://www.c-s.fr/)
+Copyright 2010-2012 CS Systèmes d'Information
+
+Apache Fluss includes Jackson, originally written by Tatu Saloranta.
+Copyright 2007-, Tatu Saloranta
+
+Jackson Core bundles a shaded copy of FastDoubleParser.
+Copyright © 2023 Werner Randelshofer, Switzerland. MIT License.
+
+The Netty Project
+Copyright 2016 The Netty Project
diff --git
a/flink-cdc-connect/flink-cdc-pipeline-connectors/flink-cdc-pipeline-connector-iceberg/src/main/resources/META-INF/NOTICE
b/flink-cdc-connect/flink-cdc-pipeline-connectors/flink-cdc-pipeline-connector-iceberg/src/main/resources/META-INF/NOTICE
new file mode 100644
index 000000000..954a0544b
--- /dev/null
+++
b/flink-cdc-connect/flink-cdc-pipeline-connectors/flink-cdc-pipeline-connector-iceberg/src/main/resources/META-INF/NOTICE
@@ -0,0 +1,18 @@
+flink-cdc-pipeline-connector-iceberg
+Copyright 2024-2026 The Apache Software Foundation
+
+This product includes software developed at
+The Apache Software Foundation (http://www.apache.org/).
+
+Apache Iceberg includes code from Kite, developed at Cloudera, Inc.
+Copyright 2013 Cloudera Inc.
+
+Jackson Core bundles a shaded copy of FastDoubleParser.
+Copyright © 2023 Werner Randelshofer, Switzerland. MIT License.
+
+Nessie
+Copyright 2015-2025 Dremio Corporation
+
+Nessie includes code from Apache Polaris (incubating). The initial code for
+Apache Polaris was donated to the Apache Software Foundation by Snowflake Inc.,
+copyright 2024.
diff --git
a/flink-cdc-connect/flink-cdc-pipeline-connectors/flink-cdc-pipeline-connector-maxcompute/src/main/resources/META-INF/NOTICE
b/flink-cdc-connect/flink-cdc-pipeline-connectors/flink-cdc-pipeline-connector-maxcompute/src/main/resources/META-INF/NOTICE
new file mode 100644
index 000000000..5ce07036f
--- /dev/null
+++
b/flink-cdc-connect/flink-cdc-pipeline-connectors/flink-cdc-pipeline-connector-maxcompute/src/main/resources/META-INF/NOTICE
@@ -0,0 +1,8 @@
+flink-cdc-pipeline-connector-maxcompute
+Copyright 2024-2026 The Apache Software Foundation
+
+This product includes software developed at
+The Apache Software Foundation (http://www.apache.org/).
+
+The Netty Project
+Copyright 2016 The Netty Project
diff --git
a/flink-cdc-connect/flink-cdc-pipeline-connectors/flink-cdc-pipeline-connector-paimon/src/main/resources/META-INF/NOTICE
b/flink-cdc-connect/flink-cdc-pipeline-connectors/flink-cdc-pipeline-connector-paimon/src/main/resources/META-INF/NOTICE
new file mode 100644
index 000000000..4e49ead1b
--- /dev/null
+++
b/flink-cdc-connect/flink-cdc-pipeline-connectors/flink-cdc-pipeline-connector-paimon/src/main/resources/META-INF/NOTICE
@@ -0,0 +1,11 @@
+flink-cdc-pipeline-connector-paimon
+Copyright 2024-2026 The Apache Software Foundation
+
+This product includes software developed at
+The Apache Software Foundation (http://www.apache.org/).
+
+Jackson Core bundles a shaded copy of FastDoubleParser.
+Copyright © 2023 Werner Randelshofer, Switzerland. MIT License.
+
+The Netty Project
+Copyright 2016 The Netty Project
diff --git
a/flink-cdc-connect/flink-cdc-pipeline-connectors/flink-cdc-pipeline-connector-starrocks/src/main/resources/META-INF/NOTICE
b/flink-cdc-connect/flink-cdc-pipeline-connectors/flink-cdc-pipeline-connector-starrocks/src/main/resources/META-INF/NOTICE
new file mode 100644
index 000000000..04e44dfc4
--- /dev/null
+++
b/flink-cdc-connect/flink-cdc-pipeline-connectors/flink-cdc-pipeline-connector-starrocks/src/main/resources/META-INF/NOTICE
@@ -0,0 +1,8 @@
+flink-cdc-pipeline-connector-starrocks
+Copyright 2024-2026 The Apache Software Foundation
+
+This product includes software developed at
+The Apache Software Foundation (http://www.apache.org/).
+
+The Netty Project
+Copyright 2016 The Netty Project
diff --git
a/flink-cdc-connect/flink-cdc-source-connectors/flink-sql-connector-tidb-cdc/src/main/resources/META-INF/NOTICE
b/flink-cdc-connect/flink-cdc-source-connectors/flink-sql-connector-tidb-cdc/src/main/resources/META-INF/NOTICE
new file mode 100644
index 000000000..2e39c721b
--- /dev/null
+++
b/flink-cdc-connect/flink-cdc-source-connectors/flink-sql-connector-tidb-cdc/src/main/resources/META-INF/NOTICE
@@ -0,0 +1,24 @@
+flink-sql-connector-tidb-cdc
+Copyright 2024-2026 The Apache Software Foundation
+
+This product includes software developed at
+The Apache Software Foundation (http://www.apache.org/).
+
+The Netty Project
+Copyright 2016 The Netty Project
+
+Netty contains a forked and modified version of Tomcat Native, Maven Wrapper
+scripts, code to support AIX taken from NetBSD, and code from BoringSSL.
+
+The Apache Flink CDC project contains or reuses code that is licensed under
the ISC license from the following projects.
+
+- BoringSSL (https://boringssl.googlesource.com/boringssl/)
+
+Permission to use, copy, modify, and/or distribute this software for any
purpose with or without fee is hereby
+granted, provided that this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
REGARD TO THIS SOFTWARE INCLUDING
+ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE
AUTHOR BE LIABLE FOR ANY SPECIAL,
+DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING
FROM LOSS OF USE, DATA OR PROFITS,
+WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING
OUT OF OR IN CONNECTION WITH THE
+USE OR PERFORMANCE OF THIS SOFTWARE.
diff --git
a/flink-cdc-connect/flink-cdc-source-connectors/flink-sql-connector-vitess-cdc/src/main/resources/META-INF/NOTICE
b/flink-cdc-connect/flink-cdc-source-connectors/flink-sql-connector-vitess-cdc/src/main/resources/META-INF/NOTICE
new file mode 100644
index 000000000..8f847a622
--- /dev/null
+++
b/flink-cdc-connect/flink-cdc-source-connectors/flink-sql-connector-vitess-cdc/src/main/resources/META-INF/NOTICE
@@ -0,0 +1,24 @@
+flink-sql-connector-vitess-cdc
+Copyright 2024-2026 The Apache Software Foundation
+
+This product includes software developed at
+The Apache Software Foundation (http://www.apache.org/).
+
+The Netty Project
+Copyright 2016 The Netty Project
+
+Netty contains a forked and modified version of Tomcat Native, Maven Wrapper
+scripts, code to support AIX taken from NetBSD, and code from BoringSSL.
+
+The Apache Flink CDC project contains or reuses code that is licensed under
the ISC license from the following projects.
+
+- BoringSSL (https://boringssl.googlesource.com/boringssl/)
+
+Permission to use, copy, modify, and/or distribute this software for any
purpose with or without fee is hereby
+granted, provided that this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
REGARD TO THIS SOFTWARE INCLUDING
+ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE
AUTHOR BE LIABLE FOR ANY SPECIAL,
+DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING
FROM LOSS OF USE, DATA OR PROFITS,
+WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING
OUT OF OR IN CONNECTION WITH THE
+USE OR PERFORMANCE OF THIS SOFTWARE.
diff --git
a/flink-cdc-pipeline-model/flink-cdc-pipeline-model-openai-compatible/src/main/resources/META-INF/NOTICE
b/flink-cdc-pipeline-model/flink-cdc-pipeline-model-openai-compatible/src/main/resources/META-INF/NOTICE
index b5ee44f11..6441936f7 100644
---
a/flink-cdc-pipeline-model/flink-cdc-pipeline-model-openai-compatible/src/main/resources/META-INF/NOTICE
+++
b/flink-cdc-pipeline-model/flink-cdc-pipeline-model-openai-compatible/src/main/resources/META-INF/NOTICE
@@ -32,3 +32,6 @@ This project bundles the following dependencies under the
Apache Software Licens
- org.jetbrains.kotlin:kotlin-stdlib-jdk7:1.8.0
- org.jetbrains.kotlin:kotlin-stdlib-jdk8:1.8.0
- org.jetbrains.kotlin:kotlin-reflect:1.8.10
+
+The OpenAI Java client bundles publicsuffixes.gz, compiled from the Public
+Suffix List (https://publicsuffix.org/list/public_suffix_list.dat).
diff --git a/licenses/LICENSE.anchorjs b/licenses/LICENSE.anchorjs
new file mode 100644
index 000000000..ac218a73d
--- /dev/null
+++ b/licenses/LICENSE.anchorjs
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2016 Bryan Braun
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/licenses/LICENSE.chroma b/licenses/LICENSE.chroma
new file mode 100644
index 000000000..92dc39f70
--- /dev/null
+++ b/licenses/LICENSE.chroma
@@ -0,0 +1,19 @@
+Copyright (C) 2017 Alec Thomas
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
+of the Software, and to permit persons to whom the Software is furnished to do
+so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/licenses/LICENSE.font-awesome b/licenses/LICENSE.font-awesome
new file mode 100644
index 000000000..83884173e
--- /dev/null
+++ b/licenses/LICENSE.font-awesome
@@ -0,0 +1,97 @@
+The MIT license
+
+Copyright (c) 2016 Dave Gandy
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights to
use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
of the Software, and to permit persons to whom the Software is furnished to do
so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.
+
+
+ SIL OPEN FONT LICENSE
+
+Version 1.1 - 26 February 2007
+PREAMBLE
+
+The goals of the Open Font License (OFL) are to stimulate worldwide
+development of collaborative font projects, to support the font creation
+efforts of academic and linguistic communities, and to provide a free and
+open framework in which fonts may be shared and improved in partnership
+with others.
+
+The OFL allows the licensed fonts to be used, studied, modified and
+redistributed freely as long as they are not sold by themselves. The
+fonts, including any derivative works, can be bundled, embedded,
+redistributed and/or sold with any software provided that any reserved
+names are not used by derivative works. The fonts and derivatives,
+however, cannot be released under any other type of license. The
+requirement for fonts to remain under this license does not apply
+to any document created using the fonts or their derivatives.
+DEFINITIONS
+
+"Font Software" refers to the set of files released by the Copyright
+Holder(s) under this license and clearly marked as such. This may
+include source files, build scripts and documentation.
+
+"Reserved Font Name" refers to any names specified as such after the
+copyright statement(s).
+
+"Original Version" refers to the collection of Font Software components as
+distributed by the Copyright Holder(s).
+
+"Modified Version" refers to any derivative made by adding to, deleting,
+or substituting — in part or in whole — any of the components of the
+Original Version, by changing formats or by porting the Font Software to a
+new environment.
+
+"Author" refers to any designer, engineer, programmer, technical
+writer or other person who contributed to the Font Software.
+PERMISSION & CONDITIONS
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Font Software, to use, study, copy, merge, embed, modify,
+redistribute, and sell modified and unmodified copies of the Font
+Software, subject to the following conditions:
+
+1) Neither the Font Software nor any of its individual components,
+in Original or Modified Versions, may be sold by itself.
+
+2) Original or Modified Versions of the Font Software may be bundled,
+redistributed and/or sold with any software, provided that each copy
+contains the above copyright notice and this license. These can be
+included either as stand-alone text files, human-readable headers or
+in the appropriate machine-readable metadata fields within text or
+binary files as long as those fields can be easily viewed by the user.
+
+3) No Modified Version of the Font Software may use the Reserved Font
+Name(s) unless explicit written permission is granted by the corresponding
+Copyright Holder. This restriction only applies to the primary font name as
+presented to the users.
+
+4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+Software shall not be used to promote, endorse or advertise any
+Modified Version, except to acknowledge the contribution(s) of the
+Copyright Holder(s) and the Author(s) or with their explicit written
+permission.
+
+5) The Font Software, modified or unmodified, in part or in whole,
+must be distributed entirely under this license, and must not be
+distributed under any other license. The requirement for fonts to
+remain under this license does not apply to any document created
+using the Font Software.
+TERMINATION
+
+This license becomes null and void if any of the above conditions are
+not met.
+DISCLAIMER
+
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+OTHER DEALINGS IN THE FONT SOFTWARE.
diff --git a/tools/ci/license_check.rb b/tools/ci/license_check.rb
index ee7d5de48..f37d62354 100755
--- a/tools/ci/license_check.rb
+++ b/tools/ci/license_check.rb
@@ -81,6 +81,28 @@ EXCEPTION_PACKAGES = [
'org/eclipse/parsson/' # EPL 2.0
].freeze
+# Required attributions in final shaded JARs, not only in source NOTICE files.
+NOTICE_EXPECTATIONS = {
+ 'flink-cdc-pipeline-connector-doris' => ['The Netty Project', 'BoringSSL'],
+ 'flink-cdc-pipeline-connector-fluss' => [
+ 'Apache Fluss includes software developed for Orekit',
+ 'Apache Fluss includes Jackson, originally written by Tatu Saloranta.',
+ 'Jackson Core bundles a shaded copy of FastDoubleParser.',
+ 'The Netty Project'
+ ],
+ 'flink-cdc-pipeline-connector-iceberg' => [
+ 'Apache Iceberg includes code from Kite',
+ 'FastDoubleParser',
+ 'Nessie includes code from Apache Polaris'
+ ],
+ 'flink-cdc-pipeline-connector-maxcompute' => ['The Netty Project'],
+ 'flink-cdc-pipeline-connector-paimon' => ['FastDoubleParser', 'The Netty
Project'],
+ 'flink-cdc-pipeline-connector-starrocks' => ['The Netty Project'],
+ 'flink-sql-connector-tidb-cdc' => ['The Netty Project', 'BoringSSL'],
+ 'flink-sql-connector-vitess-cdc' => ['The Netty Project', 'BoringSSL'],
+ 'flink-cdc-pipeline-model-openai-compatible' => ['Public Suffix List']
+}.freeze
+
puts 'Start license check...'
# Extract Flink CDC revision number from global pom.xml
@@ -98,7 +120,11 @@ def traverse_module(path)
return if EXCLUDED_MODULES.include?(module_name)
jar_file = File.join path, 'target', "#{module_name}-#{REVISION_NUMBER}.jar"
- check_jar_license jar_file if File.exist? jar_file
+ if File.exist? jar_file
+ check_jar_license jar_file, module_name
+ elsif NOTICE_EXPECTATIONS.key?(module_name)
+ @notice_issues << "#{jar_file}: packaged JAR is missing"
+ end
File.read(File.join(path,
'pom.xml')).scan(%r{<module>(.*)</module>}).map(&:first).each do |submodule|
traverse_module File.join(path, submodule.to_s) unless submodule.nil?
@@ -106,11 +132,22 @@ def traverse_module(path)
end
@tainted_records = []
+@notice_issues = []
# Check license issues in given jar file
-def check_jar_license(jar_file)
+def check_jar_license(jar_file, module_name)
puts "Checking jar file #{jar_file}"
Zip::File.open(jar_file) do |jar|
+ notice_entry = jar.find_entry('META-INF/NOTICE')
+ if notice_entry.nil?
+ @notice_issues << "#{jar_file}: META-INF/NOTICE is missing"
+ else
+ notice =
notice_entry.get_input_stream.read.force_encoding('UTF-8').gsub(/\s+/, ' ')
+ NOTICE_EXPECTATIONS.fetch(module_name, []).each do |attribution|
+ @notice_issues << "#{jar_file}: missing #{attribution}" unless
notice.include?(attribution)
+ end
+ end
+
jar.filter { |e| e.ftype == :file }
.filter { |e|
!File.basename(e.name).downcase.end_with?(*BINARY_FILE_EXTENSIONS) }
.filter { |e| !File.basename(e.name).downcase.start_with? 'license',
'dependencies', 'notice', 'third-party' }
@@ -135,4 +172,10 @@ unless @tainted_records.empty?
abort 'See https://www.apache.org/legal/resolved.html for more details.'
end
+unless @notice_issues.empty?
+ puts "\nError: packaged JAR NOTICE is incomplete:"
+ puts @notice_issues.map { |issue| " -> #{issue}" }.join("\n")
+ abort 'Inspect META-INF/NOTICE in the final shaded JAR.'
+end
+
puts 'License check passed.'
diff --git a/tools/releasing/create_source_release.sh
b/tools/releasing/create_source_release.sh
index b2133b22c..561cde0c1 100755
--- a/tools/releasing/create_source_release.sh
+++ b/tools/releasing/create_source_release.sh
@@ -82,6 +82,27 @@ rsync -a \
. flink-cdc-${RELEASE_VERSION}
tar $TAR_OPTIONS -czf ${RELEASE_DIR}/flink-cdc-${RELEASE_VERSION}-src.tgz
flink-cdc-${RELEASE_VERSION}
+
+# Verify that the bundled documentation assets and their licenses are in the
archive.
+tar -tzf "${RELEASE_DIR}/flink-cdc-${RELEASE_VERSION}-src.tgz" >
"${RELEASE_DIR}/source-archive-contents"
+for bundled_file in \
+ LICENSE \
+ NOTICE \
+ docs/static/js/anchor.min.js \
+ docs/static/font-awesome/css/font-awesome.css \
+ docs/static/font-awesome/fonts/FontAwesome.otf \
+ docs/assets/github.css \
+ licenses/LICENSE.anchorjs \
+ licenses/LICENSE.font-awesome \
+ licenses/LICENSE.chroma; do
+ if ! grep -Fxq "flink-cdc-${RELEASE_VERSION}/${bundled_file}" \
+ "${RELEASE_DIR}/source-archive-contents"; then
+ echo "Source archive is missing ${bundled_file}"
+ exit 1
+ fi
+done
+rm "${RELEASE_DIR}/source-archive-contents"
+
gpg --armor --detach-sig ${RELEASE_DIR}/flink-cdc-${RELEASE_VERSION}-src.tgz
cd ${RELEASE_DIR}
${SHASUM} flink-cdc-${RELEASE_VERSION}-src.tgz >
flink-cdc-${RELEASE_VERSION}-src.tgz.sha512
@@ -90,4 +111,4 @@ rm -rf ${CLONE_DIR}
echo "Done. Source release package and signatures created under
${RELEASE_DIR}/."
-cd ${CURR_DIR}
\ No newline at end of file
+cd ${CURR_DIR}
