This is an automated email from the ASF dual-hosted git repository.
sciabarracom pushed a commit to branch 0.9.0
in repository
https://gitbox.apache.org/repos/asf/openserverless-devcontainer.git
The following commit(s) were added to refs/heads/0.9.0 by this push:
new 72214e0 updated license and notice
72214e0 is described below
commit 72214e052384214ee6c318289a8b36951efd2165
Author: Michele Sciabarra <[email protected]>
AuthorDate: Sun Sep 13 06:58:25 2026 +0200
updated license and notice
---
.env.dist | 18 +++
.github/workflows/DISCLAIMER.md | 19 ++++
.licenserc.yaml | 6 -
LICENSE | 245 ++++++++++++++++++++++------------------
NOTICE | 192 +++++++++++++++++++------------
5 files changed, 291 insertions(+), 189 deletions(-)
diff --git a/.env.dist b/.env.dist
index 4681e43..9a812cc 100644
--- a/.env.dist
+++ b/.env.dist
@@ -1,3 +1,21 @@
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements. See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership. The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied. See the License for the
+# specific language governing permissions and limitations
+# under the License.
+#
+
# github user, used to derive the default local image name
GITHUB_USER=github: put here your github user
diff --git a/.github/workflows/DISCLAIMER.md b/.github/workflows/DISCLAIMER.md
index 69f7612..8a8445a 100644
--- a/.github/workflows/DISCLAIMER.md
+++ b/.github/workflows/DISCLAIMER.md
@@ -1,3 +1,22 @@
+<!--
+ ~ Licensed to the Apache Software Foundation (ASF) under one
+ ~ or more contributor license agreements. See the NOTICE file
+ ~ distributed with this work for additional information
+ ~ regarding copyright ownership. The ASF licenses this file
+ ~ to you under the Apache License, Version 2.0 (the
+ ~ "License"); you may not use this file except in compliance
+ ~ with the License. You may obtain a copy of the License at
+ ~
+ ~ http://www.apache.org/licenses/LICENSE-2.0
+ ~
+ ~ Unless required by applicable law or agreed to in writing,
+ ~ software distributed under the License is distributed on an
+ ~ "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ ~ KIND, either express or implied. See the License for the
+ ~ specific language governing permissions and limitations
+ ~ under the License.
+-->
+
**DISCLAIMER**
Apache OpenServerless is an effort undergoing incubation at The Apache
Software Foundation (ASF), sponsored by the Apache Incubator. Incubation is
required of all newly accepted projects until a further review indicates that
the infrastructure, communications, and decision making process have stabilized
in a manner consistent with other successful ASF projects. While incubation
status is not necessarily a reflection of the completeness or stability of the
code, it does indicate that the [...]
diff --git a/.licenserc.yaml b/.licenserc.yaml
index 569077a..69c5dc9 100644
--- a/.licenserc.yaml
+++ b/.licenserc.yaml
@@ -21,13 +21,7 @@ header:
copyright-owner: Apache Software Foundation
paths-ignore:
- - '.git-hooks/pre-commit'
- - '**/_*'
- 'LICENSE'
- 'NOTICE'
- 'DISCLAIMER'
- - '**/DISCLAIMER.md'
- WARN
- - '.env.dist'
- - '.gitattributes'
- - '**/.npmrc'
diff --git a/LICENSE b/LICENSE
index b91aaad..d731b97 100644
--- a/LICENSE
+++ b/LICENSE
@@ -201,115 +201,142 @@
See the License for the specific language governing permissions and
limitations under the License.
+---------------
+
+Apache OpenServerless (Incubating) itself is licensed under the Apache License,
+Version 2.0, reproduced above. The Apache release artifact is the SOURCE
+distribution: this Dockerfile and the files beside it.
+
+The container image built from that Dockerfile is a CONVENIENCE BINARY and
+bundles the third-party components listed below, each under its own license.
+Components whose licenses are not compatible with the Apache License 2.0 are
+enumerated in the WARN file distributed with this LICENSE. Refer to
+https://www.apache.org/legal/resolved.html for the ASF classification of these
+licenses.
+
+The complete texts of the licenses referenced below are distributed with each
+component inside the container image, in the package metadata directories of
+the respective package manager:
-==============================================================================
-BEGIN BUNDLED THIRD-PARTY SOFTWARE INVENTORY (container image)
-==============================================================================
-
-==============================================================================
-LICENSES OF BUNDLED THIRD-PARTY SOFTWARE
-Container image: apache/openserverless-devcontainer
-==============================================================================
-
-Apache OpenServerless itself is licensed under the Apache License,
-Version 2.0, reproduced above. The container image built from the
-Dockerfile beside this file additionally bundles the third-party
-components listed below, each under its own license.
-
-Refer to https://www.apache.org/legal/resolved.html for the ASF
-classification of these licenses. Components that are NOT compatible
-with the Apache License 2.0 are enumerated in the WARN file.
-
-------------------------------------------------------------------------------
-Summary by license
-------------------------------------------------------------------------------
-
-Apache-2.0
- Apache OpenServerless CLI (ops) (main)
-
-BSD-2-Clause AND others
- openssh-server ((Debian bookworm))
-
-BSD-derived (Supervisor License)
- supervisor ((Debian bookworm))
-
-GPL-2.0-or-later AND LGPL-2.1-or-later
- locales (glibc) ((Debian bookworm))
-
-GPL-3.0-or-later
- nano ((Debian bookworm))
-
-GPL-3.0-or-later OR BSD-2-Clause
- less ((Debian bookworm))
-
-ISC AND BSD-3-Clause
- sudo ((Debian bookworm))
-
-MIT
- Node.js (22)
- jq ((Debian bookworm))
- python3-virtualenv ((Debian bookworm))
- tini ((Debian bookworm))
-
-PSF-2.0
- python-is-python3 / python3 ((Debian bookworm))
-
-PostgreSQL License (BSD-like)
- postgresql-client-16 ((PGDG apt repo))
-
-mixed; see WARN
- (see the FROM line of the Dockerfile) (-)
-
-MIT-like (curl license)
- curl ((Debian bookworm))
-
-------------------------------------------------------------------------------
-Detail by component
-------------------------------------------------------------------------------
-
-Tools installed by the Dockerfile
----------------------------------
- Node.js (22) -- MIT
- Base image node:22.
- Apache OpenServerless CLI (ops) (main) -- Apache-2.0
- Installed from apache/openserverless-cli.
- less ((Debian bookworm)) -- GPL-3.0-or-later OR BSD-2-Clause
- *** SEE WARN ***
- sudo ((Debian bookworm)) -- ISC AND BSD-3-Clause
- jq ((Debian bookworm)) -- MIT
- nano ((Debian bookworm)) -- GPL-3.0-or-later
- *** SEE WARN ***
- python-is-python3 / python3 ((Debian bookworm)) -- PSF-2.0
- python3-virtualenv ((Debian bookworm)) -- MIT
- locales (glibc) ((Debian bookworm)) -- GPL-2.0-or-later AND LGPL-2.1-or-later
- *** SEE WARN ***
- postgresql-client-16 ((PGDG apt repo)) -- PostgreSQL License (BSD-like)
- openssh-server ((Debian bookworm)) -- BSD-2-Clause AND others
- tini ((Debian bookworm)) -- MIT
- supervisor ((Debian bookworm)) -- BSD-derived (Supervisor License)
- curl ((Debian bookworm)) -- MIT-like (curl license)
-
-Base operating system image
----------------------------
- (see the FROM line of the Dockerfile) (-) -- mixed; see WARN
- Operating-system components are supplied by the upstream base image and
are not
- redistributed by the ASF in source form.
-
-------------------------------------------------------------------------------
-Full license texts
-------------------------------------------------------------------------------
-
-The complete text of the Apache License 2.0 is reproduced at the top of
-this file. The complete texts of the other licenses referenced above are
-distributed with each component inside the container image, in the
-package metadata directories of the respective package manager:
-
- * Python packages: <site-packages>/<dist>.dist-info/ (LICENSE, METADATA)
- * Node.js packages: /node_modules/<pkg>/LICENSE
- * PHP packages: /phpAction/composer/vendor/<pkg>/LICENSE
- * Go modules: vendored module sources / pkg.go.dev
* Debian packages: /usr/share/doc/<pkg>/copyright
+ * Node.js packages: /usr/local/lib/node_modules/<pkg>/LICENSE
+ * Go modules: vendored module sources / pkg.go.dev
+
+---------------
+
+The container image contains the Apache OpenServerless CLI (ops), built from
+apache/openserverless-cli, which was released under an Apache 2.0 license.
+
+---------------
+
+The container image is based on the node:24-trixie image, which contains
+Node.js, released under an MIT license.
+
+Copyright Node.js contributors
+
+---------------
+
+The container image contains the Go toolchain output of the golang:1.25
+builder image. Go was released under a BSD-3-Clause license.
+
+Copyright (c) 2009 The Go Authors. All rights reserved.
+
+---------------
+
+The container image contains jq, which was released under an MIT license.
+
+Copyright (C) 2012 Stephen Dolan
+
+---------------
+
+The container image contains tini, which was released under an MIT license.
+
+Copyright (c) 2015 Thomas Orozco
+
+---------------
+
+The container image contains python3-virtualenv, which was released under an
+MIT license.
+
+Copyright (c) 2007 Ian Bicking and Contributors
+Copyright (c) 2009 Ian Bicking, The Open Planning Project
+Copyright (c) 2011-2016 The virtualenv developers
+Copyright (c) 2020-2024 The virtualenv developers
+
+---------------
+
+The container image contains curl, which was released under the curl license,
+an MIT/X derivative license.
+
+Copyright (c) 1996 - 2025, Daniel Stenberg, <[email protected]>, and many
+contributors.
+
+---------------
+
+The container image contains sudo, which was released under an ISC-style
+license, and contains code under a BSD-3-Clause license.
+
+Copyright (c) 1994-1996, 1998-2024 Todd C. Miller <[email protected]>
+
+---------------
+
+The container image contains openssh-server, which was released under a
+BSD-2-Clause license, and contains code under additional BSD-style licenses.
+
+Copyright (c) 1995 Tatu Ylonen <[email protected]>, Espoo, Finland
+Copyright (c) 1999-2024 OpenBSD project contributors
+
+---------------
+
+The container image contains supervisor, which was released under a
+BSD-derived license (the Supervisor license).
+
+Copyright (c) 2006-2024 Agendaless Consulting and Contributors
+
+---------------
+
+The container image contains postgresql-client-17, obtained from the PGDG apt
+repository, which was released under the PostgreSQL License, a BSD-like
+license.
+
+Portions Copyright (c) 1996-2025, PostgreSQL Global Development Group
+Portions Copyright (c) 1994, The Regents of the University of California
+
+---------------
+
+The container image contains python3 and python-is-python3, which were
+released under the Python Software Foundation License Version 2.
+
+Copyright (c) 2001-2025 Python Software Foundation. All rights reserved.
+
+---------------
+
+The container image contains less, which Debian ships under the
+GPL-3.0-or-later option of its dual GPL-3.0-or-later OR BSD-2-Clause license.
+This component is listed in the WARN file.
+
+Copyright (C) 1984-2025 Mark Nudelman
+
+---------------
+
+The container image contains nano, which was released under a
+GPL-3.0-or-later license. This component is listed in the WARN file.
+
+Copyright (C) 1999-2011, 2013-2025 Free Software Foundation, Inc.
+
+---------------
+
+The container image contains the locales package and the GNU C Library
+(glibc), which were released under GPL-2.0-or-later AND LGPL-2.1-or-later
+licenses. These are supplied by the upstream base image and are not
+redistributed by the ASF in source form. This component is listed in the
+WARN file.
+
+Copyright (C) 1991-2025 Free Software Foundation, Inc.
+
+---------------
-==============================================================================
-END BUNDLED THIRD-PARTY SOFTWARE INVENTORY
-==============================================================================
+The container image inherits further operating-system components from its
+upstream Debian trixie base image, under mixed licenses including GPL-2.0 and
+GPL-3.0. These components are supplied by the upstream base image and are not
+redistributed by the ASF in source form. They are disclosed in the WARN file.
diff --git a/NOTICE b/NOTICE
index bfad71b..70537a2 100644
--- a/NOTICE
+++ b/NOTICE
@@ -1,77 +1,121 @@
Apache OpenServerless (Incubating)
-Copyright 2024 The Apache Software Foundation
+Copyright 2024-2026 The Apache Software Foundation
This product includes software developed at
-The Apache Software Foundation (http://www.apache.org/).
-
-
-==============================================================================
-BEGIN BUNDLED THIRD-PARTY SOFTWARE INVENTORY (container image)
-==============================================================================
-
-------------------------------------------------------------------------------
-Container image: apache/openserverless-devcontainer
-------------------------------------------------------------------------------
-
-This image bundles third-party software. The components below are
-redistributed under the licenses recorded in the LICENSE file that
-accompanies this NOTICE. Components flagged '*** SEE WARN ***' are
-listed in the WARN file as incompatible with the Apache License 2.0.
-
-Tools installed by the Dockerfile
----------------------------------
- * Node.js (22)
- License: MIT
- Base image node:22.
- * Apache OpenServerless CLI (ops) (main)
- License: Apache-2.0
- Installed from apache/openserverless-cli.
- * less ((Debian bookworm))
- License: GPL-3.0-or-later OR BSD-2-Clause
- *** SEE WARN ***
- * sudo ((Debian bookworm))
- License: ISC AND BSD-3-Clause
- * jq ((Debian bookworm))
- License: MIT
- * nano ((Debian bookworm))
- License: GPL-3.0-or-later
- *** SEE WARN ***
- * python-is-python3 / python3 ((Debian bookworm))
- License: PSF-2.0
- * python3-virtualenv ((Debian bookworm))
- License: MIT
- * locales (glibc) ((Debian bookworm))
- License: GPL-2.0-or-later AND LGPL-2.1-or-later
- *** SEE WARN ***
- * postgresql-client-16 ((PGDG apt repo))
- License: PostgreSQL License (BSD-like)
- * openssh-server ((Debian bookworm))
- License: BSD-2-Clause AND others
- * tini ((Debian bookworm))
- License: MIT
- * supervisor ((Debian bookworm))
- License: BSD-derived (Supervisor License)
- * curl ((Debian bookworm))
- License: MIT-like (curl license)
-
-Base operating system image
----------------------------
- * (see the FROM line of the Dockerfile) (-)
- License: mixed; see WARN
- Operating-system components are supplied by the upstream base image and
are not
- redistributed by the ASF in source form.
-
-------------------------------------------------------------------------------
-Attribution required by bundled components
-------------------------------------------------------------------------------
-
-This product includes software developed by the Apache Software
-Foundation (http://www.apache.org/), including Apache OpenWhisk
-components and Apache-2.0 licensed libraries listed above.
-
-This product includes software developed by third parties under the
-MIT, BSD, ISC, PSF, MPL-2.0 and other licenses, as recorded in LICENSE.
-
-==============================================================================
-END BUNDLED THIRD-PARTY SOFTWARE INVENTORY
-==============================================================================
+The Apache Software Foundation (https://www.apache.org/).
+
+Apache OpenServerless is an effort undergoing incubation at The Apache
+Software Foundation (ASF), sponsored by the Apache Incubator. See the
+DISCLAIMER file distributed with this work.
+
+The Apache release artifact is the source distribution. The container image
+built from the Dockerfile beside this file is a convenience binary that
+bundles the third-party components attributed below; their licenses are
+recorded in the LICENSE file, and components incompatible with the Apache
+License, Version 2.0 are enumerated in the WARN file.
+
+---------------
+
+The container image contains the Apache OpenServerless CLI (ops), developed at
+The Apache Software Foundation, which was released under an Apache 2.0
+license.
+
+---------------
+
+The container image is based on the node:24-trixie image, which contains
+Node.js, released under an MIT license.
+
+Node.js
+Copyright Node.js contributors. All rights reserved.
+
+Node.js includes software developed at the OpenJS Foundation
+(https://openjsf.org/).
+
+---------------
+
+The container image is built with the golang:1.25 image. Go was released under
+a BSD-3-Clause license.
+
+Copyright (c) 2009 The Go Authors. All rights reserved.
+
+---------------
+
+The container image contains curl, which was released under the curl license,
+an MIT/X derivative license.
+
+Copyright (c) 1996 - 2025, Daniel Stenberg, <[email protected]>, and many
+contributors.
+
+---------------
+
+The container image contains sudo, which was released under an ISC-style
+license and contains code under a BSD-3-Clause license.
+
+Copyright (c) 1994-1996, 1998-2024 Todd C. Miller <[email protected]>
+
+This product includes software developed by the University of California,
+Berkeley and its contributors.
+
+---------------
+
+The container image contains openssh-server, which was released under a
+BSD-2-Clause license and contains code under additional BSD-style licenses.
+
+Copyright (c) 1995 Tatu Ylonen <[email protected]>, Espoo, Finland
+Copyright (c) 1999-2024 OpenBSD project contributors
+
+---------------
+
+The container image contains supervisor, which was released under a
+BSD-derived license.
+
+Supervisor
+Copyright (c) 2006-2024 Agendaless Consulting and Contributors
+
+---------------
+
+The container image contains postgresql-client-17, obtained from the PGDG apt
+repository, which was released under the PostgreSQL License, a BSD-like
+license.
+
+Portions Copyright (c) 1996-2025, PostgreSQL Global Development Group
+Portions Copyright (c) 1994, The Regents of the University of California
+
+---------------
+
+The container image contains python3 and python-is-python3, which were
+released under the Python Software Foundation License Version 2.
+
+Copyright (c) 2001-2025 Python Software Foundation. All rights reserved.
+
+---------------
+
+The container image contains jq, which was released under an MIT license.
+
+Copyright (C) 2012 Stephen Dolan
+
+---------------
+
+The container image contains tini, which was released under an MIT license.
+
+Copyright (c) 2015 Thomas Orozco
+
+---------------
+
+The container image contains python3-virtualenv, which was released under an
+MIT license.
+
+Copyright (c) 2007 Ian Bicking and Contributors
+Copyright (c) 2020-2024 The virtualenv developers
+
+---------------
+
+The container image contains less, nano and the GNU C Library (glibc), which
+were released under GPL and LGPL licenses, and inherits further
+operating-system components from its upstream Debian trixie base image under
+mixed licenses. These are disclosed in the WARN file and are not redistributed
+by the ASF in source form.
+
+Copyright (C) 1984-2025 Mark Nudelman (less)
+Copyright (C) 1999-2011, 2013-2025 Free Software Foundation, Inc. (nano)
+Copyright (C) 1991-2025 Free Software Foundation, Inc. (glibc)
