The GitHub Actions job "Check binary dependency licenses" on 
texera.git/chore/draft-binary-license has failed.
Run started by GitHub user bobbai00 (triggered by bobbai00).

Head commit for run:
f6e85b5c40780d015658fd7c8435ed614fd7ee8a / Jiadong Bai 
<[email protected]>
chore(license): track npm/python deps at name@version granularity

LICENSE-binary now lists each Python package as `<name>==<version>` and
each npm package as `<name>@<version>`, mirroring the per-jar format
already used for the JVM section. Version drift is surfaced by CI as
ADDED/STALE entries in any of the three ecosystems.

Sources of truth (all native package-manager output):

  - npm: a license-webpack-plugin instance registered in
    frontend/custom-webpack.config.js writes
    frontend/dist/3rdpartylicenses.json with {name, version, license}
    per bundled package — bundle-scoped (matches what ships in the
    texera-web-application Docker image), not node_modules-scoped.

  - python: `pip-licenses --format=csv` after `pip install -r ...`.

The check-binary-licenses workflow:

  - Replaces the old 3rdpartylicenses.txt consumer with the new JSON
    consumer.
  - Adds frontend/custom-webpack.config.js to its path-trigger list.
  - Tells pip-licenses to also ignore prettytable/wcwidth (pip-licenses's
    own runtime deps, not bundled).

Drive-by: adds `[email protected]` to LICENSE-binary's MIT npm sub-section. It is
the embedded Microsoft VS Code R-language extension shipped inside
@codingame/monaco-vscode-r-default-extension's resources/, alongside the
already-listed `java`, `python`, and `theme-defaults` siblings. Missing
from the original audit because R was scrubbed from Docker images
(PR #4385) but the Monaco R-syntax extension is still consumed by the
frontend.

Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>

Report URL: https://github.com/apache/texera/actions/runs/24950361194

With regards,
GitHub Actions via GitBox

Reply via email to