The GitHub Actions job "Check binary dependency licenses" on texera.git/chore/draft-binary-license has failed. Run started by GitHub user bobbai00 (triggered by bobbai00).
Head commit for run: 61417073df0d15557d993961943e3fd8842da62d / Jiadong Bai <[email protected]> chore(license): inline verbatim upstream NOTICEs surfaced by audit Following the same audit-driven pass that filled the per-dep license gap, NOTICE-binary now reproduces every substantive upstream META-INF/NOTICE the audit found uncovered. ASF Apache-2.0 section 4d requires preserving "the attribution notices contained within such NOTICE file"; the previous file relied on a hedge ("Individual bundled jars continue to carry their own META-INF/NOTICE files...") which is weaker than reproducing the substantive content directly. Changes: * APACHE SOFTWARE FOUNDATION PROJECTS WITH SUBSTANTIVE UPSTREAM NOTICES + Apache Iceberg block — preserves the Cloudera/Kite copyright that Iceberg's upstream NOTICE inlines. * APACHE SOFTWARE FOUNDATION PROJECTS WITH STANDARD NOTICES + Apache HTrace (Incubating) — was missing entirely. + Apache Iceberg one-liner — was missing entirely. * THIRD-PARTY APACHE-LICENSED WORKS WITH THEIR OWN NOTICES + Jackson core 2.18.6 verbatim NOTICE (FastDoubleParser shaded copy, fast_double_parser BSL, fast_float MIT, bigint BSD-2 — none of these were preserved by the previous shorter Jackson section). + Jackson modules / datatypes verbatim NOTICEs (annotations + databind, afterburner + blackbird, dataformat-yaml old + new, jaxb-annotations + no-ctor-deser, datatype-jdk8/jsr310 etc.). + Eclipse Jetty 11.0 (UnixCrypt + per-feature dependency listing — the existing Jetty section covers Jetty 9.4 only). + Apache Parquet supplementary notices for parquet-avro and parquet-jackson (Avro vendoring, Jackson vendoring). + R2DBC SPI section (was missing entirely). + Joda-Convert section (sibling to existing Joda-Time; preserves Google Guava code embedded in joda-convert's jar). * ECLIPSE PROJECTS — replaced the three one-liner stub entries (jakarta.ws.rs, jakarta.activation, jakarta.xml.bind) with verbatim inline NOTICEs for every Eclipse-project jar bundled: - Eclipse Jersey (containers, server, common, bean-validation) — preserves Jersey's vendored Bean Validation, Bootstrap, Guava, jQuery, Javassist, ASM, jakarta.inject, KineticJS, JSR-166, AOP Alliance, OSGi, W3.org attributions. - Eclipse GlassFish HK2 family. - Eclipse Jetty Servlet API (jakarta-servlet-api 5.0.2). - Jakarta XML Binding API. - Jakarta RESTful Web Services API. - Jakarta Expression Language API. - Jakarta Annotations API (2.1.1 and 3.0.0 each shipped a slightly different upstream NOTICE; both reproduced). - Jakarta Inject API. - Jakarta Activation (com.sun + jakarta). NOTICE-binary grows from 479 to 2167 lines. Each upstream NOTICE is introduced by a "From <jar>:META-INF/NOTICE" header so a reader can trace any block back to its source jar. Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]> Report URL: https://github.com/apache/texera/actions/runs/25031259394 With regards, GitHub Actions via GitBox
