Josh, Can you please log a JIRA case for the findbugs issue? It doesn't look that sketchy to me, but let's discuss on the JIRA case.
On Wed, Jan 4, 2017 at 12:03 PM, Josh Elser <[email protected]> wrote: > +1 (binding) > > The only thing of concern that I ran into was that we are depending on > com.google.code.findbugs:jsr305 for the javax.annotations.* annotations. > This artifact is, for lack of a better way to say it, "sketchy". Whether > this artifact is GPL or ASLv2 licensed is murky at best. > > It's a pretty easy change to switch over to using > com.github.stephenc.findbugs:findbugs-annotations (which is a clean-room > impl of the same annotations and clearly licensed) and then change some > package names. I'm hacking together now and will throw it up on JIRA soon. I > don't think this needs to block 1.11.0. > > The normal list of things look good (xsums, sigs, release notes, etc). I've > also sent an ask over to the Druid community as they had pinged me last week > about some issues with Jackson. They *should* be resolved with > calcite-1.11.0 using avatica-1.9.0, but I'm hoping one of them can > proactively verify that this is indeed fixed before the release. > > - Josh > > > Julian Hyde wrote: >> >> Hi all, >> >> I have created a build for Apache Calcite 1.11.0, release candidate 0. >> >> Thanks to everyone who has contributed to this release. >> You can read the release notes here: >> https://github.com/apache/calcite/blob/branch-1.11/site/_docs/history.md >> >> The commit to be voted upon: >> >> http://git-wip-us.apache.org/repos/asf/calcite/commit/f8ba670de4e283d1532f288de53fdb67fa4dea67 >> >> Its hash is f8ba670de4e283d1532f288de53fdb67fa4dea67. >> >> The artifacts to be voted on are located here: >> https://dist.apache.org/repos/dist/dev/calcite/apache-calcite-1.11.0-rc0 >> >> The hashes of the artifacts are as follows: >> apache-calcite-1.11.0-src.tar.gz: MD5 = 88 FF 46 FC 13 A6 AE 98 BB 53 >> 7D 8C >> 24 73 D7 12 >> apache-calcite-1.11.0-src.tar.gz: SHA1 = 7CDE F906 0665 44F4 6CCA 4021 >> D515 >> 935A 6243 A869 >> apache-calcite-1.11.0-src.tar.gz: RMD160 = 0783 C9BD 5397 B045 45AB F750 >> 7541 >> 611F A78A D31C >> apache-calcite-1.11.0-src.tar.gz: SHA224 = 024B9857 29EA0FCD 0315E10C >> C75DD1F1 >> A50A1611 93ED3577 C91F5E3A >> apache-calcite-1.11.0-src.tar.gz: SHA256 = 10976E10 3C420300 AFC7AD83 >> 810755CA >> 6DE31081 DDFB3325 7721A204 >> ACDA0D26 >> apache-calcite-1.11.0-src.tar.gz: SHA384 = 178FC2CC 9064A51B 30AE7454 >> BA7A2507 >> 7A555E05 CB758FE0 642C4877 >> 622BE539 >> DAF7BCC2 CB9D2244 335FF0C7 >> 5513DA7B >> apache-calcite-1.11.0-src.tar.gz: SHA512 = E539EE3C 39DF3358 DABC4216 >> 861C88D3 >> 4F7030F3 34C7D759 21CC47B9 >> 8D4E5B09 >> 124AEA8D F5AC3B3D 29BFAADB >> A027102C >> 795F0DAF 778AFAC2 93F1D902 >> E2D62B2A >> apache-calcite-1.11.0-src.zip: MD5 = F0 FD C7 7F A0 32 E4 95 E3 E5 3D >> 47 B7 >> B2 C4 8D >> apache-calcite-1.11.0-src.zip: SHA1 = 1347 67F0 1D70 4AB9 FBB2 7EEF >> 61F1 1A8A >> 86E9 E26B >> apache-calcite-1.11.0-src.zip: RMD160 = EE4D 5C2F 4396 2758 9DF0 C5CA >> 961A 0631 >> 64A8 E060 >> apache-calcite-1.11.0-src.zip: SHA224 = 28A18665 3695592E A15C2CF1 >> 0A684A15 >> D5A53243 CB712249 FDBEBF65 >> apache-calcite-1.11.0-src.zip: SHA256 = 7AEF77DE EF34612D 3AA6BF72 >> F02163A2 >> D8808658 CAB8980B B35D454D >> AC3A5BB7 >> apache-calcite-1.11.0-src.zip: SHA384 = E6EDFAFD 8E2C55B9 9F19B75F >> F276A2AF >> 82E4DC6B 8788D143 BAB42CEC >> D029ACD1 >> E315C857 9645DF30 E41DEA8D >> 8A2767AA >> apache-calcite-1.11.0-src.zip: SHA512 = F2BEEBB4 649DAA40 B73EBE51 >> D22242D8 >> 6250B27E 94F4C100 5915E6D5 >> 8A2EF1A5 >> 1BFBB37E C1670D68 C0427FB4 >> 85785CE4 >> 504BC1A5 DFEFE2EE 288323C7 >> DCD5DEF4 >> >> A staged Maven repository is available for review at: >> https://repository.apache.org/content/repositories/orgapachecalcite-1030 >> >> Release artifacts are signed with the following key: >> https://people.apache.org/keys/committer/jhyde.asc >> >> Please vote on releasing this package as Apache Calcite 1.11.0. >> >> The vote is open for the next 72 hours and passes if a majority of >> at least three +1 PMC votes are cast. >> >> [ ] +1 Release this package as Apache Calcite 1.11.0 >> [ ] 0 I don't feel strongly about it, but I'm okay with the release >> [ ] -1 Do not release this package because... >> >> >> Here is my vote: >> >> +1 (binding) >> >> Julian
