Hi, Note that MPL-2.0 is considered category B [1] and is fine to have as a dependency; it just can’t be included in a source release.
Kind Regards, Justin 1. https://www.apache.org/legal/resolved.html#category-b > On 22 May 2025, at 7:43 AM, Fokko Driesprong <fo...@apache.org> wrote: > > Hey everyone, > > I wanted to check the licenses, so I ran the scripts to generate them since > the DEPENDENCIES.rust.tsv files in the repo are empty (an example here > <https://github.com/apache/iceberg-rust/blob/main/crates/iceberg/DEPENDENCIES.rust.tsv>). > It also includes category B licenses: > > ➜ iceberg-rust git:(main) ✗ ./scripts/dependencies.py check > Checking dependencies of crates/iceberg > error[rejected]: failed to satisfy license requirements > ┌─ > registry+https://github.com/rust-lang/crates.io-index#webpki-roots@0.26.8:4:12 > │ > 4 │ license = "MPL-2.0" > │ ━━━━━━━ > │ │ > │ license expression retrieved via Cargo.toml `license` > │ rejected: license is not explicitly allowed > │ > ├ MPL-2.0 - Mozilla Public License 2.0: > ├ - OSI approved > ├ - FSF Free/Libre > ├ - Copyleft > ├ webpki-roots v0.26.8 > ├── hyper-rustls v0.27.5 > │ └── reqwest v0.12.12 > │ ├── iceberg v0.5.0 > │ │ └── iceberg-catalog-memory v0.5.0 > │ │ └── (dev) iceberg v0.5.0 (*) > │ └── opendal v0.53.0 > │ └── iceberg v0.5.0 (*) > └── reqwest v0.12.12 (*) > > Therefore, I think it would be good to also include the dependency list. I've > created the PR here <https://github.com/apache/iceberg-rust/pull/1363>. For > those that see the LGPL license in the list, this is for r-efi > <https://github.com/r-efi/r-efi>, which is a triple license, where we can > pick the most favorable one > <https://www.apache.org/legal/resolved.html#mutually-exclusive>. > > Kind regards, > Fokko > > Op wo 21 mei 2025 om 19:49 schreef Christian Thiel > <christian.t.b...@gmail.com <mailto:christian.t.b...@gmail.com>>: >> Thanks Kevin! >> +1 non-binding >> >> Checklist for reference: >> [x] Download links are valid. >> [x] Checksums and signatures. >> [x] LICENSE/NOTICE files exist >> [x] No unexpected binary files >> [x] All source files have ASF headers >> [x] Can compile from source >> [x] Doesn't break pipelines badly which are very dear to me >> >> On Wed, 21 May 2025 at 18:32, Zheng Hu <open...@gmail.com >> <mailto:open...@gmail.com>> wrote: >>> Thank Kevin for the work, Here is my result. >>> >>> +1 binding. >>> >>> Checklist for reference: >>> [x] Download links are valid. >>> [x] Checksums and signatures. >>> [x] LICENSE/NOTICE files exist >>> [x] No unexpected binary files >>> [x] All source files have ASF headers >>> [x] Can compile from source >>> >>> On Wed, May 21, 2025 at 8:37 AM NOTME ZE <st810918...@gmail.com >>> <mailto:st810918...@gmail.com>> wrote: >>>> Thank you Kevin for working on this! >>>> >>>> +1 non-binding >>>> >>>> - [x] Download links are valid. >>>> - [x] Checksums and signatures. >>>> - [x] LICENSE/NOTICE files exist >>>> - [x] No unexpected binary files >>>> - [x] All source files have ASF headers >>>> - [x] Can compile from source >>>> >>>> Xuanwo <xua...@apache.org <mailto:xua...@apache.org>> 于2025年5月21日周三 >>>> 10:59写道： >>>>> Thank you Kevin for working on this! >>>>> >>>>> +1 non-binding >>>>> >>>>> - [x] Download links are valid. >>>>> - [x] Checksums and signatures. >>>>> - [x] LICENSE/NOTICE files exist >>>>> - [x] No unexpected binary files >>>>> - [x] All source files have ASF headers >>>>> - [x] Can compile from source >>>>> >>>>> Tested iceberg and iceberg-rest. >>>>> >>>>> On Wed, May 21, 2025, at 01:24, Kevin Liu wrote: >>>>>> +1 (non-binding) >>>>>> >>>>>> [x] Download links are valid. >>>>>> [x] Checksums and signatures. >>>>>> [x] LICENSE/NOTICE files exist >>>>>> [x] No unexpected binary files >>>>>> [x] All source files have ASF headers >>>>>> [x] Can compile from source >>>>>> >>>>>> Ran `./scripts/verify.py` >>>>>> Tested pyiceberg-core against pyiceberg >>>>>> >>>>>> Best, >>>>>> Kevin Liu >>>>>> >>>>>> On Tue, May 20, 2025 at 8:28 AM Kevin Liu <kevinjq...@apache.org >>>>>> <mailto:kevinjq...@apache.org>> wrote: >>>>>> Hello Apache Iceberg Rust Community, >>>>>> >>>>>> This is a call for a vote to release Apache Iceberg rust version 0.5.0. >>>>>> The tag to be voted on is v0.5.0-rc.1. >>>>>> >>>>>> The release candidate: >>>>>> https://dist.apache.org/repos/dist/dev/iceberg/apache-iceberg-rust-0.5.0-rc.1/ >>>>>> >>>>>> Keys to verify the release candidate: >>>>>> https://downloads.apache.org/iceberg/KEYS >>>>>> >>>>>> Git tag for the release: >>>>>> https://github.com/apache/iceberg-rust/releases/tag/v0.5.0-rc.1 >>>>>> >>>>>> Please download, verify, and test. >>>>>> >>>>>> The VOTE will be open for at least 72 hours and until the necessary >>>>>> number of votes are reached. >>>>>> [ ] +1 approve >>>>>> [ ] +0 no opinion >>>>>> [ ] -1 disapprove with the reason >>>>>> >>>>>> To learn more about Apache Iceberg, please see >>>>>> https://rust.iceberg.apache.org/ >>>>>> >>>>>> Checklist for reference: >>>>>> [ ] Download links are valid. >>>>>> [ ] Checksums and signatures. >>>>>> [ ] LICENSE/NOTICE files exist >>>>>> [ ] No unexpected binary files >>>>>> [ ] All source files have ASF headers >>>>>> [ ] Can compile from source >>>>>> >>>>>> More detailed checklist please refer to: >>>>>> https://github.com/apache/iceberg-rust/tree/main/scripts >>>>>> >>>>>> To compile from source, please refer to: >>>>>> https://github.com/apache/iceberg-rust/blob/main/CONTRIBUTING.md >>>>>> >>>>>> Here is a Python script in release to help you verify the release >>>>>> candidate: >>>>>> ./scripts/verify.py >>>>>> >>>>>> Best, >>>>>> Kevin Liu >>>>> >>>>> Xuanwo >>>>> >>>>> https://xuanwo.io/ >>>>>
