Answering to myself: yes, of course we need to list the licenses in the docker images and binaries derived by the sources. This is because the license applies to the binaries, but the source code generates and imports the libraries we use. So yes, Gerlando Dimino and Michele Manzani are now involved and analyzing sources and images (double check) to list all the licenses of all the components found.
I really hope this is the last thing and we can proceed to the release vote. -- Michele Sciabarrà - [email protected] - linkedin.com/in/msciab Apache OpenServerless committer - reddit.com/r/openserverless Apache OpenWhisk PMC member - Author Learning Apache OpenWhisk Michele Sciabarra | CTO m: +44 747 984 8388 e: [email protected] l: https://linkedin.com/in/msciab Nuvolaris Inc | 1209 Orange Street, 19801Wilmington DE - US On Thu, 3 Sept 2026 at 14:12, Michele Sciabarra <[email protected]> wrote: > > Do we need to do this now even if we do a source only release? > > > Michele Sciabarra | CTO > m: +44 747 984 8388 > e: [email protected] > l: https://linkedin.com/in/msciab > Nuvolaris Inc | 1209 Orange Street, 19801Wilmington DE - US > > > > Michele Sciabarra | CTO > m: +44 747 984 8388 > e: [email protected] > l: https://linkedin.com/in/msciab > Nuvolaris Inc | 1209 Orange Street, 19801Wilmington DE - US > > > > > On Thu, 3 Sept 2026 at 14:09, PJ Fanning <[email protected]> wrote: > > > > Hi, > > All Docker images and any other convenience binaries that you ship need to > > have a LICENSE and NOTICE - and ASF Incubator DISCLAIMER. > > > > The LICENSE needs to include the details of the 3rd party libs and other > > binaries (and their license details) that you have included in the Docker > > image. > > > > The NOTICE file needs to list any 3rd party libs and other binaries (and > > their notice details). > > > > This page specifies which licenses are allowed and which are not. > > https://www.apache.org/legal/resolved.html > > > > Have you been putting this together for your upcoming release?
