IIRC, the findbugs-annotation artifact is dubious at best in terms of
licensing. I think the "intent" was that it was compatibly licensed, but
the artifacts in Maven totally had it mislabeled.
Not something that needs to block your release now, but you should be
taking this up to make sure are I want y'all to graduate soon :)
On 2/14/18 11:29 AM, Jeff Dasch wrote:
I just dug through some emails and we did identify this in 3.2.11-RC2. We
had a number of other licensing issues on that RC so it is not clear to me
if this particular finding got dropped, or was determined to be a
non-issue. Regardless, this same issue does affect the 3.2.11 release.
On Wed, Feb 14, 2018 at 10:57 AM, Puja Valiyil <[email protected]> wrote:
I’m confused because that project was in our previous release. Didn’t we
upgrade the version of giraph to fix this or am I misremembering?
Sent from my iPhone
On Feb 14, 2018, at 10:37 AM, Jeff Dasch <[email protected]> wrote:
Again, not sure if this license thing is a blocker. But if it is, I put
up
PR-274 as a fix: https://github.com/apache/incubator-rya/pull/274
On Tue, Feb 13, 2018 at 4:37 PM, Jeff Dasch <[email protected]> wrote:
I'm not voting yet, but I did run a license check and got a hit on this:
(GNU Lesser Public License) FindBugs-Annotations
(com.google.code.findbugs:annotations:2.0.2 -
http://findbugs.sourceforge.net/)
which comes from Apache Giraph
[INFO] org.apache.rya:rya.giraph:jar:3.2.12-incubating
[INFO] +- org.apache.giraph:giraph-core:jar:1.2.0:compile
[INFO] | +- com.google.code.findbugs:annotations:jar:2.0.2:compile
I'm pretty sure we ran into this during the last release. Are we still
good to go on this RC, or do we need to cut a new one that has a giraph
profile?
On Mon, Feb 12, 2018 at 8:51 PM, Adina Crainiceanu <[email protected]>
wrote:
Rya community,
I am pleased to be calling this vote for the source release of Apache
Rya
(Incubating), version 3.2.12.
The source zip, including signatures, digests, etc. can be found at:
https://dist.apache.org/repos/dist/dev/incubator/rya/rya-
incubating-3.2.12-rc1/
Ancillary artifacts such as poms, jars, wars, etc. can be found here:
https://repository.apache.org/content/repositories/
orgapacherya-1009/org/apache/rya/
The Git tag is rya-incubating-3.2.12-rc1
The Git commit ID is e9ecf7fae76e308cfc0d90684ce684493482266c
https://git-wip-us.apache.org/repos/asf?p=incubator-rya.git;
a=commit;h=e9ecf7fae76e308cfc0d90684ce684493482266c
Checksums of rya-project-3.2.12-source-release.zip:
SHA512:8059adff3a264cdcc85edb8ab1c820d87d4e2adbdfd4eebfcd7d2
7b9a3c8c2af8cd09cb39b91ccb5170fe37159b1360078ef8e61321e7f6ca
e6141442bbf8dda
SHA1: 64296d86923dae11294dcff0719cfcb9522a744d
MD5: 9c55ae7f811afaa147ebb7f652543620
Release artifacts are signed with the following key:
https://people.apache.org/keys/committer/adina.asc
KEYS file available here:
https://dist.apache.org/repos/dist/release/incubator/rya/KEYS
Issues that were closed/resolved for this release are here:
https://issues.apache.org/jira/secure/ReleaseNote.jspa?
projectId=12319020&version=12341570
The vote will be open for at least 72 hours until end of Thursday,
February
15, 2018 ET.
Please download the release candidate and evaluate the necessary items
including checking hashes, signatures, build from source, and test.
Then
please vote:
[ ] +1 Release this package as rya-project-3.2.12
[ ] +0 no opinion
[ ] -1 Do not release this package because because...
Thank you,
Adina
--
Dr. Adina Crainiceanu
Associate Professor
Computer Science Department
United States Naval Academy
410-293-6822 <(410)%20293-6822>
[email protected]
http://www.usna.edu/Users/cs/adina/
