For the record I don't think we're actually using pillow at the moment but have an open PR with that dependency.
Max On Mon, Aug 12, 2019 at 1:13 PM Charles Givre <[email protected]> wrote: > Apache legal determined that PIL is a CatA license and thus may be > included in Apache projects. > > Sent from my iPhone > > > On Aug 12, 2019, at 16:04, Bolke de Bruin <[email protected]> wrote: > > > > Is the PIL check still required? > > > > Verstuurd vanaf mijn iPad > > > >> Op 7 aug. 2019 om 22:22 heeft Maxime Beauchemin < > [email protected]> het volgende geschreven: > >> > >> I'm integrating the FOSSA CLI here: > >> https://github.com/apache/incubator-superset/pull/7999 > >> > >> Once it runs once it looks like it's possible to set up watch branches. > I > >> added `master` there so it should stay in sync. > >> > https://app.fossa.com/projects/custom%2B11342%2Fgit%40github.com%3Aapache%2Fincubator-superset.git/refs/branch/master/b380879c41e785efbaa155a5b20254f619f08093 > >> > >> Max > >> > >> On Mon, Aug 5, 2019 at 9:30 AM Maxime Beauchemin < > [email protected]> > >> wrote: > >> > >>> Here's the INFRA ticket for FOSSA: > >>> https://issues.apache.org/jira/browse/INFRA-18719 > >>> Comment from ASF Infra: "Unfortunately, this requires permissions we > can't > >>> allow, namely repo:write and webhook/service:write" > >>> > >>> The CLI is probably the best path forward. > >>> > >>> Max > >>> > >>>> On Sun, Aug 4, 2019 at 12:19 AM Bolke de Bruin <[email protected]> > wrote: > >>>> > >>>> Hi Max, > >>>> > >>>> Let me see if I can help with the trademark stuff and with legal for > PIL. > >>>> This will be after the 12th as I'm traveling without a real keyboard > ;-). > >>>> > >>>> BTW fossa says they only need write permissions to private repo's on > >>>> GitHub. Did you check that? INFRA loves very specific how-to's they > might > >>>> have checked the wrong docs ... As an alternative fossa also has a > command > >>>> line tool you could integrate with Travis: > >>>> https://docs.fossa.com/docs/importing-a-project > >>>> > >>>> B. > >>>> > >>>> Sent from my iPhone > >>>> > >>>>> On 3 Aug 2019, at 01:18, Maxime Beauchemin < > [email protected]> > >>>> wrote: > >>>>> > >>>>> Sounds good, if someone can identify how to validate / invalidate the > >>>> PIL > >>>>> license for pillow with the ASF that'd be helpful (starting a thread > >>>> with > >>>>> legal@? jira ticket with legal-discuss?). > >>>>> > >>>>> Also if someone could do or coordinate the trademark search > (required to > >>>>> graduate out of incubation) that'd be AMAZING. That was my attempt at > >>>> it: > >>>>> https://issues.apache.org/jira/browse/PODLINGNAMESEARCH-124 > >>>>> > >>>>> More info about it here: > >>>>> https://incubator.apache.org/guides/names.html > >>>>> > >>>>> > >>>>> > >>>>>> On Fri, Aug 2, 2019 at 12:57 PM Charles Givre <[email protected]> > >>>> wrote: > >>>>>> > >>>>>> Hi Maxime > >>>>>> I’m PMC Chair for Apache Drill and would love to help out with > >>>> automating > >>>>>> the release process. I’m at a conference next week but can we talk > >>>> after > >>>>>> that? > >>>>>> > >>>>>> Sent from my iPhone > >>>>>> > >>>>>>>> On Aug 2, 2019, at 15:37, Maxime Beauchemin < > >>>> [email protected]> > >>>>>>> wrote: > >>>>>>> > >>>>>>> Hi all, > >>>>>>> > >>>>>>> Let's push towards our first ASF release. We've been stuck for a > long > >>>>>> time > >>>>>>> now and it's hurting the community. > >>>>>>> > >>>>>>> I've done a fair amount of work in that direction (most notably > here > >>>>>>> https://github.com/apache/incubator-superset/pull/7539), and I'm > >>>> trying > >>>>>> to > >>>>>>> capture the last few blockers here: > >>>>>>> https://github.com/apache/incubator-superset/issues/7974 > >>>>>>> > >>>>>>> Using FOSSA > >>>>>>> < > >>>>>> > >>>> > https://app.fossa.com/projects/git%2Bgithub.com%2Fmistercrunch%2Fsuperset/refs/branch/master/cbac428b28ed3a20dcc253030269c9c9d60e3f5c/issues/licensing?filter=policy_flag&revisionScanId=872239 > >>>>>>> > >>>>>>> has been very helpful to sort out licenses, but we've been denied > >>>> setting > >>>>>>> it up on the repo by ASF-infra. For now I'm thinking we can run it > >>>>>> manually > >>>>>>> on forks when crafting a release. From my understanding, the last > >>>> license > >>>>>>> to clear is PIL for python's Pillow lib. Or we could make the dep > >>>>>> optional > >>>>>>> somehow. > >>>>>>> > >>>>>>> I'd love to get help around automating / facilitating the release > >>>>>> process, > >>>>>>> and I'm even contemplating compensating someone who could "own it" > and > >>>>>> take > >>>>>>> this on regularly, if necessary. > >>>>>>> > >>>>>>> Any volunteers!? > >>>>>>> > >>>>>>> Max > >>>>>> > >>>> > >>> >
