aglinxinyuan opened a new issue, #8296:
URL: https://github.com/apache/texera/issues/8296
### What happened?
`build / pyamber (ubuntu-latest, 3.12)` fails repo-wide at the step *Check
installed Python packages against per-module LICENSE-binary files*. A new
transitive dependency is in the environment with no bullet in
`amber/LICENSE-binary-python`:
```
NEW Python packages not claimed by LICENSE-binary:
+ cloudpickle==3.1.2 (license: BSD License) → add to
amber/LICENSE-binary-python
```
That single line is the failure. The long `~ DRIFT (transitive,
informational)` list in the same log is not — PR runs pass
`--ignore-transitive-version`, and the nightly exact-match check on main
refreshes those.
**Where it came from.** `joblib` stopped vendoring cloudpickle and started
declaring it, per PyPI metadata:
| | `requires_dist` | mentions cloudpickle |
| --- | --- | --- |
| `joblib==1.5.3` | 0 entries | no |
| `joblib==1.6.0` | 24 entries | `cloudpickle>=3.0` |
The chain is `scikit-learn` (amber/operator-requirements.txt) → `joblib` →
`cloudpickle`. Nothing in this repository changed; joblib 1.6.0 was published
and the unpinned transitive resolve picked it up.
**Time-based, not PR-based.** Open PRs built before the release are green
and ones built after are red:
| run created (UTC, 2026-08-31) | pyamber 3.12 |
| --- | --- |
| 08:39 (#8282), 08:49 (#8286) | pass |
| 12:55 (#7703) | fail |
`regex` also moved to `2026.8.31` in that window, which dates the batch.
**Collateral.** The check runs only on the 3.12 matrix entry (skipped on
3.11 and 3.13), and fail-fast then cancels 3.13's `Test with pytest`. A run
therefore shows three reds for one cause; only the 3.12 license step is real.
### How to reproduce?
Any PR whose CI runs after joblib 1.6.0 hit PyPI on 2026-08-31:
```
pip install -r amber/requirements.txt -r amber/operator-requirements.txt
pip-licenses --format=csv --ignore-packages pip-licenses prettytable wcwidth
> /tmp/pip-licenses.csv
./bin/licensing/check_binary_deps.py --ignore-transitive-version python
/tmp/pip-licenses.csv
```
### Version/Branch
1.3.0-incubating-SNAPSHOT (main)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
