[jira] [Comment Edited] (CASSANDRA-18969) Pre-release required legal changes for cassandra-java-driver
[
https://issues.apache.org/jira/browse/CASSANDRA-18969?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17785375#comment-17785375
]
Henry Hughes edited comment on CASSANDRA-18969 at 11/13/23 6:07 AM:
{quote}are there any releases that bundle dependencies (like shaded jars
published to maven central) ?{quote}
Yes one of the published artifacts is
[java-driver-core-shaded|https://central.sonatype.com/artifact/com.datastax.oss/java-driver-core-shaded]
which includes shaded versions of [netty and
jackson|https://github.com/apache/cassandra-java-driver/blob/4.x/core-shaded/pom.xml#L152],
jackson doesn't have a NOTICE file but netty has [a pretty long
one|https://github.com/netty/netty/blob/4.1/NOTICE.txt].
There is also a dependency on
[java-driver-shaded-guava|https://github.com/datastax/java-driver-shaded-guava],
but this was not part of the donation so may be out of scope for this ticket.
was (Author: JIRAUSER301149):
{quote}are there any releases that bundle dependencies (like shaded jars
published to maven central) ?{quote}
Yes there is
[java-driver-core-shaded|https://central.sonatype.com/artifact/com.datastax.oss/java-driver-core-shaded]
which includes shaded versions of [netty and
jackson|https://github.com/apache/cassandra-java-driver/blob/4.x/core-shaded/pom.xml#L152],
jackson doesn't have a NOTICE file but netty has [a pretty long
one|https://github.com/netty/netty/blob/4.1/NOTICE.txt].
There is also a dependency on
[java-driver-shaded-guava|https://github.com/datastax/java-driver-shaded-guava],
but this was not part of the donation so may be out of scope for this ticket.
> Pre-release required legal changes for cassandra-java-driver
>
>
> Key: CASSANDRA-18969
> URL: https://issues.apache.org/jira/browse/CASSANDRA-18969
> Project: Cassandra
> Issue Type: Sub-task
> Components: Client/java-driver
>Reporter: Michael Semb Wever
>Priority: Urgent
> Time Spent: 15h 50m
> Remaining Estimate: 0h
>
> TODO
> * there is still code copyrighted to others that isn't mentioned in LICENSE
> (e.g. ci/install-jdk.sh )
> * "© DataStax" still appears in the README
> * -spotbugs is LGPL, in 4.x, and not correctly made provided scope-
> * add any BSD/MIT deps to LICENCE
> * -ensure copyright headers are on all files, use rat plugin-
> * ensure NOTICE propagates NOTICES
> In short…
> {quote}
> LICENSE must contain the ASL, plus references to all code that includes
> someone else's copyright, and all BSD and MIT dependencies (including
> transitive).
> NOTICE must the standard header, plus the shorten content of any NOTICE file
> (minus its header) found in any ASL dependency (including transitive).
> {quote}
> These things must be done before a release.
> Cat X deps we included as build tool by using scope provided we should put a
> test in to ensure they work at runtime without the dep doesn't regress in the
> future.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
-
To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org
For additional commands, e-mail: commits-h...@cassandra.apache.org
[jira] [Commented] (CASSANDRA-18969) Pre-release required legal changes for cassandra-java-driver
[
https://issues.apache.org/jira/browse/CASSANDRA-18969?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17785375#comment-17785375
]
Henry Hughes commented on CASSANDRA-18969:
--
{quote}are there any releases that bundle dependencies (like shaded jars
published to maven central) ?{quote}
Yes there is
[java-driver-core-shaded|https://central.sonatype.com/artifact/com.datastax.oss/java-driver-core-shaded]
which includes shaded versions of [netty and
jackson|https://github.com/apache/cassandra-java-driver/blob/4.x/core-shaded/pom.xml#L152],
jackson doesn't have a NOTICE file but netty has [a pretty long
one|https://github.com/netty/netty/blob/4.1/NOTICE.txt].
There is also a dependency on
[java-driver-shaded-guava|https://github.com/datastax/java-driver-shaded-guava],
but this was not part of the donation so may be out of scope for this ticket.
> Pre-release required legal changes for cassandra-java-driver
>
>
> Key: CASSANDRA-18969
> URL: https://issues.apache.org/jira/browse/CASSANDRA-18969
> Project: Cassandra
> Issue Type: Sub-task
> Components: Client/java-driver
>Reporter: Michael Semb Wever
>Priority: Urgent
> Time Spent: 15h 50m
> Remaining Estimate: 0h
>
> TODO
> * there is still code copyrighted to others that isn't mentioned in LICENSE
> (e.g. ci/install-jdk.sh )
> * "© DataStax" still appears in the README
> * -spotbugs is LGPL, in 4.x, and not correctly made provided scope-
> * add any BSD/MIT deps to LICENCE
> * -ensure copyright headers are on all files, use rat plugin-
> * ensure NOTICE propagates NOTICES
> In short…
> {quote}
> LICENSE must contain the ASL, plus references to all code that includes
> someone else's copyright, and all BSD and MIT dependencies (including
> transitive).
> NOTICE must the standard header, plus the shorten content of any NOTICE file
> (minus its header) found in any ASL dependency (including transitive).
> {quote}
> These things must be done before a release.
> Cat X deps we included as build tool by using scope provided we should put a
> test in to ensure they work at runtime without the dep doesn't regress in the
> future.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
-
To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org
For additional commands, e-mail: commits-h...@cassandra.apache.org
[jira] [Commented] (CASSANDRA-18969) Pre-release required legal changes for cassandra-java-driver
[ https://issues.apache.org/jira/browse/CASSANDRA-18969?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17782302#comment-17782302 ] Henry Hughes commented on CASSANDRA-18969: -- https://github.com/apache/cassandra-java-driver/pull/1741 is ready for review. This change moves spotbugs (and similar JCIP-annotaitons) to the provided scope. It includes tests that verify these jars, and a few others such as graal-sdk (also provided) and TinkerPop (optional) etc, are not pulled in when depending on java-driver's published jars. > Pre-release required legal changes for cassandra-java-driver > > > Key: CASSANDRA-18969 > URL: https://issues.apache.org/jira/browse/CASSANDRA-18969 > Project: Cassandra > Issue Type: Sub-task > Components: Build >Reporter: Michael Semb Wever >Priority: Urgent > Time Spent: 20m > Remaining Estimate: 0h > > TODO > * there is still code copyrighted to others that isn't mentioned in > NOTICE.txt (e.g. ci/install-jdk.sh ) > * "© DataStax" still appears in the README > * spotbugs is LGPL, in 4.x, and not correctly made provided scope > * add any BSD/MIT deps to LICENCE > * ensure copyright headers are on all files, use rat plugin > These things must be done before a release. > Cat X deps we included as build tool by using scope provided we should put a > test in to ensure they work at runtime without the dep doesn't regress in the > future. -- This message was sent by Atlassian Jira (v8.20.10#820010) - To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org For additional commands, e-mail: commits-h...@cassandra.apache.org
[jira] [Commented] (CASSANDRA-18969) Pre-release required legal changes for cassandra-java-driver
[ https://issues.apache.org/jira/browse/CASSANDRA-18969?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17782181#comment-17782181 ] Henry Hughes commented on CASSANDRA-18969: -- Despite being in `provided` scope, both `graal-sdk` and `spotbugs` do not need to be provided by developers at compile-time or runtime in order for java-driver to function correctly. I have a [change|[https://github.com/apache/cassandra-java-driver/pull/1741]] in progress to move `spotbugs` to `provided` scope and an working on adding a test to assert we're not including either of these deps when projects depend on java-driver. > Pre-release required legal changes for cassandra-java-driver > > > Key: CASSANDRA-18969 > URL: https://issues.apache.org/jira/browse/CASSANDRA-18969 > Project: Cassandra > Issue Type: Sub-task > Components: Build >Reporter: Michael Semb Wever >Priority: Urgent > Time Spent: 20m > Remaining Estimate: 0h > > TODO > * there is still code copyrighted to others that isn't mentioned in > NOTICE.txt (e.g. ci/install-jdk.sh ) > * "© DataStax" still appears in the README > * spotbugs is LGPL, in 4.x, and not correctly made provided scope > * add any BSD/MIT deps to LICENCE > * ensure copyright headers are on all files, use rat plugin > These things must be done before a release. > Cat X deps we included as build tool by using scope provided we should put a > test in to ensure they work at runtime without the dep doesn't regress in the > future. -- This message was sent by Atlassian Jira (v8.20.10#820010) - To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org For additional commands, e-mail: commits-h...@cassandra.apache.org
[jira] [Comment Edited] (CASSANDRA-18969) Pre-release required legal changes for cassandra-java-driver
[ https://issues.apache.org/jira/browse/CASSANDRA-18969?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17782181#comment-17782181 ] Henry Hughes edited comment on CASSANDRA-18969 at 11/2/23 2:58 PM: --- Despite being in `provided` scope, both `graal-sdk` and `spotbugs` do not need to be provided by developers at compile-time or runtime in order for java-driver to function correctly. I have a [change|[https://github.com/apache/cassandra-java-driver/pull/1741]] in progress to move `spotbugs` to `provided` scope and an working on adding a test to assert we're not including either of these deps when projects depend on java-driver. was (Author: JIRAUSER301149): Despite being in `provided` scope, both `graal-sdk` and `spotbugs` do not need to be provided by developers at compile-time or runtime in order for java-driver to function correctly. I have a [change|[https://github.com/apache/cassandra-java-driver/pull/1741]] in progress to move `spotbugs` to `provided` scope and an working on adding a test to assert we're not including either of these deps when projects depend on java-driver. > Pre-release required legal changes for cassandra-java-driver > > > Key: CASSANDRA-18969 > URL: https://issues.apache.org/jira/browse/CASSANDRA-18969 > Project: Cassandra > Issue Type: Sub-task > Components: Build >Reporter: Michael Semb Wever >Priority: Urgent > Time Spent: 20m > Remaining Estimate: 0h > > TODO > * there is still code copyrighted to others that isn't mentioned in > NOTICE.txt (e.g. ci/install-jdk.sh ) > * "© DataStax" still appears in the README > * spotbugs is LGPL, in 4.x, and not correctly made provided scope > * add any BSD/MIT deps to LICENCE > * ensure copyright headers are on all files, use rat plugin > These things must be done before a release. > Cat X deps we included as build tool by using scope provided we should put a > test in to ensure they work at runtime without the dep doesn't regress in the > future. -- This message was sent by Atlassian Jira (v8.20.10#820010) - To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org For additional commands, e-mail: commits-h...@cassandra.apache.org
[jira] [Commented] (CASSANDRA-18969) Pre-release required legal changes for cassandra-java-driver
[ https://issues.apache.org/jira/browse/CASSANDRA-18969?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17781143#comment-17781143 ] Henry Hughes commented on CASSANDRA-18969: -- Current 4.x branch depends on `com.github.spotbugs:spotbugs-annotations:3.1.12` which is [LGPLv2.1|[https://github.com/spotbugs/spotbugs/blob/master/LICENSE]] since version `3.1.0_RC6`. I think that's going to need to be removed before the next release is cut. > Pre-release required legal changes for cassandra-java-driver > > > Key: CASSANDRA-18969 > URL: https://issues.apache.org/jira/browse/CASSANDRA-18969 > Project: Cassandra > Issue Type: Sub-task > Components: Build >Reporter: Michael Semb Wever >Priority: Normal > > * there is still code copyrighted to others that isn't mentioned in NOTICE.txt > * "© DataStax" still appears in the README > * spotbugs is LGPL, in 4.x, and not correctly made provided scope. -- This message was sent by Atlassian Jira (v8.20.10#820010) - To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org For additional commands, e-mail: commits-h...@cassandra.apache.org
[jira] [Commented] (CASSANDRA-14667) Upgrade Dropwizard Metrics to 4.x
[ https://issues.apache.org/jira/browse/CASSANDRA-14667?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17762505#comment-17762505 ] Henry Hughes commented on CASSANDRA-14667: -- Hi folks. Just popping in to let you know [3.11.5 with dropwizard shading is now available|https://groups.google.com/a/lists.datastax.com/g/java-driver-user/c/mEA0R3Heauo/m/7wYtdBcLBAAJ], let us know if you have any issues with the new version! Thanks, Henry > Upgrade Dropwizard Metrics to 4.x > - > > Key: CASSANDRA-14667 > URL: https://issues.apache.org/jira/browse/CASSANDRA-14667 > Project: Cassandra > Issue Type: Task > Components: Observability/Metrics >Reporter: Stig Rohde Døssing >Assignee: Maxim Muzafarov >Priority: Normal > Fix For: 5.x > > Attachments: signature.asc > > Time Spent: 1.5h > Remaining Estimate: 0h > > Cassandra currently uses Metrics 3.1.5. Version 4.0.0 added some fixes for > Java 9 compatibility. It would be good to upgrade the Metrics library as part > of the version of Cassandra that adds Java 9 compatibility > (https://issues.apache.org/jira/browse/CASSANDRA-9608). -- This message was sent by Atlassian Jira (v8.20.10#820010) - To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org For additional commands, e-mail: commits-h...@cassandra.apache.org
