Re: [VOTE] Release Apache KIE(incubating) v10.0.0-rc3
Hi, > Could you give an example of what exactly you mean for re-located > copyright statements? Generally, these are files donated in a software grant whose copyright statement has been removed from their file headers, and the copyright line has been relocated to the NOTICE file. The NOTICE file doesn't list copyrights of other bundled software. Kind Regards, Justin - To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
Re: [VOTE] Release Apache KIE(incubating) v10.0.0-rc3
Justin, Could you give an example of what exactly you mean for re-located copyright statements? Regards, Alex On Fri, Nov 15, 2024 at 6:28 PM Justin Mclean wrote: > > Hi, > > > Thanks Justin for the detailed analysis. > > Checking LEGAL-469 [1], the only issue that seems to force an RC4, is > > the CDDL/GPL licensed source file. > > Currently, there are several Category X/Category B codes in the release > artifact, I did not list them all. Also those licenses should also be > included in the release, as per their terms. > > Note also that "3rd party Category A bundled code licenses not listed in > LICENSE” and ASF headers should be fixed in the next release, so it would be > good to see progress on this, even if it’s not complete. > > The DISCLAIMER-WIP should also be more explicit about what still needs to be > done or any issues with the release artifact. > > Kind Regards, > Justin > - > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > For additional commands, e-mail: general-h...@incubator.apache.org > - To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
Re: [VOTE] Release Apache KIE(incubating) v10.0.0-rc3
Hi, > Thanks Justin for the detailed analysis. > Checking LEGAL-469 [1], the only issue that seems to force an RC4, is > the CDDL/GPL licensed source file. Currently, there are several Category X/Category B codes in the release artifact, I did not list them all. Also those licenses should also be included in the release, as per their terms. Note also that "3rd party Category A bundled code licenses not listed in LICENSE” and ASF headers should be fixed in the next release, so it would be good to see progress on this, even if it’s not complete. The DISCLAIMER-WIP should also be more explicit about what still needs to be done or any issues with the release artifact. Kind Regards, Justin - To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
Re: [VOTE] Release Apache KIE(incubating) v10.0.0-rc3
Thanks John. You are right that Mozilla Public License file needs to be included in the KIE source LICENSE - ideally with a link to the source file. - incubator-kie-drools/drools-docs/supplemental-ui/js/search-ui.js https://gitlab.com/antora/antora-lunr-extension/-/blob/main/LICENSE This is because MPL is a Category B License from Apache perspective. On Fri, 15 Nov 2024 at 12:42, John D. Ament wrote: > > On Fri, Nov 15, 2024 at 5:21 AM PJ Fanning wrote: > > > Thanks Justin for the detailed analysis. > > Checking LEGAL-469 [1], the only issue that seems to force an RC4, is > > the CDDL/GPL licensed source file. > > > > The MPL issue I raised is Category B. It's not listed in the LICENSE. > It's a blocker. > > The legal ticket doesn't categorize binaries in the source release, but > those should likely be in one of the two blocking areas as well. We should > get that clarified at some point, since it does mentioned compiled code, > but doesn't mention other non-code binaries. > > John > > > > > > Legal-469 says: Blocker - must be fixed and and revote on > > * 3rd party Category X or Category B bundled code licenses not listed in > > LICENSE > > > > It appears that the KIE team is very anxious to get a release out. If > > they concentrated on just this issue for an RC4 and got that released > > - and then come back and try to make progress on the other items for > > the follow-up release - would that be a path forward? > > > > [1] https://issues.apache.org/jira/browse/LEGAL-469 > > > > On Fri, 15 Nov 2024 at 02:56, wrote: > > > > > > Hi, > > > > > > -1 (binding) jmclean (IPMC) > > > > > > Looking at your release, it is hard to see at a glance what source > > releases are. It would be best to clearly name these or, better still, put > > all the binary releases into a subfolder. Is > > apache-kie-10.0.0-incubating-sources.zip the only source release? > > > > > > For apache-kie-10.0.0-incubating-sources.zip I checked: > > > - incubating in name > > > - signatures and hashes are correct > > > - LICENSE and NOTICE are not correct > > > - DISCLAIMER exists > > > - issues with ASF headers > > > - no unexpected binary files > > > - I didn’t try to compile - having some obvious instruction on how to do > > this would be good to include > > > > > > Your NOTICE file is incorrect and looks to contain LICENSE information > > this should go in your LICENSE file. The NOTICE is also not a place to list > > the copyright statements of all included software, the NOTICE file should > > only include re-located copyright statements and contents of included > > software NOTICE files. Please see [1] > > > > > > The LICENSE is misisng information about bundled 3rd party files e.g > > [2][3][4][5][6][10][11] and many other 3rd party files. > > > > > > Files like [3][6[9] seem to incorrectly have an ASF header on them when > > the copyright belongs to someone else. How are these file licensed? > > > > > > Minified code should, if possible, be kept out of a source release. > > [8][9] > > > > > > This file is GPL or CDDL licensed and shouldn't be included in an ASF > > release. [11] > > > > > > I suggest you ask your mentor to help construct the LICENSE and NOTICE > > file for your release. > > > > > > Kind Regards, > > > Justin > > > > > > 1. https://infra.apache.org/licensing-howto.html > > > 2. > > ./incubator-kie-tools/packages/serverless-workflow-diagram-editor/third_party/errai/src/main/java/org/jboss/errai/common/client/util/Base64Util.java > > > 3. > > ./incubator-kie-drools/drools-decisiontables/src/main/java/org/drools/decisiontable/parser/csv/CsvLineParser.java > > > 4. > > ./incubator-kie-drools/kie-dmn/kie-dmn-ruleset2dmn-parent/kie-dmn-ruleset2dmn/src/test/resources/wifi.pmml > > (and other similar files) > > > 5. > > ./incubator-kie-tools/packages/serverless-workflow-diagram-editor/lienzo-core/src/main/java/com/ait/lienzo/client/core/event/OrientationChangeHandler.java > > (and many other files) > > > 6 > > ./incubator-kie-drools/kie-pmml-trusty/kie-pmml-models/kie-pmml-models-mining/kie-pmml-models-mining-tests/src/main/resources/randomforestclassifiermining/RandomForestClassifier.pmml > > > 7. > > ./incubator-kie-tools/packages/stunner-editors/lienzo-webapp/src/main/java/org/kie/lienzo/client/LienzoExamples.native.js > > > 8. > > ./incubator-kie-tools/packages/serverless-workflow-diagram-editor/uberfire-extensions/uberfire-commons-editor/uberfire-commons-editor-client/src/main/resources/org/uberfire/ext/editor/commons/client/file/exports/js/jspdf.min.js.back > > > 9. > > ./incubator-kie-kogito-apps/jitexecutor/jitexecutor-dmn/src/main/resources/META-INF/resources/bundle.js > > > 10 > > ./incubator-kie-tools/packages/serverless-workflow-diagram-editor/uberfire-extensions/uberfire-commons-editor/uberfire-commons-editor-client/src/main/resources/org/uberfire/ext/editor/commons/client/file/exports/js/canvas2svg.js.back > > > 11. > > ./incubator-kie-tools/packages/stunner-editors/errai-common/src/main/java/org/jbos
Re: [VOTE] Release Apache KIE(incubating) v10.0.0-rc3
On Fri, Nov 15, 2024 at 5:21 AM PJ Fanning wrote: > Thanks Justin for the detailed analysis. > Checking LEGAL-469 [1], the only issue that seems to force an RC4, is > the CDDL/GPL licensed source file. > The MPL issue I raised is Category B. It's not listed in the LICENSE. It's a blocker. The legal ticket doesn't categorize binaries in the source release, but those should likely be in one of the two blocking areas as well. We should get that clarified at some point, since it does mentioned compiled code, but doesn't mention other non-code binaries. John > > Legal-469 says: Blocker - must be fixed and and revote on > * 3rd party Category X or Category B bundled code licenses not listed in > LICENSE > > It appears that the KIE team is very anxious to get a release out. If > they concentrated on just this issue for an RC4 and got that released > - and then come back and try to make progress on the other items for > the follow-up release - would that be a path forward? > > [1] https://issues.apache.org/jira/browse/LEGAL-469 > > On Fri, 15 Nov 2024 at 02:56, wrote: > > > > Hi, > > > > -1 (binding) jmclean (IPMC) > > > > Looking at your release, it is hard to see at a glance what source > releases are. It would be best to clearly name these or, better still, put > all the binary releases into a subfolder. Is > apache-kie-10.0.0-incubating-sources.zip the only source release? > > > > For apache-kie-10.0.0-incubating-sources.zip I checked: > > - incubating in name > > - signatures and hashes are correct > > - LICENSE and NOTICE are not correct > > - DISCLAIMER exists > > - issues with ASF headers > > - no unexpected binary files > > - I didn’t try to compile - having some obvious instruction on how to do > this would be good to include > > > > Your NOTICE file is incorrect and looks to contain LICENSE information > this should go in your LICENSE file. The NOTICE is also not a place to list > the copyright statements of all included software, the NOTICE file should > only include re-located copyright statements and contents of included > software NOTICE files. Please see [1] > > > > The LICENSE is misisng information about bundled 3rd party files e.g > [2][3][4][5][6][10][11] and many other 3rd party files. > > > > Files like [3][6[9] seem to incorrectly have an ASF header on them when > the copyright belongs to someone else. How are these file licensed? > > > > Minified code should, if possible, be kept out of a source release. > [8][9] > > > > This file is GPL or CDDL licensed and shouldn't be included in an ASF > release. [11] > > > > I suggest you ask your mentor to help construct the LICENSE and NOTICE > file for your release. > > > > Kind Regards, > > Justin > > > > 1. https://infra.apache.org/licensing-howto.html > > 2. > ./incubator-kie-tools/packages/serverless-workflow-diagram-editor/third_party/errai/src/main/java/org/jboss/errai/common/client/util/Base64Util.java > > 3. > ./incubator-kie-drools/drools-decisiontables/src/main/java/org/drools/decisiontable/parser/csv/CsvLineParser.java > > 4. > ./incubator-kie-drools/kie-dmn/kie-dmn-ruleset2dmn-parent/kie-dmn-ruleset2dmn/src/test/resources/wifi.pmml > (and other similar files) > > 5. > ./incubator-kie-tools/packages/serverless-workflow-diagram-editor/lienzo-core/src/main/java/com/ait/lienzo/client/core/event/OrientationChangeHandler.java > (and many other files) > > 6 > ./incubator-kie-drools/kie-pmml-trusty/kie-pmml-models/kie-pmml-models-mining/kie-pmml-models-mining-tests/src/main/resources/randomforestclassifiermining/RandomForestClassifier.pmml > > 7. > ./incubator-kie-tools/packages/stunner-editors/lienzo-webapp/src/main/java/org/kie/lienzo/client/LienzoExamples.native.js > > 8. > ./incubator-kie-tools/packages/serverless-workflow-diagram-editor/uberfire-extensions/uberfire-commons-editor/uberfire-commons-editor-client/src/main/resources/org/uberfire/ext/editor/commons/client/file/exports/js/jspdf.min.js.back > > 9. > ./incubator-kie-kogito-apps/jitexecutor/jitexecutor-dmn/src/main/resources/META-INF/resources/bundle.js > > 10 > ./incubator-kie-tools/packages/serverless-workflow-diagram-editor/uberfire-extensions/uberfire-commons-editor/uberfire-commons-editor-client/src/main/resources/org/uberfire/ext/editor/commons/client/file/exports/js/canvas2svg.js.back > > 11. > ./incubator-kie-tools/packages/stunner-editors/errai-common/src/main/java/org/jboss/errai/common/compat/javax/annotation/processing/Generated.java > > > > > > - > > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > > For additional commands, e-mail: general-h...@incubator.apache.org > > > > - > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > For additional commands, e-mail: general-h...@incubator.apache.org > >
Re: [VOTE] Release Apache KIE(incubating) v10.0.0-rc3
Thanks Justin for the detailed analysis. Checking LEGAL-469 [1], the only issue that seems to force an RC4, is the CDDL/GPL licensed source file. Legal-469 says: Blocker - must be fixed and and revote on * 3rd party Category X or Category B bundled code licenses not listed in LICENSE It appears that the KIE team is very anxious to get a release out. If they concentrated on just this issue for an RC4 and got that released - and then come back and try to make progress on the other items for the follow-up release - would that be a path forward? [1] https://issues.apache.org/jira/browse/LEGAL-469 On Fri, 15 Nov 2024 at 02:56, wrote: > > Hi, > > -1 (binding) jmclean (IPMC) > > Looking at your release, it is hard to see at a glance what source releases > are. It would be best to clearly name these or, better still, put all the > binary releases into a subfolder. Is apache-kie-10.0.0-incubating-sources.zip > the only source release? > > For apache-kie-10.0.0-incubating-sources.zip I checked: > - incubating in name > - signatures and hashes are correct > - LICENSE and NOTICE are not correct > - DISCLAIMER exists > - issues with ASF headers > - no unexpected binary files > - I didn’t try to compile - having some obvious instruction on how to do this > would be good to include > > Your NOTICE file is incorrect and looks to contain LICENSE information this > should go in your LICENSE file. The NOTICE is also not a place to list the > copyright statements of all included software, the NOTICE file should only > include re-located copyright statements and contents of included software > NOTICE files. Please see [1] > > The LICENSE is misisng information about bundled 3rd party files e.g > [2][3][4][5][6][10][11] and many other 3rd party files. > > Files like [3][6[9] seem to incorrectly have an ASF header on them when the > copyright belongs to someone else. How are these file licensed? > > Minified code should, if possible, be kept out of a source release. [8][9] > > This file is GPL or CDDL licensed and shouldn't be included in an ASF > release. [11] > > I suggest you ask your mentor to help construct the LICENSE and NOTICE file > for your release. > > Kind Regards, > Justin > > 1. https://infra.apache.org/licensing-howto.html > 2. > ./incubator-kie-tools/packages/serverless-workflow-diagram-editor/third_party/errai/src/main/java/org/jboss/errai/common/client/util/Base64Util.java > 3. > ./incubator-kie-drools/drools-decisiontables/src/main/java/org/drools/decisiontable/parser/csv/CsvLineParser.java > 4. > ./incubator-kie-drools/kie-dmn/kie-dmn-ruleset2dmn-parent/kie-dmn-ruleset2dmn/src/test/resources/wifi.pmml > (and other similar files) > 5. > ./incubator-kie-tools/packages/serverless-workflow-diagram-editor/lienzo-core/src/main/java/com/ait/lienzo/client/core/event/OrientationChangeHandler.java > (and many other files) > 6 > ./incubator-kie-drools/kie-pmml-trusty/kie-pmml-models/kie-pmml-models-mining/kie-pmml-models-mining-tests/src/main/resources/randomforestclassifiermining/RandomForestClassifier.pmml > 7. > ./incubator-kie-tools/packages/stunner-editors/lienzo-webapp/src/main/java/org/kie/lienzo/client/LienzoExamples.native.js > 8. > ./incubator-kie-tools/packages/serverless-workflow-diagram-editor/uberfire-extensions/uberfire-commons-editor/uberfire-commons-editor-client/src/main/resources/org/uberfire/ext/editor/commons/client/file/exports/js/jspdf.min.js.back > 9. > ./incubator-kie-kogito-apps/jitexecutor/jitexecutor-dmn/src/main/resources/META-INF/resources/bundle.js > 10 > ./incubator-kie-tools/packages/serverless-workflow-diagram-editor/uberfire-extensions/uberfire-commons-editor/uberfire-commons-editor-client/src/main/resources/org/uberfire/ext/editor/commons/client/file/exports/js/canvas2svg.js.back > 11. > ./incubator-kie-tools/packages/stunner-editors/errai-common/src/main/java/org/jboss/errai/common/compat/javax/annotation/processing/Generated.java > > > - > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > For additional commands, e-mail: general-h...@incubator.apache.org > - To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
Re: [VOTE] Release Apache KIE(incubating) v10.0.0-rc3
Hi, -1 (binding) jmclean (IPMC) Looking at your release, it is hard to see at a glance what source releases are. It would be best to clearly name these or, better still, put all the binary releases into a subfolder. Is apache-kie-10.0.0-incubating-sources.zip the only source release? For apache-kie-10.0.0-incubating-sources.zip I checked: - incubating in name - signatures and hashes are correct - LICENSE and NOTICE are not correct - DISCLAIMER exists - issues with ASF headers - no unexpected binary files - I didn’t try to compile - having some obvious instruction on how to do this would be good to include Your NOTICE file is incorrect and looks to contain LICENSE information this should go in your LICENSE file. The NOTICE is also not a place to list the copyright statements of all included software, the NOTICE file should only include re-located copyright statements and contents of included software NOTICE files. Please see [1] The LICENSE is misisng information about bundled 3rd party files e.g [2][3][4][5][6][10][11] and many other 3rd party files. Files like [3][6[9] seem to incorrectly have an ASF header on them when the copyright belongs to someone else. How are these file licensed? Minified code should, if possible, be kept out of a source release. [8][9] This file is GPL or CDDL licensed and shouldn't be included in an ASF release. [11] I suggest you ask your mentor to help construct the LICENSE and NOTICE file for your release. Kind Regards, Justin 1. https://infra.apache.org/licensing-howto.html 2. ./incubator-kie-tools/packages/serverless-workflow-diagram-editor/third_party/errai/src/main/java/org/jboss/errai/common/client/util/Base64Util.java 3. ./incubator-kie-drools/drools-decisiontables/src/main/java/org/drools/decisiontable/parser/csv/CsvLineParser.java 4. ./incubator-kie-drools/kie-dmn/kie-dmn-ruleset2dmn-parent/kie-dmn-ruleset2dmn/src/test/resources/wifi.pmml (and other similar files) 5. ./incubator-kie-tools/packages/serverless-workflow-diagram-editor/lienzo-core/src/main/java/com/ait/lienzo/client/core/event/OrientationChangeHandler.java (and many other files) 6 ./incubator-kie-drools/kie-pmml-trusty/kie-pmml-models/kie-pmml-models-mining/kie-pmml-models-mining-tests/src/main/resources/randomforestclassifiermining/RandomForestClassifier.pmml 7. ./incubator-kie-tools/packages/stunner-editors/lienzo-webapp/src/main/java/org/kie/lienzo/client/LienzoExamples.native.js 8. ./incubator-kie-tools/packages/serverless-workflow-diagram-editor/uberfire-extensions/uberfire-commons-editor/uberfire-commons-editor-client/src/main/resources/org/uberfire/ext/editor/commons/client/file/exports/js/jspdf.min.js.back 9. ./incubator-kie-kogito-apps/jitexecutor/jitexecutor-dmn/src/main/resources/META-INF/resources/bundle.js 10 ./incubator-kie-tools/packages/serverless-workflow-diagram-editor/uberfire-extensions/uberfire-commons-editor/uberfire-commons-editor-client/src/main/resources/org/uberfire/ext/editor/commons/client/file/exports/js/canvas2svg.js.back 11. ./incubator-kie-tools/packages/stunner-editors/errai-common/src/main/java/org/jboss/errai/common/compat/javax/annotation/processing/Generated.java - To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
Re: [VOTE] Release Apache KIE(incubating) v10.0.0-rc3
Hi, > I was under the impression that N&L files are needed for all published > code, including public repos. > So the N&L files in each repo are required. I woudl put a LICENSE and NOTICE in each repo, but as per [1] "The LICENSE and NOTICE files must exactly represent the contents of the distribution they reside in.” they usually refer to a release artefact. ASF GitHub repos can, for instance, contain content incompatible with the Apache license. > When creating the release bundle, combine the relevant parts from the > source repos in a single pair of N&L files. Yes, I would also expect this, but it needs to reflect what is in the release, which might differ from what is in git. Kind Regard, Justin 1. https://infra.apache.org/licensing-howto.html#guiding - To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
Re: [VOTE] Release Apache KIE(incubating) v10.0.0-rc3
Justin, We understand that still have some work to be done to comply with all Apache requirements, which are not simple and straightforward for new comers with sized codebase and complexity like us from the Apache KIE podling. The ultimate question is: are the remaining adjustments listed in this thread are blockers for a *first* release under incubation? Isn’t the purpose of incubation is to have incremental improvements? Regards, Alex On Thu, Nov 14, 2024 at 6:51 PM Justin Mclean wrote: > HI, > > > The current multiple NOTICES files are related to how the codebase is > > structured - we have several repositories that host the codebase - so > > each repository has its own set of legal files. > > You should not do this, the LICENSE and NOTICE reflect what is in the > release artifacts, not what is in GitHub. > > Kind Regards, > Justin > - > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > For additional commands, e-mail: general-h...@incubator.apache.org > >
Re: [VOTE] Release Apache KIE(incubating) v10.0.0-rc3
On Thu, 14 Nov 2024 at 23:51, Justin Mclean wrote: > > HI, > > > The current multiple NOTICES files are related to how the codebase is > > structured - we have several repositories that host the codebase - so > > each repository has its own set of legal files. > > You should not do this, the LICENSE and NOTICE reflect what is in the release > artifacts, not what is in GitHub. I was under the impression that N&L files are needed for all published code, including public repos. So the N&L files in each repo are required. The N&L files in the source bundle should represent whatever is in the bundle, which may be different from the sum total of the repos. This is how the process works when one ASF project release includes some files from another ASF project: the N&L files in the release bundle must contain the relevant bits from the other project. I would leave the N&L files in the individual repos. When creating the release bundle, combine the relevant parts from the source repos in a single pair of N&L files. > Kind Regards, > Justin > - > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > For additional commands, e-mail: general-h...@incubator.apache.org > - To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
Re: [VOTE] Release Apache KIE(incubating) v10.0.0-rc3
HI, > The current multiple NOTICES files are related to how the codebase is > structured - we have several repositories that host the codebase - so > each repository has its own set of legal files. You should not do this, the LICENSE and NOTICE reflect what is in the release artifacts, not what is in GitHub. Kind Regards, Justin - To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
Re: [VOTE] Release Apache KIE(incubating) v10.0.0-rc3
Hi, > The Hibernate LGPL stuff in the DISCLAIMER-WIP is possibly an issue. > > https://github.com/apache/incubator-kie-drools/blob/main/DISCLAIMER-WIP > > Using a DISCLAIMER-WIP allows you some leeway with Apache License > compatible licenses. It does not give you leeway with ones that are > not compatible like LGPL. It does allow that, please see [1]. However, you need to abide by the terms of the license - "3rd party Category X or Category B bundled code licenses not listed in LICENSE" Justin 1. https://issues.apache.org/jira/browse/LEGAL-469 - To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
Re: [VOTE] Release Apache KIE(incubating) v10.0.0-rc3
On Thu, Nov 14, 2024 at 9:22 AM Alex Porcelli wrote: > John, > > As you might have realized, the issues with the LICENSE and NOTICE > files is that, based on my understanding from PJ feedback, they are a > bit scrambled and with additional information. We have a > DISCLAIMER-WIP that we also highlight we have a dependency with > Hibernate (LGPL). > > The current multiple NOTICES files are related to how the codebase is > structured - we have several repositories that host the codebase - so > each repository has its own set of legal files. > Understood. The original email linked about the problems made it look worse than it actually is when looking at the source tarball, namely there's one remaining JAR in the source that ultimately is where my -1 comes from. I think if you're rerolling the release to fix that JAR, you should also fix your LICENSE file. E.g. if you're listing that you have parts that are MIT, but those MIT licenses need to be in the LICENSE file. There are items from restricted [1] licenses listed, namely LGPL Hibernate and MPLv2 search-ui. I only did a spot check. If you're actually including this code in your source format, we can't release it, this is clear from our release guidelines for MPLv2. From the looks of it, you are in fact bundling MPLv2 at incubator-kie-drools/drools-docs/supplemental-ui/js/search-ui.js . If search-ui is really just in your docs then it may be an easy fix to simply exclude your docs from the source release for right now. I do think the Hibernate problem is a binary issue only, and likely doesn't impact the source tarball that much. Keep in mind that release votes aren't veto's [2]. If you get enough to clear the vote, then my -1 is simply recorded, unless you can fix it. - John [1]: https://apache.org/legal/resolved.html#weak-copyleft-licenses [2]: https://apache.org/foundation/voting.html#ReleaseVotes > > On Thu, Nov 14, 2024 at 5:40 AM John D. Ament > wrote: > > > > With that clarification, the original thread and current bundles are a > bit > > confusing to follow. I had assumed that the main problem was that the > > NOTICE files called out dependencies that were not Apache V2 licensed yet > > those third party licenses were not listed in the LICENSE file. If the > > NOTICE is calling out dependencies that aren't even packaged, it's a > > different problem as the NOTICE is just being overstated and that's > > probably fine for an initial release. Even if a license is compatible > with > > our release process, it needs to be included in the LICENSE file. It is > > also confusing that you have multiple NOTICEs in your source release, > > typically we want just one. > > > > John > > > > On Thu, Nov 14, 2024 at 4:10 AM PJ Fanning wrote: > > > > > The only jar that I could find in the source release is: > > > > > > > > > > incubator-kie-tools/packages/stunner-editors/errai-ui/src/test/resources/less.jar > > > > > > It would be ideal if this could be removed. > > > > > > apache-kie-10.0.0-incubating-sources.zip from > > > https://dist.apache.org/repos/dist/dev/incubator/kie/10.0.0-rc3/ > > > > > > I think it would also be useful if the KIE team could provide a 'How > > > to Build KIE from its source release' guide for IPMC reviewers. > > > > > > On Thu, 14 Nov 2024 at 03:21, John D. Ament > wrote: > > > > > > > > On Wed, Nov 13, 2024 at 1:16 PM Alex Porcelli > > > wrote: > > > > > > > > > Hello everyone, > > > > > > > > > > This email serves as a call for votes to release Apache KIE > > > > > (Incubating) v10.0.0-rc3. In this release candidate we have made > > > > > efforts to incorporate feedback from the previous voting thread > [1]. > > > > > > > > > > The Apache KIE community has reviewed and approved the release of > > > > > Apache KIE (Incubating) v10.0.0-rc3. We now kindly request IPMC > > > > > members to review and cast their votes on this release. > > > > > > > > > > Important Note: We have identified an issue with the NOTICE and > > > > > LICENSE files [2], but we hope this will not pose a blocker for the > > > > > release. > > > > > > > > > > > > > Based on the description, I think they are. In addition, you need to > > > > resolve the binaries in your source release. Typically if they are > test > > > > artifacts, the source contents of them are available within the > source > > > tree > > > > with a command to run to build the test artifacts, or a download > location > > > > on where to pull them from would work as well. There is no one right > > > > answer that can be given. > > > > > > > > Also, I think you need to look at what a release is here at Apache. > > > While > > > > it's fine to have convenience binaries, a source release consists of > the > > > > source code that makes those binaries. What we would typically vote > on > > > is > > > > a source tarball that can be reviewed. The staged maven artifacts > are a > > > > combination of source JARs, binary JARs and other files. How do I > > > compile > > > > the
Re: [VOTE] Release Apache KIE(incubating) v10.0.0-rc3
As a mentor of the KIE project I believe the release should go ahead. The LGPL problem has been extensively discussed and KIE project was told it wouldn't be a problem for the first release iteration. I believe it's important to release for maintaining the community alive. So here is +1 to the release. On 2024/11/14 15:45:19 Alex Porcelli wrote: > I believe that we already discussed the Hibernate license issue in this ML > [1], and seemed that there was a general understanding that the WIP > disclaimer would be enough. > > > My honest feedback is that feels that the release requirement hás been a > moving target. The lack of release is hurting the large KIE community of > users (drools, jbpm, kogito, etc) and contributors. > > When we entering in incubation we’ve been told that we didn’t need to be > perfect first time, that was exactly the purpose of the incubation - to > incrementally improve in Apache requirements. > > [1] - > https://lists.apache.org/thread/j50dsth8740qw16k5cjycjof8y1kpt50 > > > Regards, > _ > Alex Porcelli > http://porcelli.me > > > On Thu, Nov 14, 2024 at 10:35 AM PJ Fanning wrote: > > > The Hibernate LGPL stuff in the DISCLAIMER-WIP is possibly an issue. > > > > https://github.com/apache/incubator-kie-drools/blob/main/DISCLAIMER-WIP > > > > Using a DISCLAIMER-WIP allows you some leeway with Apache License > > compatible licenses. It does not give you leeway with ones that are > > not compatible like LGPL. > > > > See Category X in: > > https://www.apache.org/legal/resolved.html > > > > One thing that you can do is have a Maven POM that links to a > > Hibernate jar and code that imports Hibernate classes. You can't > > include any code in your source release that is a copy of Hibernate > > code. You can't include Hibernate classes in one of the KIE jars (e.g. > > a fat jar that includes 3rd party classes, shaded or not). You can't > > include Hibernate jars into any binary distribution (e.g. any of the > > archives that you have put on dist.apache.org). > > > > > > > > On Thu, 14 Nov 2024 at 16:22, Jason Porter > > wrote: > > > > > > Would it be good to include a build.txt or something like that in the > > root of the source tarball? We have it on the website, but something closer > > to the source might be good to have. > > > > > > -- > > > Jason Porter > > > Software Engineer > > > He/Him/His > > > > > > IBM > > > > > > > > > From: Alex Porcelli > > > Date: Thursday, November 14, 2024 at 07:03 > > > To: general@incubator.apache.org > > > Subject: [EXTERNAL] Re: [VOTE] Release Apache KIE(incubating) v10.0.0-rc3 > > > Here is a detailed build instruction > > > https://kie.apache.org/docs/community/build > > > > > > On Thu, Nov 14, 2024 at 4:11 AM PJ Fanning wrote: > > > > > > > > The only jar that I could find in the source release is: > > > > > > > > > > incubator-kie-tools/packages/stunner-editors/errai-ui/src/test/resources/less.jar > > > > > > > > It would be ideal if this could be removed. > > > > > > > > apache-kie-10.0.0-incubating-sources.zip from > > > > https://dist.apache.org/repos/dist/dev/incubator/kie/10.0.0-rc3/ > > > > > > > > I think it would also be useful if the KIE team could provide a 'How > > > > to Build KIE from its source release' guide for IPMC reviewers. > > > > > > > > On Thu, 14 Nov 2024 at 03:21, John D. Ament > > wrote: > > > > > > > > > > On Wed, Nov 13, 2024 at 1:16 PM Alex Porcelli > > wrote: > > > > > > > > > > > Hello everyone, > > > > > > > > > > > > This email serves as a call for votes to release Apache KIE > > > > > > (Incubating) v10.0.0-rc3. In this release candidate we have made > > > > > > efforts to incorporate feedback from the previous voting thread > > [1]. > > > > > > > > > > > > The Apache KIE community has reviewed and approved the release of > > > > > > Apache KIE (Incubating) v10.0.0-rc3. We now kindly request IPMC > > > > > > members to review and cast their votes on this release. > > > > > > > > > > > > Important Note: We have identified an issue with the NOTICE and > > > > > > LICENSE files [2], but we hope this will not pos
Re: [VOTE] Release Apache KIE(incubating) v10.0.0-rc3
The Hibernate LGPL stuff in the DISCLAIMER-WIP is possibly an issue. https://github.com/apache/incubator-kie-drools/blob/main/DISCLAIMER-WIP Using a DISCLAIMER-WIP allows you some leeway with Apache License compatible licenses. It does not give you leeway with ones that are not compatible like LGPL. See Category X in: https://www.apache.org/legal/resolved.html One thing that you can do is have a Maven POM that links to a Hibernate jar and code that imports Hibernate classes. You can't include any code in your source release that is a copy of Hibernate code. You can't include Hibernate classes in one of the KIE jars (e.g. a fat jar that includes 3rd party classes, shaded or not). You can't include Hibernate jars into any binary distribution (e.g. any of the archives that you have put on dist.apache.org). On Thu, 14 Nov 2024 at 16:22, Jason Porter wrote: > > Would it be good to include a build.txt or something like that in the root of > the source tarball? We have it on the website, but something closer to the > source might be good to have. > > -- > Jason Porter > Software Engineer > He/Him/His > > IBM > > > From: Alex Porcelli > Date: Thursday, November 14, 2024 at 07:03 > To: general@incubator.apache.org > Subject: [EXTERNAL] Re: [VOTE] Release Apache KIE(incubating) v10.0.0-rc3 > Here is a detailed build instruction > https://kie.apache.org/docs/community/build > > On Thu, Nov 14, 2024 at 4:11 AM PJ Fanning wrote: > > > > The only jar that I could find in the source release is: > > > > incubator-kie-tools/packages/stunner-editors/errai-ui/src/test/resources/less.jar > > > > It would be ideal if this could be removed. > > > > apache-kie-10.0.0-incubating-sources.zip from > > https://dist.apache.org/repos/dist/dev/incubator/kie/10.0.0-rc3/ > > > > I think it would also be useful if the KIE team could provide a 'How > > to Build KIE from its source release' guide for IPMC reviewers. > > > > On Thu, 14 Nov 2024 at 03:21, John D. Ament wrote: > > > > > > On Wed, Nov 13, 2024 at 1:16 PM Alex Porcelli wrote: > > > > > > > Hello everyone, > > > > > > > > This email serves as a call for votes to release Apache KIE > > > > (Incubating) v10.0.0-rc3. In this release candidate we have made > > > > efforts to incorporate feedback from the previous voting thread [1]. > > > > > > > > The Apache KIE community has reviewed and approved the release of > > > > Apache KIE (Incubating) v10.0.0-rc3. We now kindly request IPMC > > > > members to review and cast their votes on this release. > > > > > > > > Important Note: We have identified an issue with the NOTICE and > > > > LICENSE files [2], but we hope this will not pose a blocker for the > > > > release. > > > > > > > > > > Based on the description, I think they are. In addition, you need to > > > resolve the binaries in your source release. Typically if they are test > > > artifacts, the source contents of them are available within the source > > > tree > > > with a command to run to build the test artifacts, or a download location > > > on where to pull them from would work as well. There is no one right > > > answer that can be given. > > > > > > Also, I think you need to look at what a release is here at Apache. While > > > it's fine to have convenience binaries, a source release consists of the > > > source code that makes those binaries. What we would typically vote on is > > > a source tarball that can be reviewed. The staged maven artifacts are a > > > combination of source JARs, binary JARs and other files. How do I compile > > > the source jars to make the binary JARs? [1] may be of interest if you > > > have not yet reviewed. > > > > > > So it's a -1 from me, johndament IPMC. > > > > > > John > > > > > > [1]: https://apache.org/dev/#releases > > > > > > > > > > > > > > Apache KIE(incubating) - The home of the most popular business > > > > automation open-source technologies including Drools, jBPM, > > > > SonataFlow, Optaplanner, Kogito and Tools. > > > > > > > > KIE community vote thread: > > > > https://lists.apache.org/thread/nxx66ccognnk8fozt4nk11z7g57c7fnb > > > > > > > > Vote result thread: > > > > https://lists.apache.org/thread/1hhkchlwt69fn9cd3lgok55mw61kn862 > > > > > > > > The rele
Re: [VOTE] Release Apache KIE(incubating) v10.0.0-rc3
I believe that we already discussed the Hibernate license issue in this ML [1], and seemed that there was a general understanding that the WIP disclaimer would be enough. My honest feedback is that feels that the release requirement hás been a moving target. The lack of release is hurting the large KIE community of users (drools, jbpm, kogito, etc) and contributors. When we entering in incubation we’ve been told that we didn’t need to be perfect first time, that was exactly the purpose of the incubation - to incrementally improve in Apache requirements. [1] - https://lists.apache.org/thread/j50dsth8740qw16k5cjycjof8y1kpt50 Regards, _ Alex Porcelli http://porcelli.me On Thu, Nov 14, 2024 at 10:35 AM PJ Fanning wrote: > The Hibernate LGPL stuff in the DISCLAIMER-WIP is possibly an issue. > > https://github.com/apache/incubator-kie-drools/blob/main/DISCLAIMER-WIP > > Using a DISCLAIMER-WIP allows you some leeway with Apache License > compatible licenses. It does not give you leeway with ones that are > not compatible like LGPL. > > See Category X in: > https://www.apache.org/legal/resolved.html > > One thing that you can do is have a Maven POM that links to a > Hibernate jar and code that imports Hibernate classes. You can't > include any code in your source release that is a copy of Hibernate > code. You can't include Hibernate classes in one of the KIE jars (e.g. > a fat jar that includes 3rd party classes, shaded or not). You can't > include Hibernate jars into any binary distribution (e.g. any of the > archives that you have put on dist.apache.org). > > > > On Thu, 14 Nov 2024 at 16:22, Jason Porter > wrote: > > > > Would it be good to include a build.txt or something like that in the > root of the source tarball? We have it on the website, but something closer > to the source might be good to have. > > > > -- > > Jason Porter > > Software Engineer > > He/Him/His > > > > IBM > > > > > > From: Alex Porcelli > > Date: Thursday, November 14, 2024 at 07:03 > > To: general@incubator.apache.org > > Subject: [EXTERNAL] Re: [VOTE] Release Apache KIE(incubating) v10.0.0-rc3 > > Here is a detailed build instruction > > https://kie.apache.org/docs/community/build > > > > On Thu, Nov 14, 2024 at 4:11 AM PJ Fanning wrote: > > > > > > The only jar that I could find in the source release is: > > > > > > > incubator-kie-tools/packages/stunner-editors/errai-ui/src/test/resources/less.jar > > > > > > It would be ideal if this could be removed. > > > > > > apache-kie-10.0.0-incubating-sources.zip from > > > https://dist.apache.org/repos/dist/dev/incubator/kie/10.0.0-rc3/ > > > > > > I think it would also be useful if the KIE team could provide a 'How > > > to Build KIE from its source release' guide for IPMC reviewers. > > > > > > On Thu, 14 Nov 2024 at 03:21, John D. Ament > wrote: > > > > > > > > On Wed, Nov 13, 2024 at 1:16 PM Alex Porcelli > wrote: > > > > > > > > > Hello everyone, > > > > > > > > > > This email serves as a call for votes to release Apache KIE > > > > > (Incubating) v10.0.0-rc3. In this release candidate we have made > > > > > efforts to incorporate feedback from the previous voting thread > [1]. > > > > > > > > > > The Apache KIE community has reviewed and approved the release of > > > > > Apache KIE (Incubating) v10.0.0-rc3. We now kindly request IPMC > > > > > members to review and cast their votes on this release. > > > > > > > > > > Important Note: We have identified an issue with the NOTICE and > > > > > LICENSE files [2], but we hope this will not pose a blocker for the > > > > > release. > > > > > > > > > > > > > Based on the description, I think they are. In addition, you need to > > > > resolve the binaries in your source release. Typically if they are > test > > > > artifacts, the source contents of them are available within the > source tree > > > > with a command to run to build the test artifacts, or a download > location > > > > on where to pull them from would work as well. There is no one right > > > > answer that can be given. > > > > > > > > Also, I think you need to look at what a release is here at Apache. > While > > > > it's fine to have convenience binaries, a source release consists of > the > > > > sourc
RE: [VOTE] Release Apache KIE(incubating) v10.0.0-rc3
Would it be good to include a build.txt or something like that in the root of the source tarball? We have it on the website, but something closer to the source might be good to have. -- Jason Porter Software Engineer He/Him/His IBM From: Alex Porcelli Date: Thursday, November 14, 2024 at 07:03 To: general@incubator.apache.org Subject: [EXTERNAL] Re: [VOTE] Release Apache KIE(incubating) v10.0.0-rc3 Here is a detailed build instruction https://kie.apache.org/docs/community/build On Thu, Nov 14, 2024 at 4:11 AM PJ Fanning wrote: > > The only jar that I could find in the source release is: > > incubator-kie-tools/packages/stunner-editors/errai-ui/src/test/resources/less.jar > > It would be ideal if this could be removed. > > apache-kie-10.0.0-incubating-sources.zip from > https://dist.apache.org/repos/dist/dev/incubator/kie/10.0.0-rc3/ > > I think it would also be useful if the KIE team could provide a 'How > to Build KIE from its source release' guide for IPMC reviewers. > > On Thu, 14 Nov 2024 at 03:21, John D. Ament wrote: > > > > On Wed, Nov 13, 2024 at 1:16 PM Alex Porcelli wrote: > > > > > Hello everyone, > > > > > > This email serves as a call for votes to release Apache KIE > > > (Incubating) v10.0.0-rc3. In this release candidate we have made > > > efforts to incorporate feedback from the previous voting thread [1]. > > > > > > The Apache KIE community has reviewed and approved the release of > > > Apache KIE (Incubating) v10.0.0-rc3. We now kindly request IPMC > > > members to review and cast their votes on this release. > > > > > > Important Note: We have identified an issue with the NOTICE and > > > LICENSE files [2], but we hope this will not pose a blocker for the > > > release. > > > > > > > Based on the description, I think they are. In addition, you need to > > resolve the binaries in your source release. Typically if they are test > > artifacts, the source contents of them are available within the source tree > > with a command to run to build the test artifacts, or a download location > > on where to pull them from would work as well. There is no one right > > answer that can be given. > > > > Also, I think you need to look at what a release is here at Apache. While > > it's fine to have convenience binaries, a source release consists of the > > source code that makes those binaries. What we would typically vote on is > > a source tarball that can be reviewed. The staged maven artifacts are a > > combination of source JARs, binary JARs and other files. How do I compile > > the source jars to make the binary JARs? [1] may be of interest if you > > have not yet reviewed. > > > > So it's a -1 from me, johndament IPMC. > > > > John > > > > [1]: https://apache.org/dev/#releases > > > > > > > > > > Apache KIE(incubating) - The home of the most popular business > > > automation open-source technologies including Drools, jBPM, > > > SonataFlow, Optaplanner, Kogito and Tools. > > > > > > KIE community vote thread: > > > https://lists.apache.org/thread/nxx66ccognnk8fozt4nk11z7g57c7fnb > > > > > > Vote result thread: > > > https://lists.apache.org/thread/1hhkchlwt69fn9cd3lgok55mw61kn862 > > > > > > The release candidate: > > > https://dist.apache.org/repos/dist/dev/incubator/kie/10.0.0-rc3/ > > > > > > The maven staging repos for this release: > > > - Drools: > > > https://repository.apache.org/content/repositories/orgapachekie-1055 > > > - Optaplanner: > > > https://repository.apache.org/content/repositories/orgapachekie-1056 > > > - Kogito Runtimes: > > > https://repository.apache.org/content/repositories/orgapachekie-1057 > > > - Kogito Apps: > > > https://repository.apache.org/content/repositories/orgapachekie-1058 > > > - Kogito Apps - JITExecutor Native Linux: > > > https://repository.apache.org/content/repositories/orgapachekie-1059 > > > - Kogito Apps - JITExecutor Native Windows: > > > https://repository.apache.org/content/repositories/orgapachekie-1060 > > > - Kogito Apps - JITExecutor Native MacOS: > > > https://repository.apache.org/content/repositories/orgapachekie-1061 > > > - KIE Tools - JBPM Quarkus DevUI: > > > https://repository.apache.org/content/repositories/orgapachekie-1064 > > > - KIE Tools - Sonataflow Quarkus DevUI: > > > https://repository.apache.org/content/repositories/orgapachekie-1065 > > > > > > The arti
Re: [VOTE] Release Apache KIE(incubating) v10.0.0-rc3
John, As you might have realized, the issues with the LICENSE and NOTICE files is that, based on my understanding from PJ feedback, they are a bit scrambled and with additional information. We have a DISCLAIMER-WIP that we also highlight we have a dependency with Hibernate (LGPL). The current multiple NOTICES files are related to how the codebase is structured - we have several repositories that host the codebase - so each repository has its own set of legal files. On Thu, Nov 14, 2024 at 5:40 AM John D. Ament wrote: > > With that clarification, the original thread and current bundles are a bit > confusing to follow. I had assumed that the main problem was that the > NOTICE files called out dependencies that were not Apache V2 licensed yet > those third party licenses were not listed in the LICENSE file. If the > NOTICE is calling out dependencies that aren't even packaged, it's a > different problem as the NOTICE is just being overstated and that's > probably fine for an initial release. Even if a license is compatible with > our release process, it needs to be included in the LICENSE file. It is > also confusing that you have multiple NOTICEs in your source release, > typically we want just one. > > John > > On Thu, Nov 14, 2024 at 4:10 AM PJ Fanning wrote: > > > The only jar that I could find in the source release is: > > > > > > incubator-kie-tools/packages/stunner-editors/errai-ui/src/test/resources/less.jar > > > > It would be ideal if this could be removed. > > > > apache-kie-10.0.0-incubating-sources.zip from > > https://dist.apache.org/repos/dist/dev/incubator/kie/10.0.0-rc3/ > > > > I think it would also be useful if the KIE team could provide a 'How > > to Build KIE from its source release' guide for IPMC reviewers. > > > > On Thu, 14 Nov 2024 at 03:21, John D. Ament wrote: > > > > > > On Wed, Nov 13, 2024 at 1:16 PM Alex Porcelli > > wrote: > > > > > > > Hello everyone, > > > > > > > > This email serves as a call for votes to release Apache KIE > > > > (Incubating) v10.0.0-rc3. In this release candidate we have made > > > > efforts to incorporate feedback from the previous voting thread [1]. > > > > > > > > The Apache KIE community has reviewed and approved the release of > > > > Apache KIE (Incubating) v10.0.0-rc3. We now kindly request IPMC > > > > members to review and cast their votes on this release. > > > > > > > > Important Note: We have identified an issue with the NOTICE and > > > > LICENSE files [2], but we hope this will not pose a blocker for the > > > > release. > > > > > > > > > > Based on the description, I think they are. In addition, you need to > > > resolve the binaries in your source release. Typically if they are test > > > artifacts, the source contents of them are available within the source > > tree > > > with a command to run to build the test artifacts, or a download location > > > on where to pull them from would work as well. There is no one right > > > answer that can be given. > > > > > > Also, I think you need to look at what a release is here at Apache. > > While > > > it's fine to have convenience binaries, a source release consists of the > > > source code that makes those binaries. What we would typically vote on > > is > > > a source tarball that can be reviewed. The staged maven artifacts are a > > > combination of source JARs, binary JARs and other files. How do I > > compile > > > the source jars to make the binary JARs? [1] may be of interest if you > > > have not yet reviewed. > > > > > > So it's a -1 from me, johndament IPMC. > > > > > > John > > > > > > [1]: https://apache.org/dev/#releases > > > > > > > > > > > > > > Apache KIE(incubating) - The home of the most popular business > > > > automation open-source technologies including Drools, jBPM, > > > > SonataFlow, Optaplanner, Kogito and Tools. > > > > > > > > KIE community vote thread: > > > > https://lists.apache.org/thread/nxx66ccognnk8fozt4nk11z7g57c7fnb > > > > > > > > Vote result thread: > > > > https://lists.apache.org/thread/1hhkchlwt69fn9cd3lgok55mw61kn862 > > > > > > > > The release candidate: > > > > https://dist.apache.org/repos/dist/dev/incubator/kie/10.0.0-rc3/ > > > > > > > > The maven staging repos for this release: > > > > - Drools: > > > > https://repository.apache.org/content/repositories/orgapachekie-1055 > > > > - Optaplanner: > > > > https://repository.apache.org/content/repositories/orgapachekie-1056 > > > > - Kogito Runtimes: > > > > https://repository.apache.org/content/repositories/orgapachekie-1057 > > > > - Kogito Apps: > > > > https://repository.apache.org/content/repositories/orgapachekie-1058 > > > > - Kogito Apps - JITExecutor Native Linux: > > > > https://repository.apache.org/content/repositories/orgapachekie-1059 > > > > - Kogito Apps - JITExecutor Native Windows: > > > > https://repository.apache.org/content/repositories/orgapachekie-1060 > > > > - Kogito Apps - JITExecutor Native MacOS: > > > > https://repository.apache.org/content/repositories/o
Re: [VOTE] Release Apache KIE(incubating) v10.0.0-rc3
Here is a detailed build instruction https://kie.apache.org/docs/community/build On Thu, Nov 14, 2024 at 4:11 AM PJ Fanning wrote: > > The only jar that I could find in the source release is: > > incubator-kie-tools/packages/stunner-editors/errai-ui/src/test/resources/less.jar > > It would be ideal if this could be removed. > > apache-kie-10.0.0-incubating-sources.zip from > https://dist.apache.org/repos/dist/dev/incubator/kie/10.0.0-rc3/ > > I think it would also be useful if the KIE team could provide a 'How > to Build KIE from its source release' guide for IPMC reviewers. > > On Thu, 14 Nov 2024 at 03:21, John D. Ament wrote: > > > > On Wed, Nov 13, 2024 at 1:16 PM Alex Porcelli wrote: > > > > > Hello everyone, > > > > > > This email serves as a call for votes to release Apache KIE > > > (Incubating) v10.0.0-rc3. In this release candidate we have made > > > efforts to incorporate feedback from the previous voting thread [1]. > > > > > > The Apache KIE community has reviewed and approved the release of > > > Apache KIE (Incubating) v10.0.0-rc3. We now kindly request IPMC > > > members to review and cast their votes on this release. > > > > > > Important Note: We have identified an issue with the NOTICE and > > > LICENSE files [2], but we hope this will not pose a blocker for the > > > release. > > > > > > > Based on the description, I think they are. In addition, you need to > > resolve the binaries in your source release. Typically if they are test > > artifacts, the source contents of them are available within the source tree > > with a command to run to build the test artifacts, or a download location > > on where to pull them from would work as well. There is no one right > > answer that can be given. > > > > Also, I think you need to look at what a release is here at Apache. While > > it's fine to have convenience binaries, a source release consists of the > > source code that makes those binaries. What we would typically vote on is > > a source tarball that can be reviewed. The staged maven artifacts are a > > combination of source JARs, binary JARs and other files. How do I compile > > the source jars to make the binary JARs? [1] may be of interest if you > > have not yet reviewed. > > > > So it's a -1 from me, johndament IPMC. > > > > John > > > > [1]: https://apache.org/dev/#releases > > > > > > > > > > Apache KIE(incubating) - The home of the most popular business > > > automation open-source technologies including Drools, jBPM, > > > SonataFlow, Optaplanner, Kogito and Tools. > > > > > > KIE community vote thread: > > > https://lists.apache.org/thread/nxx66ccognnk8fozt4nk11z7g57c7fnb > > > > > > Vote result thread: > > > https://lists.apache.org/thread/1hhkchlwt69fn9cd3lgok55mw61kn862 > > > > > > The release candidate: > > > https://dist.apache.org/repos/dist/dev/incubator/kie/10.0.0-rc3/ > > > > > > The maven staging repos for this release: > > > - Drools: > > > https://repository.apache.org/content/repositories/orgapachekie-1055 > > > - Optaplanner: > > > https://repository.apache.org/content/repositories/orgapachekie-1056 > > > - Kogito Runtimes: > > > https://repository.apache.org/content/repositories/orgapachekie-1057 > > > - Kogito Apps: > > > https://repository.apache.org/content/repositories/orgapachekie-1058 > > > - Kogito Apps - JITExecutor Native Linux: > > > https://repository.apache.org/content/repositories/orgapachekie-1059 > > > - Kogito Apps - JITExecutor Native Windows: > > > https://repository.apache.org/content/repositories/orgapachekie-1060 > > > - Kogito Apps - JITExecutor Native MacOS: > > > https://repository.apache.org/content/repositories/orgapachekie-1061 > > > - KIE Tools - JBPM Quarkus DevUI: > > > https://repository.apache.org/content/repositories/orgapachekie-1064 > > > - KIE Tools - Sonataflow Quarkus DevUI: > > > https://repository.apache.org/content/repositories/orgapachekie-1065 > > > > > > The artifacts are signed with PGP key corresponding to > > > [priv...@kie.apache.org], found in the KEYS file: > > > > > > https://downloads.apache.org/incubator/kie/KEYS > > > > > > The vote will be open for at least 72 hours until the necessary number > > > of votes are reached. > > > > > > Please vote accordingly: > > > [ ] +1 approve > > > [ ] +0 no opinion > > > [ ] -1 disapprove with the reason > > > > > > To learn more about KIE, please see https://kie.apache.org/ > > > > > > Checklist for reference: > > > > > > [ ] Download KIE artifacts are valid. > > > [ ] Checksums and PGP signatures are valid. > > > [ ] Source code distributions have correct names matching the current > > > release. > > > [ ] LICENSE and NOTICE files are correct. > > > [ ] All files have license headers if necessary. > > > [ ] No compiled archives bundled in source archive. > > > [ ] Can compile from source. > > > > > > For updated information on how to verify the release, please refer to: > > > https://kie.apache.org/docs/community/verify > > > > > > For updated information on how t
Re: [VOTE] Release Apache KIE(incubating) v10.0.0-rc3
With that clarification, the original thread and current bundles are a bit confusing to follow. I had assumed that the main problem was that the NOTICE files called out dependencies that were not Apache V2 licensed yet those third party licenses were not listed in the LICENSE file. If the NOTICE is calling out dependencies that aren't even packaged, it's a different problem as the NOTICE is just being overstated and that's probably fine for an initial release. Even if a license is compatible with our release process, it needs to be included in the LICENSE file. It is also confusing that you have multiple NOTICEs in your source release, typically we want just one. John On Thu, Nov 14, 2024 at 4:10 AM PJ Fanning wrote: > The only jar that I could find in the source release is: > > > incubator-kie-tools/packages/stunner-editors/errai-ui/src/test/resources/less.jar > > It would be ideal if this could be removed. > > apache-kie-10.0.0-incubating-sources.zip from > https://dist.apache.org/repos/dist/dev/incubator/kie/10.0.0-rc3/ > > I think it would also be useful if the KIE team could provide a 'How > to Build KIE from its source release' guide for IPMC reviewers. > > On Thu, 14 Nov 2024 at 03:21, John D. Ament wrote: > > > > On Wed, Nov 13, 2024 at 1:16 PM Alex Porcelli > wrote: > > > > > Hello everyone, > > > > > > This email serves as a call for votes to release Apache KIE > > > (Incubating) v10.0.0-rc3. In this release candidate we have made > > > efforts to incorporate feedback from the previous voting thread [1]. > > > > > > The Apache KIE community has reviewed and approved the release of > > > Apache KIE (Incubating) v10.0.0-rc3. We now kindly request IPMC > > > members to review and cast their votes on this release. > > > > > > Important Note: We have identified an issue with the NOTICE and > > > LICENSE files [2], but we hope this will not pose a blocker for the > > > release. > > > > > > > Based on the description, I think they are. In addition, you need to > > resolve the binaries in your source release. Typically if they are test > > artifacts, the source contents of them are available within the source > tree > > with a command to run to build the test artifacts, or a download location > > on where to pull them from would work as well. There is no one right > > answer that can be given. > > > > Also, I think you need to look at what a release is here at Apache. > While > > it's fine to have convenience binaries, a source release consists of the > > source code that makes those binaries. What we would typically vote on > is > > a source tarball that can be reviewed. The staged maven artifacts are a > > combination of source JARs, binary JARs and other files. How do I > compile > > the source jars to make the binary JARs? [1] may be of interest if you > > have not yet reviewed. > > > > So it's a -1 from me, johndament IPMC. > > > > John > > > > [1]: https://apache.org/dev/#releases > > > > > > > > > > Apache KIE(incubating) - The home of the most popular business > > > automation open-source technologies including Drools, jBPM, > > > SonataFlow, Optaplanner, Kogito and Tools. > > > > > > KIE community vote thread: > > > https://lists.apache.org/thread/nxx66ccognnk8fozt4nk11z7g57c7fnb > > > > > > Vote result thread: > > > https://lists.apache.org/thread/1hhkchlwt69fn9cd3lgok55mw61kn862 > > > > > > The release candidate: > > > https://dist.apache.org/repos/dist/dev/incubator/kie/10.0.0-rc3/ > > > > > > The maven staging repos for this release: > > > - Drools: > > > https://repository.apache.org/content/repositories/orgapachekie-1055 > > > - Optaplanner: > > > https://repository.apache.org/content/repositories/orgapachekie-1056 > > > - Kogito Runtimes: > > > https://repository.apache.org/content/repositories/orgapachekie-1057 > > > - Kogito Apps: > > > https://repository.apache.org/content/repositories/orgapachekie-1058 > > > - Kogito Apps - JITExecutor Native Linux: > > > https://repository.apache.org/content/repositories/orgapachekie-1059 > > > - Kogito Apps - JITExecutor Native Windows: > > > https://repository.apache.org/content/repositories/orgapachekie-1060 > > > - Kogito Apps - JITExecutor Native MacOS: > > > https://repository.apache.org/content/repositories/orgapachekie-1061 > > > - KIE Tools - JBPM Quarkus DevUI: > > > https://repository.apache.org/content/repositories/orgapachekie-1064 > > > - KIE Tools - Sonataflow Quarkus DevUI: > > > https://repository.apache.org/content/repositories/orgapachekie-1065 > > > > > > The artifacts are signed with PGP key corresponding to > > > [priv...@kie.apache.org], found in the KEYS file: > > > > > > https://downloads.apache.org/incubator/kie/KEYS > > > > > > The vote will be open for at least 72 hours until the necessary number > > > of votes are reached. > > > > > > Please vote accordingly: > > > [ ] +1 approve > > > [ ] +0 no opinion > > > [ ] -1 disapprove with the reason > > > > > > To learn more about KIE, please see https://kie.apa
Re: [VOTE] Release Apache KIE(incubating) v10.0.0-rc3
The only jar that I could find in the source release is: incubator-kie-tools/packages/stunner-editors/errai-ui/src/test/resources/less.jar It would be ideal if this could be removed. apache-kie-10.0.0-incubating-sources.zip from https://dist.apache.org/repos/dist/dev/incubator/kie/10.0.0-rc3/ I think it would also be useful if the KIE team could provide a 'How to Build KIE from its source release' guide for IPMC reviewers. On Thu, 14 Nov 2024 at 03:21, John D. Ament wrote: > > On Wed, Nov 13, 2024 at 1:16 PM Alex Porcelli wrote: > > > Hello everyone, > > > > This email serves as a call for votes to release Apache KIE > > (Incubating) v10.0.0-rc3. In this release candidate we have made > > efforts to incorporate feedback from the previous voting thread [1]. > > > > The Apache KIE community has reviewed and approved the release of > > Apache KIE (Incubating) v10.0.0-rc3. We now kindly request IPMC > > members to review and cast their votes on this release. > > > > Important Note: We have identified an issue with the NOTICE and > > LICENSE files [2], but we hope this will not pose a blocker for the > > release. > > > > Based on the description, I think they are. In addition, you need to > resolve the binaries in your source release. Typically if they are test > artifacts, the source contents of them are available within the source tree > with a command to run to build the test artifacts, or a download location > on where to pull them from would work as well. There is no one right > answer that can be given. > > Also, I think you need to look at what a release is here at Apache. While > it's fine to have convenience binaries, a source release consists of the > source code that makes those binaries. What we would typically vote on is > a source tarball that can be reviewed. The staged maven artifacts are a > combination of source JARs, binary JARs and other files. How do I compile > the source jars to make the binary JARs? [1] may be of interest if you > have not yet reviewed. > > So it's a -1 from me, johndament IPMC. > > John > > [1]: https://apache.org/dev/#releases > > > > > > Apache KIE(incubating) - The home of the most popular business > > automation open-source technologies including Drools, jBPM, > > SonataFlow, Optaplanner, Kogito and Tools. > > > > KIE community vote thread: > > https://lists.apache.org/thread/nxx66ccognnk8fozt4nk11z7g57c7fnb > > > > Vote result thread: > > https://lists.apache.org/thread/1hhkchlwt69fn9cd3lgok55mw61kn862 > > > > The release candidate: > > https://dist.apache.org/repos/dist/dev/incubator/kie/10.0.0-rc3/ > > > > The maven staging repos for this release: > > - Drools: > > https://repository.apache.org/content/repositories/orgapachekie-1055 > > - Optaplanner: > > https://repository.apache.org/content/repositories/orgapachekie-1056 > > - Kogito Runtimes: > > https://repository.apache.org/content/repositories/orgapachekie-1057 > > - Kogito Apps: > > https://repository.apache.org/content/repositories/orgapachekie-1058 > > - Kogito Apps - JITExecutor Native Linux: > > https://repository.apache.org/content/repositories/orgapachekie-1059 > > - Kogito Apps - JITExecutor Native Windows: > > https://repository.apache.org/content/repositories/orgapachekie-1060 > > - Kogito Apps - JITExecutor Native MacOS: > > https://repository.apache.org/content/repositories/orgapachekie-1061 > > - KIE Tools - JBPM Quarkus DevUI: > > https://repository.apache.org/content/repositories/orgapachekie-1064 > > - KIE Tools - Sonataflow Quarkus DevUI: > > https://repository.apache.org/content/repositories/orgapachekie-1065 > > > > The artifacts are signed with PGP key corresponding to > > [priv...@kie.apache.org], found in the KEYS file: > > > > https://downloads.apache.org/incubator/kie/KEYS > > > > The vote will be open for at least 72 hours until the necessary number > > of votes are reached. > > > > Please vote accordingly: > > [ ] +1 approve > > [ ] +0 no opinion > > [ ] -1 disapprove with the reason > > > > To learn more about KIE, please see https://kie.apache.org/ > > > > Checklist for reference: > > > > [ ] Download KIE artifacts are valid. > > [ ] Checksums and PGP signatures are valid. > > [ ] Source code distributions have correct names matching the current > > release. > > [ ] LICENSE and NOTICE files are correct. > > [ ] All files have license headers if necessary. > > [ ] No compiled archives bundled in source archive. > > [ ] Can compile from source. > > > > For updated information on how to verify the release, please refer to: > > https://kie.apache.org/docs/community/verify > > > > For updated information on how to build from source zip, please refer to: > > https://kie.apache.org/docs/community/build > > > > [1] - https://lists.apache.org/thread/oz1xfz48jwlw05sdy0wvtnrhn27jc72h > > [2] - https://lists.apache.org/thread/y9x068xwoqwrtzyrwhv06loxtt8v06fn > > > > Best, > > Alex > > > > - > > To unsubscribe,
Re: [VOTE] Release Apache KIE(incubating) v10.0.0-rc3
On Wed, Nov 13, 2024 at 1:16 PM Alex Porcelli wrote: > Hello everyone, > > This email serves as a call for votes to release Apache KIE > (Incubating) v10.0.0-rc3. In this release candidate we have made > efforts to incorporate feedback from the previous voting thread [1]. > > The Apache KIE community has reviewed and approved the release of > Apache KIE (Incubating) v10.0.0-rc3. We now kindly request IPMC > members to review and cast their votes on this release. > > Important Note: We have identified an issue with the NOTICE and > LICENSE files [2], but we hope this will not pose a blocker for the > release. > Based on the description, I think they are. In addition, you need to resolve the binaries in your source release. Typically if they are test artifacts, the source contents of them are available within the source tree with a command to run to build the test artifacts, or a download location on where to pull them from would work as well. There is no one right answer that can be given. Also, I think you need to look at what a release is here at Apache. While it's fine to have convenience binaries, a source release consists of the source code that makes those binaries. What we would typically vote on is a source tarball that can be reviewed. The staged maven artifacts are a combination of source JARs, binary JARs and other files. How do I compile the source jars to make the binary JARs? [1] may be of interest if you have not yet reviewed. So it's a -1 from me, johndament IPMC. John [1]: https://apache.org/dev/#releases > > Apache KIE(incubating) - The home of the most popular business > automation open-source technologies including Drools, jBPM, > SonataFlow, Optaplanner, Kogito and Tools. > > KIE community vote thread: > https://lists.apache.org/thread/nxx66ccognnk8fozt4nk11z7g57c7fnb > > Vote result thread: > https://lists.apache.org/thread/1hhkchlwt69fn9cd3lgok55mw61kn862 > > The release candidate: > https://dist.apache.org/repos/dist/dev/incubator/kie/10.0.0-rc3/ > > The maven staging repos for this release: > - Drools: > https://repository.apache.org/content/repositories/orgapachekie-1055 > - Optaplanner: > https://repository.apache.org/content/repositories/orgapachekie-1056 > - Kogito Runtimes: > https://repository.apache.org/content/repositories/orgapachekie-1057 > - Kogito Apps: > https://repository.apache.org/content/repositories/orgapachekie-1058 > - Kogito Apps - JITExecutor Native Linux: > https://repository.apache.org/content/repositories/orgapachekie-1059 > - Kogito Apps - JITExecutor Native Windows: > https://repository.apache.org/content/repositories/orgapachekie-1060 > - Kogito Apps - JITExecutor Native MacOS: > https://repository.apache.org/content/repositories/orgapachekie-1061 > - KIE Tools - JBPM Quarkus DevUI: > https://repository.apache.org/content/repositories/orgapachekie-1064 > - KIE Tools - Sonataflow Quarkus DevUI: > https://repository.apache.org/content/repositories/orgapachekie-1065 > > The artifacts are signed with PGP key corresponding to > [priv...@kie.apache.org], found in the KEYS file: > > https://downloads.apache.org/incubator/kie/KEYS > > The vote will be open for at least 72 hours until the necessary number > of votes are reached. > > Please vote accordingly: > [ ] +1 approve > [ ] +0 no opinion > [ ] -1 disapprove with the reason > > To learn more about KIE, please see https://kie.apache.org/ > > Checklist for reference: > > [ ] Download KIE artifacts are valid. > [ ] Checksums and PGP signatures are valid. > [ ] Source code distributions have correct names matching the current > release. > [ ] LICENSE and NOTICE files are correct. > [ ] All files have license headers if necessary. > [ ] No compiled archives bundled in source archive. > [ ] Can compile from source. > > For updated information on how to verify the release, please refer to: > https://kie.apache.org/docs/community/verify > > For updated information on how to build from source zip, please refer to: > https://kie.apache.org/docs/community/build > > [1] - https://lists.apache.org/thread/oz1xfz48jwlw05sdy0wvtnrhn27jc72h > [2] - https://lists.apache.org/thread/y9x068xwoqwrtzyrwhv06loxtt8v06fn > > Best, > Alex > > - > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > For additional commands, e-mail: general-h...@incubator.apache.org > >
