Skip to content

chore: several fixes on the LICENSE/NOTICE - #15449

Merged
RussellSpitzer merged 13 commits into
apache:mainfrom
jbonofre:license-polish
Mar 12, 2026
Merged

RussellSpitzer merged 13 commits into
apache:mainfrom
jbonofre:license-polish

Conversation

@jbonofre

Copy link
Copy Markdown
Member
  • Important fixes
    • include BSD/MIT license content inline in all LICENSE files
    • update copyright year to 2026
    • select a single license (when dual) in all LICENSE files
    • remove dependency versions to relax the updates (dependabot)
  • Minor fixes
    • Use the "This product bundles"/"This product includes code" wording everywhere
    • Use the same AL v2 license wording everywhere

* Important fixes
** include BSD/MIT license content inline in all LICENSE files
** update copyright year to 2026
** select a single license (when dual) in all LICENSE files
** remove dependency versions to relax the updates (dependabot)
* Minor fixes
** Use the "This product bundles"/"This product includes code" wording everywhere
** Use the same AL v2 license wording everywhere
@jbonofre jbonofre changed the title Several fixes on the LICENSE/NOTICE: chore: several fixes on the LICENSE/NOTICE Feb 26, 2026
@jbonofre

Copy link
Copy Markdown
Member Author

I'm also doing a full pass on the dependencies use.

@jbonofre
jbonofre requested a review from manuzhang February 26, 2026 09:46
@jbonofre

Copy link
Copy Markdown
Member Author

@manuzhang I saw several missing dependencies missing in LICENSEs (flink-runtime, ...).

I'm doing a full pass.

It seems the GCP (BigQuery, ...) support added several dependencies but the LICENSE files have not been updated.

@manuzhang

Copy link
Copy Markdown
Member

Is there a tool that can check whether license info of dependencies is missing?

@jbonofre

Copy link
Copy Markdown
Member Author

@manuzhang I have scripts (using jar tvf/find to find what's bundled, etc). For this PR, I'm doing also manual checks/updated

RussellSpitzer added a commit to RussellSpitzer/iceberg that referenced this pull request Mar 2, 2026
- Reactive Streams: correct license label from MIT to MIT-0
  (MIT No Attribution is a distinct SPDX identifier)
- Findbugs jsr305: correct license from Apache 2.0 to BSD 3-Clause
  with inline text (per the project's own LICENSE file)
- Google API Common/GAX/Auth Library: use BSD 3-Clause consistently
  in kafka-connect bundles to match gcp-bundle and actual repo LICENSE files
- Jackson: update dead codehaus.org URL to github.com/FasterXML/jackson
- Fix typos: "bt" -> "by", "prodduct" -> "product", "produt" -> "product"
- Remove empty section artifact in azure-bundle LICENSE
- Remove duplicate Animal Sniffer Annotations line in flink LICENSE files

Made-with: Cursor

@RussellSpitzer RussellSpitzer left a comment •

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Detailed review comments have been moved to the fix PR: jbonofre#1 (comment)

@RussellSpitzer

Copy link
Copy Markdown
Member

Had Cursor go through and take a look for any discrepancies, they are in the PR above^

@jbonofre

jbonofre commented Mar 3, 2026

Copy link
Copy Markdown
Member Author

I just updated the PR to have all fixes there.

@jbonofre

jbonofre commented Mar 3, 2026

Copy link
Copy Markdown
Member Author

@RussellSpitzer @manuzhang I completed the full pass and fixes on all LICENSE and NOTICE.

Comment thread aws-bundle/LICENSE Resolved
Comment thread flink/v1.20/flink-runtime/LICENSE Resolved
Comment thread flink/v1.20/flink-runtime/NOTICE Resolved
Comment thread gcp-bundle/NOTICE Resolved
License (from POM): The Apache Software License, Version 2.0 - http://www.apache.org/licenses/LICENSE-2.0.txt

--------------------------------------------------------------------------------
This product bundles Android Annotations.

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This dependency looks strange to me.

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In the kafka-connect runtime distribution (zip file), you can find lib/annotations-4.1.1.4.jar corresponding to this artifact: https://repo1.maven.org/maven2/com/google/android/annotations/4.1.1.4/
That's the reason why we have to "document" it in the LICENSE file.

Comment thread aws-bundle/LICENSE
Group: org.reactivestreams Name: reactive-streams Version: 1.0.4
Project URL: http://reactive-streams.org
License: CC0 - http://creativecommons.org/publicdomain/zero/1.0/
License: MIT

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do we need this to be MIT-0 ?

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This got flagged in azure-bundle, kafka-connect/main and kafka-connect/hive

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The problem is that line 245 states this is MIT-0 and not MIT

So either we have the copyright text wrong below or we have the SPDX wrong

Comment thread flink/v1.20/flink-runtime/LICENSE Resolved

This product bundles Google GAX.

--------------------------------------------------------------------------------

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This separator belongs on line 678 (Same issue in other spark bundles)

Comment thread flink/v2.0/flink-runtime/LICENSE Resolved
Comment thread flink/v2.0/flink-runtime/LICENSE Resolved
@RussellSpitzer

Copy link
Copy Markdown
Member

Not sure if it matters but all the jackson links still point to codehaus which is a dead link now

@jbonofre

jbonofre commented Mar 4, 2026

Copy link
Copy Markdown
Member Author

@manuzhang @RussellSpitzer I addressed your comments. Thanks !

@manuzhang manuzhang added this to the Iceberg 1.11.0 milestone Mar 9, 2026
@manuzhang
manuzhang requested a review from RussellSpitzer March 9, 2026 23:53
@RussellSpitzer
RussellSpitzer merged commit fb2c8ac into apache:main Mar 12, 2026
5 checks passed
@RussellSpitzer

Copy link
Copy Markdown
Member

Thanks @jbonofre ! Also thanks @manuzhang for reviewing

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants