Skip to content

Open API: Fix LICENSE and NOTICE files#15872

Open
manuzhang wants to merge 2 commits intoapache:mainfrom
manuzhang:open-api-license-notice-align
Open

Open API: Fix LICENSE and NOTICE files#15872
manuzhang wants to merge 2 commits intoapache:mainfrom
manuzhang:open-api-license-notice-align

Conversation

@manuzhang
Copy link
Copy Markdown
Member

@manuzhang manuzhang commented Apr 2, 2026

Align LICENSE and NOTICE files with changes in #15449.

@codex also identified some missing licenses and notices.

@manuzhang manuzhang added this to the Iceberg 1.11.0 milestone Apr 2, 2026
@manuzhang manuzhang force-pushed the open-api-license-notice-align branch from 3cc9d2c to 28b3071 Compare April 2, 2026 09:12
@manuzhang manuzhang changed the title Open API: Align LICENSE and NOTICE wording Open API: Fix LICENSE and NOTICE files Apr 2, 2026
@manuzhang manuzhang mentioned this pull request Apr 2, 2026
3 tasks
Co-authored-by: OpenAI Codex <noreply@openai.com>
@manuzhang manuzhang force-pushed the open-api-license-notice-align branch from 28b3071 to ba60dbe Compare April 2, 2026 10:06
@RussellSpitzer
Copy link
Copy Markdown
Member

Just a note we shouldn't need everything I listed in that issue now that Ryan has removed the Aliyun transitives. We'll probably want to re check everything again

@manuzhang
Copy link
Copy Markdown
Member Author

manuzhang commented Apr 2, 2026

@RussellSpitzer Yeah, I just rebased, rebuilt and asked Codex to check LICENSE file against the runtime jar.

@jbonofre
Copy link
Copy Markdown
Member

jbonofre commented Apr 3, 2026

@manuzhang thanks for the heads up. I'm doing a pass.

Copy link
Copy Markdown
Member

@jbonofre jbonofre left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I see some dependencies packaged in iceberg-open-api-test-fixtures-runtime but not in LICENSE:

  • Bouncy Castle
  • Nimbus JWT
  • JCIP (shaded in Nimbus)
  • Android Annotations
  • Jakarta Servlet (in addition of javax.servlet).

@manuzhang can you please double check ?

open-api/NOTICE Outdated

--------------------------------------------------------------------------------

This product bundles Apache Parquet Format with the following in its NOTICE file:
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

As the NOTICE file already contains:

This product includes software developed at
The Apache Software Foundation (http://www.apache.org/)

it's not strictly required to have the ASF NOTICE (or with special reasons).

It doesn't hurt to keep it, but maybe something to consider as follow up.

Generally speaking, we should keep NOTICE file as simple as possible.

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I've removed all ASF projects' notices except for Apache Hadoop, which includes a section on export control.

@manuzhang
Copy link
Copy Markdown
Member Author

@jbonofre Thanks for the review. I'm not sure how Bouncy Castle's license should be included. Same as MIT?


Project URL: https://www.bouncycastle.org/java.html
License: MIT - https://www.bouncycastle.org/about/license/
LICENSE
Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The following is copied from their website and it's claimed

Bouncy Castle APIs are released under the MIT license. Please note LICENSE should be read in the same way as the MIT license.

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes it's MIT like

@manuzhang manuzhang requested a review from jbonofre April 7, 2026 07:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants