Thanks Chesnay for going through the release notes. I've updated them
accordingly.

Concerning the test dependency and the LICENSE/NOTICE files, I'm looking
into it and will report back.

Cheers,
Till

On Wed, Nov 21, 2018 at 3:46 PM Chesnay Schepler <ches...@apache.org> wrote:

> Our LICENSE/NOTICE files in the binary distribution may also be botched
> (and may have been for quite some time).
>
> As per http://www.apache.org/dev/licensing-howto.html#binary "|[...]
> LICENSE| and |NOTICE| must *exactly* represent the contents of the
> distribution they reside in.", which also applies to binary
> distributions as "/Any redistribution must obey the licensing
> requirements of the contents."/
>
> My conclusion is that any dependency bundled in the distribution must be
> accounted for in the NOTICE/LICENSE files. Given that we already include
> several MIT licenses in the LICENSE file (exclusively WebUI stuff) it
> thus follows that at the very least all MIT dependencies should be
> listed here.
>
> On 21.11.2018 15:04, Chesnay Schepler wrote:
> > I may have found a potential blocker while looking at dependencies:
> >
> > flink-tests now has a non-optional test dependency on oshi-core, which
> > is licensed under EPL 1.0.
> >
> > As per https://issues.apache.org/jira/browse/LEGAL-207, test
> > dependencies are not exempt from license restrictions.
> >
> > We thus have to make this dependency optional or provide some other
> > opt-in mechanism for users.
> >
> > On 20.11.2018 15:30, Till Rohrmann wrote:
> >> Hi everyone,
> >> Please review and vote on the release candidate #2 for the version
> >> 1.7.0,
> >> as follows:
> >> [ ] +1, Approve the release
> >> [ ] -1, Do not approve the release (please provide specific comments)
> >>
> >>
> >> The complete staging area is available for your review, which includes:
> >> * JIRA release notes [1],
> >> * the official Apache source release and binary convenience releases
> >> to be
> >> deployed to dist.apache.org [2], which are signed with the key with
> >> fingerprint 1F302569A96CFFD5 [3],
> >> * all artifacts to be deployed to the Maven Central Repository [4],
> >> * source code tag "release-1.7.0-rc2" [5],
> >>
> >> Please use this document for coordinating testing efforts: [6]
> >>
> >> The vote will be open for at least 72 hours. It is adopted by majority
> >> approval, with at least 3 PMC affirmative votes.
> >>
> >> Thanks,
> >> Till
> >>
> >> [1]
> >>
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12315522&version=12343585
> >>
> >> [2] https://dist.apache.org/repos/dist/dev/flink/flink-1.7.0-rc2/
> >> [3] https://dist.apache.org/repos/dist/release/flink/KEYS
> >> [4]
> >> https://repository.apache.org/content/repositories/orgapacheflink-1194
> >> [5] https://github.com/apache/flink/tree/release-1.7.0-rc2
> >> [6]
> >>
> https://docs.google.com/document/d/18SqvSFQLru0JDkCBZ5356yNmcZgYBEn1ydqg5VFEpiw/edit?usp=sharing
> >>
> >> Pro-tip: you can create a settings.xml file with these contents:
> >>
> >> <settings>
> >> <activeProfiles>
> >>    <activeProfile>flink-1.7.0</activeProfile>
> >> </activeProfiles>
> >> <profiles>
> >>    <profile>
> >>      <id>flink-1.7.0</id>
> >>      <repositories>
> >>        <repository>
> >>          <id>flink-1.7.0</id>
> >>          <url>
> >>
> >> https://repository.apache.org/content/repositories/orgapacheflink-1194/
> >>          </url>
> >>        </repository>
> >>        <repository>
> >>          <id>archetype</id>
> >>          <url>
> >>
> >> https://repository.apache.org/content/repositories/orgapacheflink-1194/
> >>          </url>
> >>        </repository>
> >>      </repositories>
> >>    </profile>
> >> </profiles>
> >> </settings>
> >>
> >> And reference that in you maven commands via --settings
> >> path/to/settings.xml. This is useful for creating a quickstart based
> >> on the
> >> staged release and for building against the staged jars.
> >>
> >
> >
>
>

Reply via email to