Hi Amogh

Regarding OpenAPI, here's the issues I found in
the iceberg-open-api-1.10.2.jar file (from the Nexus staging repository):
- several versions are documented in the LICENSE file, but mismatch the
actual version (jackson, commons-*, ...)
- several dependencies are documented in the LICENSE file, but are not
actually bundled in the jar (caffeine, ...)
- several dependencies are bundled in the jar, but not documented in the
LICENSE file (azure sdk, bigquery, netty, ...)

I'm updating the PR to fix that.

Regards
JB

On Tue, Apr 21, 2026 at 4:24 PM Amogh Jahagirdar <[email protected]> wrote:

> I've taken a pass over it, but it sounds like there are some more open-api
> license/notice changes @Jean-Baptiste Onofré <[email protected]> is looking
> to make in that change?
>
> Thanks,
> Amogh Jahagirdar
>
> On Mon, Apr 20, 2026 at 6:53 AM Maximilian Michels <[email protected]> wrote:
>
>> Thanks JB! I've taken a look at the PR.
>>
>> -Max
>>
>> On Sun, Apr 19, 2026 at 6:43 AM Jean-Baptiste Onofré <[email protected]>
>> wrote:
>> >
>> > Here's the PR: https://github.com/apache/iceberg/pull/16043
>> >
>> > Regards
>> > JB
>> >
>> > On Sat, Apr 18, 2026 at 5:52 AM Jean-Baptiste Onofré <[email protected]>
>> wrote:
>> >>
>> >> Hi
>> >>
>> >> Yes, the PR for 1.10.x branch is on the way. It will be available soon.
>> >>
>> >> Thanks Manu for the issue!
>> >>
>> >> Regards
>> >> JB
>> >>
>> >> On Fri, Apr 17, 2026 at 7:18 PM Amogh Jahagirdar <[email protected]>
>> wrote:
>> >>>
>> >>> Thanks JB! When the PR for fixing the license/notice is ready just
>> let us know. I went ahead and merged the trailing slash fix for HMS since I
>> think it does make sense to include in a patch release.
>> >>>
>> >>> On Fri, Apr 17, 2026 at 8:13 AM Manu Zhang <[email protected]>
>> wrote:
>> >>>>
>> >>>> Hi JB,
>> >>>> I created https://github.com/apache/iceberg/issues/16013 for you.
>> >>>>
>> >>>> Meanwhile, I think it will be good to get in
>> https://github.com/apache/iceberg/pull/16010, back-port of
>> https://github.com/apache/iceberg/pull/14295, fixing the trailing slash
>> issue for database paths in HMS.
>> >>>>
>> >>>> Thanks,
>> >>>> Manu
>> >>>>
>> >>>>
>> >>>> On Fri, Apr 17, 2026 at 12:58 AM Kevin Liu <[email protected]>
>> wrote:
>> >>>>>
>> >>>>> Here's the runtime-deps.txt file diff between
>> `apache-iceberg-1.10.1` and `1.10.x`
>> >>>>> https://github.com/kevinjqliu/iceberg/pull/17/files
>> >>>>>
>> >>>>> Looks like we've mostly just change the library versions.
>> >>>>>
>> >>>>> That said, we should still ensure that all entries are present in
>> the respective NOTICE and LICENSE files. Thanks for catching that, JB!
>> >>>>>
>> >>>>> Best,
>> >>>>> Kevin Liu
>> >>>>>
>> >>>>> On Thu, Apr 16, 2026 at 8:08 AM Manu Zhang <[email protected]>
>> wrote:
>> >>>>>>>
>> >>>>>>> Unfortunately, due to a change in the dependencies set, we can't
>> easily backport the commit from the main branch.
>> >>>>>>
>> >>>>>>
>> >>>>>> Yes, I think JB's fix for main is
>> https://github.com/apache/iceberg/pull/15449 and I'm also working on a
>> fix for the open-api module.
>> >>>>>> BTW, is this a new issue in 1.10.x that we have to fix in 1.10.2,
>> or is it a long standing issue that we can fix later on main branch?
>> >>>>>>
>> >>>>>>
>> >>>>>> On Thu, Apr 16, 2026 at 11:00 PM Jean-Baptiste Onofré <
>> [email protected]> wrote:
>> >>>>>>>
>> >>>>>>> Unfortunately, due to a change in the dependencies set, we can't
>> easily backport the commit from the main branch.
>> >>>>>>>
>> >>>>>>> I can propose a PR to fix the licenses in the 1.10.x branch. I
>> will work on it right now.
>> >>>>>>>
>> >>>>>>> Regards
>> >>>>>>> JB
>> >>>>>>>
>> >>>>>>> On Thu, Apr 16, 2026 at 4:23 PM Maximilian Michels <
>> [email protected]> wrote:
>> >>>>>>>>
>> >>>>>>>> @JB Thanks for watching the licenses! Which commits do we need to
>> >>>>>>>> backport to address this?
>> >>>>>>>>
>> >>>>>>>> -Max
>> >>>>>>>>
>> >>>>>>>> On Wed, Apr 15, 2026 at 4:28 PM Jean-Baptiste Onofré <
>> [email protected]> wrote:
>> >>>>>>>> >
>> >>>>>>>> > 0 (non binding)
>> >>>>>>>> >
>> >>>>>>>> > I checked:
>> >>>>>>>> > - source distribution
>> >>>>>>>> > -- signature and checksum are good
>> >>>>>>>> > -- LICENSE and NOTICE are correct
>> >>>>>>>> > -- ASF header is present in all expected files
>> >>>>>>>> > -- No compiled/binary file found in the source distribution
>> >>>>>>>> > - iceberg-aws-bundle
>> >>>>>>>> > -- LICENSE is not complete:
>> >>>>>>>> > --- AWS SDK cloudwatch is not in the LICENSE
>> >>>>>>>> > --- AWS SDK retries is not in the LICENSE
>> >>>>>>>> > --- AWS SDK s3control is not in the LICENSE
>> >>>>>>>> > --- failsafe is not in the LICENSE (shaded in AWS S3)
>> >>>>>>>> > --- parquet is not in the LICENSE (shaded in AWS S3)
>> >>>>>>>> > --- jctools is not in the LICENSE (shaded in Netty)
>> >>>>>>>> > - iceberg-azure-bundle
>> >>>>>>>> > -- LICENSE is not correct:
>> >>>>>>>> > --- azure-core is not in the LICENSE
>> >>>>>>>> > --- azure-xml is not in the LICENSE
>> >>>>>>>> > --- jctools is not in the LICENSE (shaded in Netty)
>> >>>>>>>> > --- gson is not in the LICENSE (shaded in Jose)
>> >>>>>>>> > --- jackson-core is not correct in LICENSE (LICENSE contains
>> 2.18.4, but the jar version seems to be 2.18.4.1)
>> >>>>>>>> > - iceberg-gcp-bundle
>> >>>>>>>> > -- LICENSE and NOTICE are correct here
>> >>>>>>>> > - iceberg-flink-runtime
>> >>>>>>>> > -- LICENSE is not correct:
>> >>>>>>>> > --- openhft hashing is not in the LICENSE (shaded in Parquet)
>> >>>>>>>> > --- Apache DataSketches is not in the LICENSE
>> >>>>>>>> > --- LocationTech JTS is not in the LICENSE
>> >>>>>>>> > - iceberg-spark-runtime
>> >>>>>>>> > -- LICENSE is not correct:
>> >>>>>>>> > --- Eclipse Collections is not in the LICENSE
>> >>>>>>>> > --- LocationTech JTS is not in the LICENSE
>> >>>>>>>> > --- Apache DataSketches is not in the LICENSE
>> >>>>>>>> > --- openhft hashing is not in the LICENSE (shaded in Parquet)
>> >>>>>>>> >
>> >>>>>>>> > I'm happy to propose a PR to fix that on the 1.10.x branch
>> (main should be good already, I will do a pass).
>> >>>>>>>> >
>> >>>>>>>> > Regards
>> >>>>>>>> > JB
>> >>>>>>>> >
>> >>>>>>>> > On Tue, Apr 14, 2026 at 5:54 AM Amogh Jahagirdar <
>> [email protected]> wrote:
>> >>>>>>>> >>
>> >>>>>>>> >> Hi Everyone,
>> >>>>>>>> >>
>> >>>>>>>> >> I propose that we release the following RC as the official
>> Apache Iceberg 1.10.2 release.
>> >>>>>>>> >>
>> >>>>>>>> >> The commit ID is 1f76a4951710e0a5abab5c9cf5603693ee2f4753
>> >>>>>>>> >> * This corresponds to the tag: apache-iceberg-1.10.2-rc0
>> >>>>>>>> >> *
>> https://github.com/apache/iceberg/commits/apache-iceberg-1.10.2-rc0
>> >>>>>>>> >> *
>> https://github.com/apache/iceberg/tree/1f76a4951710e0a5abab5c9cf5603693ee2f4753
>> >>>>>>>> >>
>> >>>>>>>> >> The release tarball, signature, and checksums are here:
>> >>>>>>>> >> *
>> https://dist.apache.org/repos/dist/dev/iceberg/apache-iceberg-1.10.2-rc0
>> >>>>>>>> >>
>> >>>>>>>> >> You can find the KEYS file here:
>> >>>>>>>> >> * https://downloads.apache.org/iceberg/KEYS
>> >>>>>>>> >>
>> >>>>>>>> >> Convenience binary artifacts are staged on Nexus. The Maven
>> repository URL is:
>> >>>>>>>> >> *
>> https://repository.apache.org/content/repositories/orgapacheiceberg-1277/
>> >>>>>>>> >>
>> >>>>>>>> >> Please download, verify, and test.
>> >>>>>>>> >>
>> >>>>>>>> >> Instructions for verifying a release can be found here:
>> >>>>>>>> >> *
>> https://iceberg.apache.org/how-to-release/#how-to-verify-a-release
>> >>>>>>>> >>
>> >>>>>>>> >> Please vote in the next 72 hours.
>> >>>>>>>> >>
>> >>>>>>>> >> [ ] +1 Release this as Apache Iceberg 1.10.2
>> >>>>>>>> >> [ ] +0
>> >>>>>>>> >> [ ] -1 Do not release this because...
>> >>>>>>>> >>
>> >>>>>>>> >> Only PMC members have binding votes, but other community
>> members are encouraged to cast
>> >>>>>>>> >> non-binding votes. This vote will pass if there are 3 binding
>> +1 votes and more binding
>> >>>>>>>> >> +1 votes than -1 votes.
>>
>

Reply via email to