Azure: Fix LICENSE, NOTICE, and runtime-deps for azure-bundle#16181
Open
kevinjqliu wants to merge 4 commits intoapache:mainfrom
Open
Azure: Fix LICENSE, NOTICE, and runtime-deps for azure-bundle#16181kevinjqliu wants to merge 4 commits intoapache:mainfrom
kevinjqliu wants to merge 4 commits intoapache:mainfrom
Conversation
f3b41ed to
1a1ebe7
Compare
rdblue
reviewed
May 5, 2026
rdblue
reviewed
May 5, 2026
rdblue
reviewed
May 5, 2026
stevenzwu
reviewed
May 5, 2026
Co-authored-by: Copilot <copilot@github.com>
Co-authored-by: Copilot <copilot@github.com>
Co-authored-by: Copilot <copilot@github.com>
kevinjqliu
commented
May 6, 2026
Comment on lines
-210
to
-211
| | The MIT License (MIT) | ||
| | |
Contributor
Author
There was a problem hiding this comment.
formatting issue, align with the rest of the file
kevinjqliu
commented
May 6, 2026
Comment on lines
-248
to
-253
| | MIT License | ||
| | | ||
| | Copyright (c) Microsoft Corporation. All rights reserved. | ||
| | | ||
| | Permission is hereby granted, free of charge, to any person obtaining a copy | ||
| | of this software and associated documentation files (the "Software"), to deal |
Contributor
Author
There was a problem hiding this comment.
formatting issue, remove the redundant MIT License, added a new line, and realign the rest of the lines
Contributor
Author
|
thanks for the reviews, i applied the formatting fixes |
stevenzwu
approved these changes
May 6, 2026
RussellSpitzer
approved these changes
May 6, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Fixes license compliance gaps in
azure-bundlefound by auditing the shadow JAR contents against LICENSE/NOTICE declarations.Exclude logging dependencies, following same pattern in #16105
Build and verify
./gradlew :iceberg-azure-bundle:shadowJar -x test ./gradlew :iceberg-azure-bundle:checkRuntimeDepsLICENSE changes
Added FastDoubleParser (MIT) — Required per Category B. Shaded into Jackson Core at
org/apache/iceberg/azure/shaded/com/fasterxml/jackson/core/internal/shaded/fdp/(52 class files). Full MIT text added.Upstream: https://github.com/wrandelshofer/FastDoubleParser/blob/main/LICENSE
Added fast_float (MIT) — Required per Category B. Bundled transitively by FastDoubleParser.
Upstream: https://github.com/fastfloat/fast_float/blob/main/LICENSE-MIT
Added bigint (BSD 2-Clause) — Required per Category B. Bundled transitively by FastDoubleParser.
Upstream: https://github.com/tbuktu/bigint/blob/master/LICENSE
Added MSAL4J Persistence Extension (MIT) — Required per Category B. 61 classes at
com/microsoft/aad/msal4jextensions/.Upstream: https://github.com/AzureAD/microsoft-authentication-library-for-java/blob/dev/LICENSE
Added Apache Tomcat Native / netty-tcnative (Apache 2.0) — Not strictly required (Apache-licensed) but consistent with existing convention of declaring all bundled components. 37 tcnative resources in JAR.
Upstream: https://tomcat.apache.org/native-doc/
Added Reactor Pool (Apache 2.0) — Consistent with convention. 35 classes at
reactor/netty/internal/shaded/reactor/pool/.Replaced "Reactor AddOns" with "Aalto XML" (Apache 2.0) — Reactor AddOns (reactor-extra) is not present in the JAR (0 classes). Aalto XML is bundled by Azure SDK at
com/azure/xml/implementation/aalto/(72 classes).Upstream: https://github.com/FasterXML/aalto-xml
Reactive Streams (MIT-0) — Corrected license label from
MITtoMIT-0. The upstream POM declares<name>MIT-0</name>and source headers state "Licensed under MIT No Attribution (SPDX: MIT-0)". The license text already reflected MIT-0 (no attribution clause), but theLicense:label was inaccurate. Also removed redundant| MIT No Attributionheader line from the quoted block since the license name is already conveyed by theLicense: MIT-0label.Upstream POM: https://repo1.maven.org/maven2/org/reactivestreams/reactive-streams/1.0.4/reactive-streams-1.0.4.pom
Upstream source: https://github.com/reactive-streams/reactive-streams-jvm/blob/master/LICENSE
NOTICE changes
jackson-coreNOTICE references the shaded FastDoubleParser copy and its MIT copyright and includesCopyright 2007-, Tatu Saloranta (tatu.saloranta@iki.fi)but the old gcp-bundle NOTICE omitted it. Required: ASF policy mandates propagating upstream NOTICE contents.