chore(licensing): refresh LICENSE-binary for transitive drift across services#6396
Conversation
Automated Reviewer SuggestionsBased on the
|
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #6396 +/- ##
=========================================
Coverage 69.81% 69.81%
Complexity 3382 3382
=========================================
Files 1142 1142
Lines 44839 44839
Branches 4950 4950
=========================================
Hits 31304 31304
Misses 11881 11881
Partials 1654 1654
*This pull request uses carry forward flags. Click here to find out more. ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
There was a problem hiding this comment.
Pull request overview
Updates Texera’s per-module binary license inventories to eliminate “LICENSE-binary drift” reported by the nightly checker, keeping the recorded third-party artifact versions aligned with what each service/module actually bundles.
Changes:
- Refreshed JVM
LICENSE-binaryjar version entries across multiple services (e.g., Jackson JAX-RS, Guice, R2DBC SPI, ZooKeeper, Jetty WebSocket, BouncyCastle). - Refreshed Amber’s
LICENSE-binary-pythonpinned package versions to match the currently installed/bundled set. - Kept license grouping/structure intact while adjusting only the reported drift entries.
Reviewed changes
Copilot reviewed 8 out of 8 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
| workflow-compiling-service/LICENSE-binary | Updates bundled jar version entries (e.g., Jackson JAX-RS, Guice, R2DBC SPI, ZooKeeper, Jetty WebSocket, bcprov) to match drift checker output. |
| notebook-migration-service/LICENSE-binary | Updates bundled io.r2dbc:r2dbc-spi version entry to clear drift. |
| file-service/LICENSE-binary | Updates bundled jar version entries (same drifted set as applicable for this service) to match actual bundle. |
| config-service/LICENSE-binary | Updates bundled io.r2dbc:r2dbc-spi version entry to clear drift. |
| computing-unit-managing-service/LICENSE-binary | Updates bundled jar version entries (Jackson JAX-RS, Guice, R2DBC SPI, ZooKeeper, Jetty WebSocket) to match actual bundle. |
| amber/LICENSE-binary-python | Updates drifted Python package version pins (e.g., huggingface-hub, regex, tzdata, anyio, typer, tqdm, aiohappyeyeballs). |
| amber/LICENSE-binary-java | Updates drifted jar version entries (e.g., Jackson JAX-RS + jaxb-annotations module, Guice, R2DBC SPI, ZooKeeper, Jetty, json4s, bcprov, checker-qual, Jakarta activation/xmlbind). |
| access-control-service/LICENSE-binary | Updates bundled io.r2dbc:r2dbc-spi version entry to clear drift. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
What changes were proposed in this PR?
Refreshes the per-module
LICENSE-binaryfiles onmainto match the versions actually bundled, clearing the drift reported by the nightly license-binary checker (run 29248239204, 2026-07-13). Version-only edits; license groupings unchanged.JVM — transitive jars pulled in by recent dependency bumps (hadoop/iceberg/etc.), applied per service to match each service's own bundle:
amber/LICENSE-binary-java(20): jackson-jaxrs 2.12.7→2.18.6 (×3), guice/guice-servlet 4.2.3→5.1.0, zookeeper/-jute 3.8.4→3.8.6, jetty-client/io/util + websocket-api/client/common 9.4.57→9.4.58, json4s-ast/-jackson-core 4.0.1→4.0.6, r2dbc-spi 0.9.0→1.0.0, checker-qual 3.52.0→3.55.1, jakarta.activation-api 1.2.1→1.2.2, jakarta.xml.bind-api 3.0.0→2.3.3, bcprov 1.82→1.84computing-unit-managing-service(10),file-service(11, +bcprov),workflow-compiling-service(11, +bcprov): the subset each actually bundlesconfig-service,access-control-service,notebook-migration-service(1 each): r2dbc-spi 0.9.0→1.0.0 onlyPython —
amber/LICENSE-binary-python(11): aiohappyeyeballs 2.6.2→2.7.1, anyio 4.14.1→4.14.2, charset-normalizer 3.4.7→3.4.9, filelock 3.29.4→3.29.7, greenlet 3.5.2→3.5.3, huggingface-hub 1.20.1→1.23.0, regex 2026.5.9→2026.7.10, scramp 1.4.9→1.4.12, tqdm 4.68.3→4.68.4, typer 0.25.1→0.26.8, tzdata 2026.2→2026.3Only the entries the checker reported per file were changed; e.g.
json4s/checker-qualin the service files were left as-is because those services bundle the older versions (no drift).Any related issues, documentation, discussions?
Closes #5889.
How was this PR tested?
Version-only metadata change, verified against nightly run 29248239204. Transitive versions float with PyPI/Maven resolution, so a re-run may surface newer drift.
Was this PR authored or co-authored using generative AI tooling?
Generated-by: Claude Code (Claude Opus 4.8)