Automatic license generation is definitely NOT the right approach. We need to know what we are shipping and cannot automate it.
In this case, we need to have known that we were adding new dependencies to the runtime Jars because we must check that they have compatible licenses and that we are complying with all of the content in their NOTICE files. What's more, I'm surprised to see that this change was backported into a patch release, which should not be changing dependencies! I suggest we remove this to unblock the 1.10.1 release. On Fri, Dec 12, 2025 at 7:49 AM Kevin Liu <[email protected]> wrote: > Thank you JB! This is the commit [1] that added > `iceberg-bigquery` dependency to spark/flink. > > Perhaps it's time to revive Bryan's PR [2] to automate the LICENSE > generation. I ran this PR against the 1.10.x branch and it caught the above > issue. I'll bring this up in a separate thread. > > Best, > Kevin Liu > > > [1] > https://github.com/apache/iceberg/commit/16f5bc6934e2a7d172936b679184edc27fc7fa29 > [2] https://github.com/apache/iceberg/pull/11977 > > On Fri, Dec 12, 2025 at 6:29 AM Jean-Baptiste Onofré <[email protected]> > wrote: > >> Hi everyone, >> >> I am reverting my vote to -1 (non-binding). >> >> I have found several issues in the spark-runtime and flink-runtime >> LICENSE files related to the shading of Google Bigquery and its >> dependencies. For example, the Spark runtime for V4 needs to document >> licenses for Google Cloud SDK, Google APIs, gRPC, and protobuf, among >> others. >> >> I am preparing pull requests to address these issues on both the main and >> 1.10.x branches. >> >> Regards, >> JB >> >> On Tue, Dec 9, 2025 at 8:47 AM huaxin gao <[email protected]> wrote: >> >>> Hi everyone, >>> >>> This is a restarted vote for Apache Iceberg 1.10.1 RC0. The previous >>> vote was >>> >>> cancelled because the Nexus staging repositories referenced there were >>> >>> incomplete. The source release (tag apache-iceberg-1.10.1-rc0, commit >>> >>> 75b7f60f103b86b295fe4f108c8487896e439dd3 and tarball on dist.apache.org) >>> is >>> >>> unchanged; only the Nexus staging repository URL has been corrected. >>> >>> The commit ID is 75b7f60f103b86b295fe4f108c8487896e439dd3 >>> >>> * This corresponds to the tag: apache-iceberg-1.10.1-rc0 >>> >>> * https://github.com/apache/iceberg/commits/apache-iceberg-1.10.1-rc0 >>> >>> * >>> https://github.com/apache/iceberg/tree/75b7f60f103b86b295fe4f108c8487896e439dd3 >>> >>> The release tarball, signature, and checksums are here: >>> >>> * >>> https://dist.apache.org/repos/dist/dev/iceberg/apache-iceberg-1.10.1-rc0 >>> >>> You can find the KEYS file here: >>> >>> * https://downloads.apache.org/iceberg/KEYS >>> >>> Convenience binary artifacts are staged on Nexus. The Maven repository >>> URL is: >>> >>> * >>> https://repository.apache.org/content/repositories/orgapacheiceberg-1272/ >>> >>> Please download, verify, and test. >>> >>> Instructions for verifying a release can be found here: >>> >>> * https://iceberg.apache.org/how-to-release/#how-to-verify-a-release >>> >>> Please vote in the next 72 hours. >>> >>> [ ] +1 Release this as Apache Iceberg 1.10.1 >>> >>> [ ] +0 >>> >>> [ ] -1 Do not release this because... >>> >>> Only PMC members have binding votes, but other community members are >>> encouraged to cast >>> >>> non-binding votes. This vote will pass if there are 3 binding +1 votes >>> and more binding >>> >>> +1 votes than -1 votes. >>> >>> Thanks, >>> >>> Huaxin >>> >>>
