GitHub user Xuanwo created a discussion: Track release-verification issues found in OpenDAL 0.59.0-rc.1
During verification of the 0.59.0-rc.1 release candidate, I found several issues that should be tracked independently from the vote thread. ## Source package licensing The .NET and Node.js source archives include third-party `.gitignore` files with explicit upstream provenance, but their root `LICENSE` files do not account for those CC0 works: - `bindings/dotnet/.gitignore` derives from `github/gitignore`'s `VisualStudio.gitignore`. - `bindings/nodejs/.gitignore` was generated by Toptal's gitignore.io. The affected source-package LICENSE files should identify these components and their licenses or point to the bundled license text. ## Source headers The following substantive ASF-authored files do not contain the ASF header or the accepted three-line SPDX form: - `bindings/dotnet/OpenDAL/OpenDAL.csproj` - `bindings/dotnet/OpenDAL.Tests/OpenDAL.Tests.csproj` - `bindings/dotnet/examples/GettingStarted/GettingStarted.csproj` - `bindings/python/docs/examples/basic.ipynb` - `bindings/python/docs/examples/pandas.ipynb` - `bindings/python/docs/examples/polars.ipynb` HawkEye's default mode reports these file types as unknown and exits successfully, so the current release check does not cover them. ## Declared Rust MSRV `core/Cargo.toml` declares `rust-version = "1.91"`, but the locked `compfs` package does not build on rustc 1.91.1. `compio-buf 0.8.3` and `compio-executor 0.1.2` use unstable standard-library features. The same locked source builds on current stable Rust, which isolates this to the declared MSRV rather than the verification host. A minimal check is: ```shell cd core cargo +1.91.1 check --locked -p compfs ``` ## Native package license accounting The staged Maven Linux native JAR and the TestPyPI Linux wheel contain compiled MIT and ISC Rust dependencies, while their packaged license material only accounts for Apache-2.0 and the explicitly listed MPL components. Their LICENSE/DEPENDENCIES material should cover the bundled dependency set. This thread tracks the fixes independently of the release vote. GitHub link: https://github.com/apache/opendal/discussions/8211 ---- This is an automatically sent email for [email protected]. To unsubscribe, please send an email to: [email protected]
