Robert, The Spark client has three License files under the root as the following expanded file list shows. I double checked with JB a few days ago. The feedback is fine. I also double checked the Iceberg Spark run time jar, which has the same licence thing you described here. I'm not an expert on licenses. Can you share the advice?
*Polaris Spark Client jar:* -rw-r--r--@ 1 ygu staff 11K Feb 1 1980 LICENSE-EPL-1.0.txt -rw-r--r--@ 1 ygu staff 1.5K Feb 1 1980 LICENSE-EDL-1.0.txt -rw-r--r--@ 1 ygu staff 26K Feb 1 1980 LICENSE ygu@FM4LQ4GJ90 tmp % l META-INF total 480 drwxr-xr-x@ 8 ygu staff 256B Feb 1 1980 versions/ -rw-r--r--@ 1 ygu staff 3.0K Feb 1 1980 thirdparty-LICENSE drwxr-xr-x@ 270 ygu staff 8.4K Feb 1 1980 services/ drwxr-xr-x@ 8 ygu staff 256B Feb 1 1980 proguard/ -rw-r--r--@ 1 ygu staff 22K Feb 1 1980 openapi.yaml drwxr-xr-x@ 4 ygu staff 128B Feb 1 1980 openapi/ -rw-r--r--@ 1 ygu staff 175B Feb 1 1980 NOTICE.txt -rw-r--r--@ 1 ygu staff 1.0K Feb 1 1980 NOTICE.md -rw-r--r--@ 1 ygu staff 305B Feb 1 1980 NOTICE drwxr-xr-x@ 3 ygu staff 96B Feb 1 1980 native-image/ drwxr-xr-x@ 31 ygu staff 992B Feb 1 1980 maven/ -rw-r--r--@ 1 ygu staff 710B Feb 1 1980 MANIFEST.MF drwxr-xr-x@ 3 ygu staff 96B Feb 1 1980 licenses/ -rw-r--r--@ 1 ygu staff 1.5K Feb 1 1980 LICENSE.txt -rw-r--r--@ 1 ygu staff 34K Feb 1 1980 LICENSE.md -rw-r--r--@ 1 ygu staff 11K Feb 1 1980 LICENSE -rw-r--r--@ 1 ygu staff 115K Feb 1 1980 jandex.idx -rw-r--r--@ 1 ygu staff 344B Feb 1 1980 io.netty.versions.properties -rw-r--r--@ 1 ygu staff 1.7K Feb 1 1980 FastDoubleParser-NOTICE -rw-r--r--@ 1 ygu staff 11K Feb 1 1980 FastDoubleParser-LICENSE -rw-r--r--@ 1 ygu staff 415B Feb 1 1980 DEPENDENCIES -rw-r--r--@ 1 ygu staff 1.2K Feb 1 1980 bigint-LICENSE *Iceberg Spark runtime jar(iceberg-spark-runtime-3.5_2.12-1.9.1.jar) :* -rw-r--r--@ 1 ygu staff 11K Feb 1 1980 LICENSE-EPL-1.0.txt -rw-r--r--@ 1 ygu staff 1.5K Feb 1 1980 LICENSE-EDL-1.0.txt -rw-r--r--@ 1 ygu staff 24K Feb 1 1980 LICENSE ygu@FM4LQ4GJ90 tmpi % l META-INF total 320 drwxr-xr-x@ 8 ygu staff 256B Feb 1 1980 versions/ -rw-r--r--@ 1 ygu staff 3.0K Feb 1 1980 thirdparty-LICENSE drwxr-xr-x@ 270 ygu staff 8.4K Feb 1 1980 services/ drwxr-xr-x@ 8 ygu staff 256B Feb 1 1980 proguard/ -rw-r--r--@ 1 ygu staff 22K Feb 1 1980 openapi.yaml drwxr-xr-x@ 4 ygu staff 128B Feb 1 1980 openapi/ -rw-r--r--@ 1 ygu staff 172B Feb 1 1980 NOTICE drwxr-xr-x@ 3 ygu staff 96B Feb 1 1980 native-image/ drwxr-xr-x@ 24 ygu staff 768B Feb 1 1980 maven/ -rw-r--r--@ 1 ygu staff 25B Feb 1 1980 MANIFEST.MF drwxr-xr-x@ 3 ygu staff 96B Feb 1 1980 licenses/ -rw-r--r--@ 1 ygu staff 1.5K Feb 1 1980 LICENSE.txt -rw-r--r--@ 1 ygu staff 11K Feb 1 1980 LICENSE -rw-r--r--@ 1 ygu staff 78K Feb 1 1980 jandex.idx -rw-r--r--@ 1 ygu staff 344B Feb 1 1980 io.netty.versions.properties -rw-r--r--@ 1 ygu staff 1.7K Feb 1 1980 FastDoubleParser-NOTICE -rw-r--r--@ 1 ygu staff 11K Feb 1 1980 FastDoubleParser-LICENSE -rw-r--r--@ 1 ygu staff 415B Feb 1 1980 DEPENDENCIES -rw-r--r--@ 1 ygu staff 1.2K Feb 1 1980 bigint-LICENSE Yufei On Tue, Jun 24, 2025 at 9:08 AM Robert Stupp <sn...@snazy.de> wrote: > Yufei, > > I think it makes the most sense to focus on the issues at hand. > > The license/notice issues are serious. Users have to be able to identify > the correct license/notice and not guess from a bunch of different > licenses/notices from other projects. > > The changed cherry-picked commit onto the release branch is also > concerning. > > Regarding the tarball/zip - those were published via Maven publications > before, that's no longer the case. Although that's not a release blocker > for me, it should be aligned to what's been there before. > > > On 24.06.25 17:32, Yufei Gu wrote: > >> Zip and tarball binaries for `polaris-server` and `polaris-admin` are > >> missing in the Maven publication. > > > > > >> Dist contents [1] have inconsistent file name patterns, for example: > > > > * apache-polaris-1.0.0-incubating.tar.gz > >> * polaris-bin-1.0.0-incubating.tgz > > > > I believe binary archives should have "apache-polaris" as a name prefix. > > > > > > Dmitri and Robert, PR 1589 [1] combined both binary distribution > > `polaris-server` and `polaris-admin` to a single bin distribution. There > > are no Zip and tarball binaries for `polaris-server` and `polaris-admin` > > any more. > > > > For the binary package naming, > > 1. We clarify in the PR that: Standardized the binary distribution > package > > naming to polaris-{version}.tgz and polaris-{version}.zip, following > common > > conventions used by other projects (e.g., spark-3.5.5-bin-hadoop3.tgz). > > 2. We also follow the previous naming convention like `polaris-server` > and > > `polaris-admin`, which doesn't have `apache`. > > > > I'm really sorry to see these "-1" comments. We spent almost 3 weeks on > > this PR[1]. 93 conversations from people including Dmitri, JB, Robert and > > Alex. And Dmitri approved the PR. Can we respect and at least remember > our > > conversation and decisions we made together in the PR? > > > > > > 1. https://github.com/apache/polaris/pull/1589 > > > > Yufei > > > > > > On Tue, Jun 24, 2025 at 7:29 AM Dmitri Bourlatchkov <di...@apache.org> > > wrote: > > > >> -1 (binding) > >> > >> Dist contents [1] have inconsistent file name patterns, for example: > >> > >> * apache-polaris-1.0.0-incubating.tar.gz > >> * polaris-bin-1.0.0-incubating.tgz > >> > >> I believe binary archives should have "apache-polaris" as a name prefix. > >> > >> [1] > >> > >> > https://dist.apache.org/repos/dist/dev/incubator/polaris/apache-polaris-1.0.0-incubating > >> > >> Cheers, > >> Dmitri. > >> > >> On Mon, Jun 23, 2025 at 9:25 PM Yufei Gu <flyrain...@gmail.com> wrote: > >> > >>> Hi everyone, > >>> > >>> I propose that we release the following RC as the official > >>> Apache Polaris 1.0.0-incubating release. > >>> > >>> This corresponds to the tag: apache-polaris-1.0.0-incubating-rc0 > >>> * > >>> > >>> > >> > https://github.com/apache/polaris/commits/apache-polaris-1.0.0-incubating-rc0 > >>> * > >>> > >>> > >> > https://github.com/apache/polaris/tree/3e3cd23dfdc261686f3935c8ea2c472b0bd3e8b8 > >>> The release tarball, signature, and checksums are here, which includes > >> both > >>> source code distribution and a single binary distribution: > >>> * > >>> > >>> > >> > https://dist.apache.org/repos/dist/dev/incubator/polaris/apache-polaris-1.0.0-incubating > >>> You can find the KEYS file here: > >>> * https://downloads.apache.org/incubator/polaris/KEYS > >>> > >>> Convenience binary artifacts are staged on Nexus. The Maven repository > >> URL > >>> is: > >>> * > >>> > >>> > >> > https://repository.apache.org/content/repositories/orgapachepolaris-1020/org/apache/polaris/ > >>> Please download, verify, and test. > >>> > >>> Please vote in the next 72 hours. > >>> > >>> [ ] +1 Release this as Apache polaris 1.0.0-incubating > >>> [ ] +0 > >>> [ ] -1 Do not release this because... > >>> > >>> Only PPMC members and mentors have binding votes, but other community > >>> members are > >>> encouraged to cast non-binding votes. This vote will pass if there are > 3 > >>> binding +1 votes and more binding +1 votes than -1 votes. > >>> > >>> NB: if this vote passes, a new vote has to be started on the Incubator > >>> general mailing > >>> list. > >>> > >>> Thanks > >>> Yufei > >>> >