diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS index 6e69b9850..7b382973c 100644 --- a/.github/CODEOWNERS +++ b/.github/CODEOWNERS @@ -17,4 +17,4 @@ # under the License. # -* @jbonofre @ashvina @anoopj @RussellSpitzer @snazy @vvcephei @takidau @jackye1995 +* @jbonofre @ashvina @anoopj @RussellSpitzer @snazy @vvcephei @takidau @jackye1995 @flyrain diff --git a/.github/renovate.json5 b/.github/renovate.json5 new file mode 100644 index 000000000..4e65d7c56 --- /dev/null +++ b/.github/renovate.json5 @@ -0,0 +1,74 @@ +/* + * Licensed to the Apache Software Foundation (ASF) under one + * or more contributor license agreements. See the NOTICE file + * distributed with this work for additional information + * regarding copyright ownership. The ASF licenses this file + * to you under the Apache License, Version 2.0 (the + * "License"); you may not use this file except in compliance + * with the License. You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, + * software distributed under the License is distributed on an + * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY + * KIND, either express or implied. See the License for the + * specific language governing permissions and limitations + * under the License. + */ +{ + "$schema": "https://docs.renovatebot.com/renovate-schema.json", + extends: [ + "config:base", + // Required to not pin dependencies to _exact_ versions (pip) + ":preserveSemverRanges", + "group:monorepos", + "helpers:pinGitHubActionDigests", + ":semanticPrefixFixDepsChoreOthers", + ":dependencyDashboard", + ], + + // Added for posterity how to let Renovate manage version-branches, assuming that release branches + // have the `release/` prefix. + baseBranches: ["main", "/^release\\/.*/"], + additionalBranchPrefix: "{{baseBranch}}/", + commitMessagePrefix: "{{baseBranch}}: ", + + pip_requirements: { + // fileMatch default: (^|/)([\\w-]*)requirements\\.(txt|pip)$ + "fileMatch": ["(^|/)([\\w-]*)requirements.*\\.txt$"], + }, + + packageRules: [ + // Check for updates, do not merge automatically. This rule does effectively nothing, but serves as a + // reference for the kinds of managers used in Polaris. + { + matchManagers: [ + "gradle", "gradle-wrapper", + "pip_requirements", "pip_setup", "poetry", "setup-cfg", + "dockerfile", "devcontainer", "docker-compose", + "github-actions"], + automerge: false, // just be explicit (false is the default) + }, + + // Reduce awssdk update frequency noise (awssdk has daily releases) + { + matchManagers: ["gradle"], + matchPackagePrefixes: ["software.amazon.awssdk"], + extends: ["schedule:weekly"], + }, + + // Turn off major & minor version updates on version-branches + { + matchBaseBranches: ["/^release/.*/"], + matchUpdateTypes: ["major", "minor"], + enabled: false + }, + ], + + // Max 50 PRs in total, 5 per hour. + // Renovate rebases PRs automatically when the renovate bot "visits" (scans) the repo, hence the hourly and + // concurrent PRs limit. + prConcurrentLimit: 50, + prHourlyLimit: 5, +} diff --git a/.github/workflows/gradle.yml b/.github/workflows/gradle.yml index 97ce4e2d7..288716fb5 100644 --- a/.github/workflows/gradle.yml +++ b/.github/workflows/gradle.yml @@ -58,7 +58,10 @@ jobs: - name: Check formatting run: ./gradlew check - + + - name: Check Maven publication + run: ./gradlew publishToMavenLocal sourceTarball + - name: Build with Gradle Wrapper run: ./gradlew test diff --git a/.gitignore b/.gitignore index 8dfa578d7..f9b35731c 100644 --- a/.gitignore +++ b/.gitignore @@ -21,6 +21,11 @@ regtests/derby.log regtests/metastore_db regtests/output/ +# Python stuff +/poetry.lock +/polaris-venv/ +/pyproject.toml + # Notebooks notebooks/.ipynb_checkpoints/ diff --git a/CHAT_BYLAWS.md b/CHAT_BYLAWS.md new file mode 100644 index 000000000..431dfa1f3 --- /dev/null +++ b/CHAT_BYLAWS.md @@ -0,0 +1,68 @@ + + +# Apache Polaris - Project Chat Bylaws + +Apache Polaris is currently undergoing Incubation at the Apache Software Foundation. + +## Motivation + +The Polaris project uses a public and open chat service currently provided by Zulip hosted +at https://polaris-catalog.zulipchat.com/. A few rules shall ensure that the chat conforms to the rules and best +practices of the Apache Software Foundation and serves well as a collaboration tool for the project. + +Organizations and other open-source projects that contribute continuously and significantly to Polaris are welcome, but +shall not use the Polaris chat as a vehicle for their own marketing without explicit approval of the project (P)PMC. + +## Code of Conduct + +The [Apache Software Foundation’s Code of Conduct](https://www.apache.org/foundation/policies/conduct.html) applies to +the Polaris project public chat. + +## Governance + +* The Polaris project’s chat tool is not provided by the ASF - the Polaris project (P)PMC members govern and monitor the + chat service. +* Everybody is welcome to join the Polaris project chat. Invites are not needed. +* All users are automatically promoted to “members” (don’t stay in “guests”). +* Polaris project (P)PMC members have “owner” privileges on the Zulip chat. Polaris project committers are granted + “moderator” or “administrator” privileges for moderation purposes. +* This bylaws document shall be published on the project’s web site and linked from relevant public channels. +* Only (P)PMC members are allowed to create new channels. The number of channels shall be limited to #general (user + discussions), #dev (development discussions), #announcements (release announcements), and #noise (GitHub feed). +* Only (P)PMC members are allowed to notify a large number of users (aka @here). + +## 3rd Parties + +Definition: “3rd party” means any (other) open-source project or any commercial vendor or any other organization. + +### 3rd Party Channels + +* 3rd parties who contribute to or use the Polaris project may ask the (P)PMC to get a dedicated public channel, for + example #vendor- or #project-. +* Promotion of 3rd party content is only permitted in these 3rd party channels, and only if the content primarily covers + Polaris. Commercial advertisements in any form are prohibited. +* Interaction with users of 3rd party OSS projects or commercial products should be directed to these 3rd party + channels. + +## Content moderation + +* Any content which violates the Apache “Code of Conduct” will be removed. +* Any commercial advertisements will be removed. +* All other content will not be moderated. diff --git a/Dockerfile b/Dockerfile index 8fc73438c..0bc4f54b2 100644 --- a/Dockerfile +++ b/Dockerfile @@ -31,13 +31,13 @@ WORKDIR /app RUN rm -rf build # Build the rest catalog -RUN ./gradlew --no-daemon --info -PeclipseLink=$ECLIPSELINK clean shadowJar startScripts +RUN ./gradlew --no-daemon --info -PeclipseLink=$ECLIPSELINK clean prepareDockerDist FROM registry.access.redhat.com/ubi9/openjdk-21-runtime:1.20-2.1721752928 WORKDIR /app -COPY --from=build /app/polaris-service/build/libs/polaris-service-all.jar /app/lib/polaris-service-all.jar +COPY --from=build /app/polaris-service/build/docker-dist/bin /app/bin +COPY --from=build /app/polaris-service/build/docker-dist/lib /app/lib COPY --from=build /app/polaris-server.yml /app -COPY --from=build /app/polaris-service/build/scripts/polaris-service /app/bin/polaris-service EXPOSE 8181 diff --git a/LICENSE b/LICENSE index 3060ae578..c094f2081 100644 --- a/LICENSE +++ b/LICENSE @@ -236,6 +236,7 @@ com.google.api:api-common com.google.api:gax com.google.api:gax-grpc com.google.api:gax-httpjson +com.google.api.grpc:proto-google-cloud-monitoring-v3 com.google.apis:google-api-services-storage com.google.auth:google-auth-library-credentials com.google.auth:google-auth-library-oauth2-http @@ -244,6 +245,11 @@ com.google.cloud:google-cloud-core com.google.cloud:google-cloud-core-grpc com.google.cloud:google-cloud-core-http com.google.cloud:google-cloud-storage +com.google.cloud:google-cloud-monitoring +com.google.cloud.opentelemetry:detector-resources-support +com.google.cloud.opentelemetry:exporter-metrics +com.google.cloud.opentelemetry:shared-resourcemapping +com.google.cloud:google-cloud-monitorin com.google.code.findbugs:jsr305 com.google.code.gson:gson com.google.errorprone:error_prone_annotations @@ -308,6 +314,7 @@ io.grpc:grpc-googleapis io.grpc:grpc-grpclb io.grpc:grpc-inprocess io.grpc:grpc-netty-shaded +io.grpc:grpc-opentelemetry io.grpc:grpc-protobuf io.grpc:grpc-protobuf-lite io.grpc:grpc-rls @@ -354,6 +361,7 @@ io.opentelemetry:opentelemetry-sdk-extension-autoconfigure-spi io.opentelemetry:opentelemetry-sdk-logs io.opentelemetry:opentelemetry-sdk-metrics io.opentelemetry:opentelemetry-sdk-trace +io.opentelemetry.contrib:opentelemetry-gcp-resources io.perfmark:perfmark-api io.projectreactor.netty:reactor-netty-core io.projectreactor.netty:reactor-netty-http @@ -394,6 +402,7 @@ org.apache.hadoop:hadoop-auth org.apache.hadoop:hadoop-client-api org.apache.hadoop:hadoop-common org.apache.hadoop:hadoop-hdfs-client +org.apache.hadoop.thirdparty:hadoop-shaded-protobuf_3_21 org.apache.httpcomponents.client5:httpclient5 org.apache.httpcomponents.core5:httpcore5 org.apache.httpcomponents.core5:httpcore5-h2 @@ -1339,6 +1348,230 @@ Linking this library statically or dynamically with other modules is making a co As a special exception, the copyright holders of this library give you permission to link this library with independent modules to produce an executable, regardless of the license terms of these independent modules, and to copy and distribute the resulting executable under terms of your choice, provided that you also meet, for each linked independent module, the terms and conditions of the license of that module. An independent module is a module which is not derived from or based on this library. If you modify this library, you may extend this exception to your version of the library, but you are not obligated to do so. If you do not wish to do so, delete this exception statement from your version. +--- +com.sun.xml.bind:jaxb-core + +Copyright (c) 2018 Oracle and/or its affiliates. All rights reserved. + +Redistribution and use in source and binary forms, with or without +modification, are permitted provided that the following conditions +are met: + + - Redistributions of source code must retain the above copyright + notice, this list of conditions and the following disclaimer. + + - Redistributions in binary form must reproduce the above copyright + notice, this list of conditions and the following disclaimer in the + documentation and/or other materials provided with the distribution. + + - Neither the name of the Eclipse Foundation, Inc. nor the names of its + contributors may be used to endorse or promote products derived + from this software without specific prior written permission. + +THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS +IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, +THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR +PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR +CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, +EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, +PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR +PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF +LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING +NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS +SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + + + +# Notices for Eclipse Implementation of JAXB + +This content is produced and maintained by the Eclipse Implementation of JAXB +project. + +* Project home: https://projects.eclipse.org/projects/ee4j.jaxb-impl + +## Trademarks + +Eclipse Implementation of JAXB is a trademark of the Eclipse Foundation. + +## Copyright + +All content is the property of the respective authors or their employers. For +more information regarding authorship of content, please consult the listed +source code repository logs. + +## Declared Project Licenses + +This program and the accompanying materials are made available under the terms +of the Eclipse Distribution License v. 1.0 which is available at +http://www.eclipse.org/org/documents/edl-v10.php. + +SPDX-License-Identifier: BSD-3-Clause + +## Source Code + +The project maintains the following source code repositories: + +* https://github.com/eclipse-ee4j/jaxb-ri +* https://github.com/eclipse-ee4j/jaxb-istack-commons +* https://github.com/eclipse-ee4j/jaxb-dtd-parser +* https://github.com/eclipse-ee4j/jaxb-fi +* https://github.com/eclipse-ee4j/jaxb-stax-ex +* https://github.com/eclipse-ee4j/jax-rpc-ri + +## Third-party Content + +This project leverages the following third party content. + +Apache Ant (1.10.2) + +* License: Apache-2.0 AND W3C AND LicenseRef-Public-Domain + +Apache Ant (1.10.2) + +* License: Apache-2.0 AND W3C AND LicenseRef-Public-Domain + +Apache Felix (1.2.0) + +* License: Apache License, 2.0 + +args4j (2.33) + +* License: MIT License + +dom4j (1.6.1) + +* License: Custom license based on Apache 1.1 + +file-management (3.0.0) + +* License: Apache-2.0 +* Project: https://maven.apache.org/shared/file-management/ +* Source: + https://svn.apache.org/viewvc/maven/shared/tags/file-management-3.0.0/ + +JUnit (4.12) + +* License: Eclipse Public License + +JUnit (4.12) + +* License: Eclipse Public License + +maven-compat (3.5.2) + +* License: Apache-2.0 +* Project: https://maven.apache.org/ref/3.5.2/maven-compat/ +* Source: + https://mvnrepository.com/artifact/org.apache.maven/maven-compat/3.5.2 + +maven-core (3.5.2) + +* License: Apache-2.0 +* Project: https://maven.apache.org/ref/3.5.2/maven-core/index.html +* Source: https://mvnrepository.com/artifact/org.apache.maven/maven-core/3.5.2 + +maven-plugin-annotations (3.5) + +* License: Apache-2.0 +* Project: https://maven.apache.org/plugin-tools/maven-plugin-annotations/ +* Source: + https://github.com/apache/maven-plugin-tools/tree/master/maven-plugin-annotations + +maven-plugin-api (3.5.2) + +* License: Apache-2.0 + +maven-resolver-api (1.1.1) + +* License: Apache-2.0 + +maven-resolver-api (1.1.1) + +* License: Apache-2.0 + +maven-resolver-connector-basic (1.1.1) + +* License: Apache-2.0 + +maven-resolver-impl (1.1.1) + +* License: Apache-2.0 + +maven-resolver-spi (1.1.1) + +* License: Apache-2.0 + +maven-resolver-transport-file (1.1.1) + +* License: Apache-2.0 +* Project: https://maven.apache.org/resolver/maven-resolver-transport-file/ +* Source: + https://github.com/apache/maven-resolver/tree/master/maven-resolver-transport-file + +maven-resolver-util (1.1.1) + +* License: Apache-2.0 + +maven-settings (3.5.2) + +* License: Apache-2.0 +* Source: + https://mvnrepository.com/artifact/org.apache.maven/maven-settings/3.5.2 + +OSGi Service Platform Core Companion Code (6.0) + +* License: Apache License, 2.0 + +plexus-archiver (3.5) + +* License: Apache-2.0 +* Project: https://codehaus-plexus.github.io/plexus-archiver/ +* Source: https://github.com/codehaus-plexus/plexus-archiver + +plexus-io (3.0.0) + +* License: Apache-2.0 + +plexus-utils (3.1.0) + +* License: Apache- 2.0 or Apache- 1.1 or BSD or Public Domain or Indiana + University Extreme! Lab Software License V1.1.1 (Apache 1.1 style) + +relaxng-datatype (1.0) + +* License: New BSD license + +Sax (0.2) + +* License: SAX-PD +* Project: http://www.megginson.com/downloads/SAX/ +* Source: http://sourceforge.net/project/showfiles.php?group_id=29449 + +testng (6.14.2) + +* License: Apache-2.0 AND (MIT OR GPL-1.0+) +* Project: https://testng.org/doc/index.html +* Source: https://github.com/cbeust/testng + +wagon-http-lightweight (3.0.0) + +* License: Pending +* Project: https://maven.apache.org/wagon/ +* Source: + https://mvnrepository.com/artifact/org.apache.maven.wagon/wagon-http-lightweight/3.0.0 + +xz for java (1.8) + +* License: LicenseRef-Public-Domain + +## Cryptography + +Content may contain encryption software. The country in which you are currently +may have restrictions on the import, possession, and use, and/or re-export to +another country, of encryption software. BEFORE using any encryption software, +please check the country's laws, regulations and policies concerning the import, +possession, or use, and re-export of encryption software, to see if this is +permitted. --- com.sun.xml.bind:jaxb-impl @@ -2101,6 +2334,255 @@ do so. If you do not wish to do so, delete this exception statement from your version. +--- +com.sun.xml.bind:jaxb-xjc + +Copyright (c) 2018 Oracle and/or its affiliates. All rights reserved. + +Redistribution and use in source and binary forms, with or without +modification, are permitted provided that the following conditions +are met: + + - Redistributions of source code must retain the above copyright + notice, this list of conditions and the following disclaimer. + + - Redistributions in binary form must reproduce the above copyright + notice, this list of conditions and the following disclaimer in the + documentation and/or other materials provided with the distribution. + + - Neither the name of the Eclipse Foundation, Inc. nor the names of its + contributors may be used to endorse or promote products derived + from this software without specific prior written permission. + +THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS +IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, +THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR +PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR +CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, +EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, +PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR +PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF +LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING +NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS +SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + + + +Copyright (c) 2004 Kohsuke Kawaguchi + +Permission is hereby granted, free of charge, to any person +obtaining a copy of this software and associated documentation +files (the "Software"), to deal in the Software without +restriction, including without limitation the rights to use, +copy, modify, merge, publish, distribute, sublicense, and/or +sell copies of the Software, and to permit persons to whom +the Software is furnished to do so, subject to the following +conditions: + +The above copyright notice and this permission notice shall +be included in all copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY +KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE +WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR +PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS +OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR +OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR +OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE +SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. + + + +# Notices for Eclipse Implementation of JAXB + +This content is produced and maintained by the Eclipse Implementation of JAXB +project. + +* Project home: https://projects.eclipse.org/projects/ee4j.jaxb-impl + +## Trademarks + +Eclipse Implementation of JAXB is a trademark of the Eclipse Foundation. + +## Copyright + +All content is the property of the respective authors or their employers. For +more information regarding authorship of content, please consult the listed +source code repository logs. + +## Declared Project Licenses + +This program and the accompanying materials are made available under the terms +of the Eclipse Distribution License v. 1.0 which is available at +http://www.eclipse.org/org/documents/edl-v10.php. + +SPDX-License-Identifier: BSD-3-Clause + +## Source Code + +The project maintains the following source code repositories: + +* https://github.com/eclipse-ee4j/jaxb-ri +* https://github.com/eclipse-ee4j/jaxb-istack-commons +* https://github.com/eclipse-ee4j/jaxb-dtd-parser +* https://github.com/eclipse-ee4j/jaxb-fi +* https://github.com/eclipse-ee4j/jaxb-stax-ex +* https://github.com/eclipse-ee4j/jax-rpc-ri + +## Third-party Content + +This project leverages the following third party content. + +Apache Ant (1.10.2) + +* License: Apache-2.0 AND W3C AND LicenseRef-Public-Domain + +Apache Ant (1.10.2) + +* License: Apache-2.0 AND W3C AND LicenseRef-Public-Domain + +Apache Felix (1.2.0) + +* License: Apache License, 2.0 + +args4j (2.33) + +* License: MIT License + +dom4j (1.6.1) + +* License: Custom license based on Apache 1.1 + +file-management (3.0.0) + +* License: Apache-2.0 +* Project: https://maven.apache.org/shared/file-management/ +* Source: + https://svn.apache.org/viewvc/maven/shared/tags/file-management-3.0.0/ + +JUnit (4.12) + +* License: Eclipse Public License + +JUnit (4.12) + +* License: Eclipse Public License + +maven-compat (3.5.2) + +* License: Apache-2.0 +* Project: https://maven.apache.org/ref/3.5.2/maven-compat/ +* Source: + https://mvnrepository.com/artifact/org.apache.maven/maven-compat/3.5.2 + +maven-core (3.5.2) + +* License: Apache-2.0 +* Project: https://maven.apache.org/ref/3.5.2/maven-core/index.html +* Source: https://mvnrepository.com/artifact/org.apache.maven/maven-core/3.5.2 + +maven-plugin-annotations (3.5) + +* License: Apache-2.0 +* Project: https://maven.apache.org/plugin-tools/maven-plugin-annotations/ +* Source: + https://github.com/apache/maven-plugin-tools/tree/master/maven-plugin-annotations + +maven-plugin-api (3.5.2) + +* License: Apache-2.0 + +maven-resolver-api (1.1.1) + +* License: Apache-2.0 + +maven-resolver-api (1.1.1) + +* License: Apache-2.0 + +maven-resolver-connector-basic (1.1.1) + +* License: Apache-2.0 + +maven-resolver-impl (1.1.1) + +* License: Apache-2.0 + +maven-resolver-spi (1.1.1) + +* License: Apache-2.0 + +maven-resolver-transport-file (1.1.1) + +* License: Apache-2.0 +* Project: https://maven.apache.org/resolver/maven-resolver-transport-file/ +* Source: + https://github.com/apache/maven-resolver/tree/master/maven-resolver-transport-file + +maven-resolver-util (1.1.1) + +* License: Apache-2.0 + +maven-settings (3.5.2) + +* License: Apache-2.0 +* Source: + https://mvnrepository.com/artifact/org.apache.maven/maven-settings/3.5.2 + +OSGi Service Platform Core Companion Code (6.0) + +* License: Apache License, 2.0 + +plexus-archiver (3.5) + +* License: Apache-2.0 +* Project: https://codehaus-plexus.github.io/plexus-archiver/ +* Source: https://github.com/codehaus-plexus/plexus-archiver + +plexus-io (3.0.0) + +* License: Apache-2.0 + +plexus-utils (3.1.0) + +* License: Apache- 2.0 or Apache- 1.1 or BSD or Public Domain or Indiana + University Extreme! Lab Software License V1.1.1 (Apache 1.1 style) + +relaxng-datatype (1.0) + +* License: New BSD license + +Sax (0.2) + +* License: SAX-PD +* Project: http://www.megginson.com/downloads/SAX/ +* Source: http://sourceforge.net/project/showfiles.php?group_id=29449 + +testng (6.14.2) + +* License: Apache-2.0 AND (MIT OR GPL-1.0+) +* Project: https://testng.org/doc/index.html +* Source: https://github.com/cbeust/testng + +wagon-http-lightweight (3.0.0) + +* License: Pending +* Project: https://maven.apache.org/wagon/ +* Source: + https://mvnrepository.com/artifact/org.apache.maven.wagon/wagon-http-lightweight/3.0.0 + +xz for java (1.8) + +* License: LicenseRef-Public-Domain + +## Cryptography + +Content may contain encryption software. The country in which you are currently +may have restrictions on the import, possession, and use, and/or re-export to +another country, of encryption software. BEFORE using any encryption software, +please check the country's laws, regulations and policies concerning the import, +possession, or use, and re-export of encryption software, to see if this is +permitted. --- @@ -2883,34 +3365,411 @@ permitted. --- -jakarta.xml.bind:jakarta.xml.bind-api +jakarta.persistence:jakarta.persistence-api -Copyright (c) 2017, 2018 Oracle and/or its affiliates. All rights reserved. +This program and the accompanying materials are made available under the +terms of the Eclipse Public License v. 2.0 which is available at +http://www.eclipse.org/legal/epl-2.0, +or the Eclipse Distribution License v. 1.0 which is available at +http://www.eclipse.org/org/documents/edl-v10.php. - Redistribution and use in source and binary forms, with or without - modification, are permitted provided that the following conditions - are met: +SPDX-License-Identifier: EPL-2.0 OR BSD-3-Clause + + +Eclipse Public License - v 2.0 + + THE ACCOMPANYING PROGRAM IS PROVIDED UNDER THE TERMS OF THIS ECLIPSE + PUBLIC LICENSE ("AGREEMENT"). ANY USE, REPRODUCTION OR DISTRIBUTION + OF THE PROGRAM CONSTITUTES RECIPIENT'S ACCEPTANCE OF THIS AGREEMENT. + +1. DEFINITIONS + +"Contribution" means: + + a) in the case of the initial Contributor, the initial content + Distributed under this Agreement, and + + b) in the case of each subsequent Contributor: + i) changes to the Program, and + ii) additions to the Program; + where such changes and/or additions to the Program originate from + and are Distributed by that particular Contributor. A Contribution + "originates" from a Contributor if it was added to the Program by + such Contributor itself or anyone acting on such Contributor's behalf. + Contributions do not include changes or additions to the Program that + are not Modified Works. + +"Contributor" means any person or entity that Distributes the Program. + +"Licensed Patents" mean patent claims licensable by a Contributor which +are necessarily infringed by the use or sale of its Contribution alone +or when combined with the Program. + +"Program" means the Contributions Distributed in accordance with this +Agreement. + +"Recipient" means anyone who receives the Program under this Agreement +or any Secondary License (as applicable), including Contributors. + +"Derivative Works" shall mean any work, whether in Source Code or other +form, that is based on (or derived from) the Program and for which the +editorial revisions, annotations, elaborations, or other modifications +represent, as a whole, an original work of authorship. + +"Modified Works" shall mean any work in Source Code or other form that +results from an addition to, deletion from, or modification of the +contents of the Program, including, for purposes of clarity any new file +in Source Code form that contains any contents of the Program. Modified +Works shall not include works that contain only declarations, +interfaces, types, classes, structures, or files of the Program solely +in each case in order to link to, bind by name, or subclass the Program +or Modified Works thereof. + +"Distribute" means the acts of a) distributing or b) making available +in any manner that enables the transfer of a copy. + +"Source Code" means the form of a Program preferred for making +modifications, including but not limited to software source code, +documentation source, and configuration files. + +"Secondary License" means either the GNU General Public License, +Version 2.0, or any later versions of that license, including any +exceptions or additional permissions as identified by the initial +Contributor. + +2. GRANT OF RIGHTS + + a) Subject to the terms of this Agreement, each Contributor hereby + grants Recipient a non-exclusive, worldwide, royalty-free copyright + license to reproduce, prepare Derivative Works of, publicly display, + publicly perform, Distribute and sublicense the Contribution of such + Contributor, if any, and such Derivative Works. + + b) Subject to the terms of this Agreement, each Contributor hereby + grants Recipient a non-exclusive, worldwide, royalty-free patent + license under Licensed Patents to make, use, sell, offer to sell, + import and otherwise transfer the Contribution of such Contributor, + if any, in Source Code or other form. This patent license shall + apply to the combination of the Contribution and the Program if, at + the time the Contribution is added by the Contributor, such addition + of the Contribution causes such combination to be covered by the + Licensed Patents. The patent license shall not apply to any other + combinations which include the Contribution. No hardware per se is + licensed hereunder. + + c) Recipient understands that although each Contributor grants the + licenses to its Contributions set forth herein, no assurances are + provided by any Contributor that the Program does not infringe the + patent or other intellectual property rights of any other entity. + Each Contributor disclaims any liability to Recipient for claims + brought by any other entity based on infringement of intellectual + property rights or otherwise. As a condition to exercising the + rights and licenses granted hereunder, each Recipient hereby + assumes sole responsibility to secure any other intellectual + property rights needed, if any. For example, if a third party + patent license is required to allow Recipient to Distribute the + Program, it is Recipient's responsibility to acquire that license + before distributing the Program. + + d) Each Contributor represents that to its knowledge it has + sufficient copyright rights in its Contribution, if any, to grant + the copyright license set forth in this Agreement. + + e) Notwithstanding the terms of any Secondary License, no + Contributor makes additional grants to any Recipient (other than + those set forth in this Agreement) as a result of such Recipient's + receipt of the Program under the terms of a Secondary License + (if permitted under the terms of Section 3). + +3. REQUIREMENTS + +3.1 If a Contributor Distributes the Program in any form, then: + + a) the Program must also be made available as Source Code, in + accordance with section 3.2, and the Contributor must accompany + the Program with a statement that the Source Code for the Program + is available under this Agreement, and informs Recipients how to + obtain it in a reasonable manner on or through a medium customarily + used for software exchange; and + + b) the Contributor may Distribute the Program under a license + different than this Agreement, provided that such license: + i) effectively disclaims on behalf of all other Contributors all + warranties and conditions, express and implied, including + warranties or conditions of title and non-infringement, and + implied warranties or conditions of merchantability and fitness + for a particular purpose; + + ii) effectively excludes on behalf of all other Contributors all + liability for damages, including direct, indirect, special, + incidental and consequential damages, such as lost profits; + + iii) does not attempt to limit or alter the recipients' rights + in the Source Code under section 3.2; and + + iv) requires any subsequent distribution of the Program by any + party to be under a license that satisfies the requirements + of this section 3. + +3.2 When the Program is Distributed as Source Code: + + a) it must be made available under this Agreement, or if the + Program (i) is combined with other material in a separate file or + files made available under a Secondary License, and (ii) the initial + Contributor attached to the Source Code the notice described in + Exhibit A of this Agreement, then the Program may be made available + under the terms of such Secondary Licenses, and + + b) a copy of this Agreement must be included with each copy of + the Program. + +3.3 Contributors may not remove or alter any copyright, patent, +trademark, attribution notices, disclaimers of warranty, or limitations +of liability ("notices") contained within the Program from any copy of +the Program which they Distribute, provided that Contributors may add +their own appropriate notices. + +4. COMMERCIAL DISTRIBUTION + +Commercial distributors of software may accept certain responsibilities +with respect to end users, business partners and the like. While this +license is intended to facilitate the commercial use of the Program, +the Contributor who includes the Program in a commercial product +offering should do so in a manner which does not create potential +liability for other Contributors. Therefore, if a Contributor includes +the Program in a commercial product offering, such Contributor +("Commercial Contributor") hereby agrees to defend and indemnify every +other Contributor ("Indemnified Contributor") against any losses, +damages and costs (collectively "Losses") arising from claims, lawsuits +and other legal actions brought by a third party against the Indemnified +Contributor to the extent caused by the acts or omissions of such +Commercial Contributor in connection with its distribution of the Program +in a commercial product offering. The obligations in this section do not +apply to any claims or Losses relating to any actual or alleged +intellectual property infringement. In order to qualify, an Indemnified +Contributor must: a) promptly notify the Commercial Contributor in +writing of such claim, and b) allow the Commercial Contributor to control, +and cooperate with the Commercial Contributor in, the defense and any +related settlement negotiations. The Indemnified Contributor may +participate in any such claim at its own expense. + +For example, a Contributor might include the Program in a commercial +product offering, Product X. That Contributor is then a Commercial +Contributor. If that Commercial Contributor then makes performance +claims, or offers warranties related to Product X, those performance +claims and warranties are such Commercial Contributor's responsibility +alone. Under this section, the Commercial Contributor would have to +defend claims against the other Contributors related to those performance +claims and warranties, and if a court requires any other Contributor to +pay any damages as a result, the Commercial Contributor must pay +those damages. + +5. NO WARRANTY + +EXCEPT AS EXPRESSLY SET FORTH IN THIS AGREEMENT, AND TO THE EXTENT +PERMITTED BY APPLICABLE LAW, THE PROGRAM IS PROVIDED ON AN "AS IS" +BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, EITHER EXPRESS OR +IMPLIED INCLUDING, WITHOUT LIMITATION, ANY WARRANTIES OR CONDITIONS OF +TITLE, NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR +PURPOSE. Each Recipient is solely responsible for determining the +appropriateness of using and distributing the Program and assumes all +risks associated with its exercise of rights under this Agreement, +including but not limited to the risks and costs of program errors, +compliance with applicable laws, damage to or loss of data, programs +or equipment, and unavailability or interruption of operations. + +6. DISCLAIMER OF LIABILITY + +EXCEPT AS EXPRESSLY SET FORTH IN THIS AGREEMENT, AND TO THE EXTENT +PERMITTED BY APPLICABLE LAW, NEITHER RECIPIENT NOR ANY CONTRIBUTORS +SHALL HAVE ANY LIABILITY FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, +EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING WITHOUT LIMITATION LOST +PROFITS), HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN +CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) +ARISING IN ANY WAY OUT OF THE USE OR DISTRIBUTION OF THE PROGRAM OR THE +EXERCISE OF ANY RIGHTS GRANTED HEREUNDER, EVEN IF ADVISED OF THE +POSSIBILITY OF SUCH DAMAGES. + +7. GENERAL + +If any provision of this Agreement is invalid or unenforceable under +applicable law, it shall not affect the validity or enforceability of +the remainder of the terms of this Agreement, and without further +action by the parties hereto, such provision shall be reformed to the +minimum extent necessary to make such provision valid and enforceable. + +If Recipient institutes patent litigation against any entity +(including a cross-claim or counterclaim in a lawsuit) alleging that the +Program itself (excluding combinations of the Program with other software +or hardware) infringes such Recipient's patent(s), then such Recipient's +rights granted under Section 2(b) shall terminate as of the date such +litigation is filed. + +All Recipient's rights under this Agreement shall terminate if it +fails to comply with any of the material terms or conditions of this +Agreement and does not cure such failure in a reasonable period of +time after becoming aware of such noncompliance. If all Recipient's +rights under this Agreement terminate, Recipient agrees to cease use +and distribution of the Program as soon as reasonably practicable. +However, Recipient's obligations under this Agreement and any licenses +granted by Recipient relating to the Program shall continue and survive. + +Everyone is permitted to copy and distribute copies of this Agreement, +but in order to avoid inconsistency the Agreement is copyrighted and +may only be modified in the following manner. The Agreement Steward +reserves the right to publish new versions (including revisions) of +this Agreement from time to time. No one other than the Agreement +Steward has the right to modify this Agreement. The Eclipse Foundation +is the initial Agreement Steward. The Eclipse Foundation may assign the +responsibility to serve as the Agreement Steward to a suitable separate +entity. Each new version of the Agreement will be given a distinguishing +version number. The Program (including Contributions) may always be +Distributed subject to the version of the Agreement under which it was +received. In addition, after a new version of the Agreement is published, +Contributor may elect to Distribute the Program (including its +Contributions) under the new version. + +Except as expressly stated in Sections 2(a) and 2(b) above, Recipient +receives no rights or licenses to the intellectual property of any +Contributor under this Agreement, whether expressly, by implication, +estoppel or otherwise. All rights in the Program not expressly granted +under this Agreement are reserved. Nothing in this Agreement is intended +to be enforceable by any entity that is not a Contributor or Recipient. +No third-party beneficiary rights are created under this Agreement. + +Exhibit A - Form of Secondary Licenses Notice + +"This Source Code may also be made available under the following +Secondary Licenses when the conditions for such availability set forth +in the Eclipse Public License, v. 2.0 are satisfied: {name license(s), +version(s), and exceptions or additional permissions here}." + + Simply including a copy of this Agreement, including this Exhibit A + is not sufficient to license the Source Code under Secondary Licenses. + + If it is not possible or desirable to put the notice in a particular + file, then You may include the notice in a location (such as a LICENSE + file in a relevant directory) where a recipient would be likely to + look for such a notice. + + You may add additional accurate notices of copyright ownership. + + + +Eclipse Distribution License - v 1.0 +Copyright (c) 2007, Eclipse Foundation, Inc. and its licensors. - - Redistributions of source code must retain the above copyright - notice, this list of conditions and the following disclaimer. +All rights reserved. - - Redistributions in binary form must reproduce the above copyright - notice, this list of conditions and the following disclaimer in the - documentation and/or other materials provided with the distribution. +Redistribution and use in source and binary forms, with or without modification, +are permitted provided that the following conditions are met: + +* Redistributions of source code must retain the above copyright notice, +this list of conditions and the following disclaimer. +* Redistributions in binary form must reproduce the above copyright notice, +this list of conditions and the following disclaimer in the documentation +and/or other materials provided with the distribution. +* Neither the name of the Eclipse Foundation, Inc. nor the names of its contributors +may be used to endorse or promote products derived from this software +without specific prior written permission. + +THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" +AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, +THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR +PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS +BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, +OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF +SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) +HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, +OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE +OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. - - Neither the name of the Eclipse Foundation, Inc. nor the names of its - contributors may be used to endorse or promote products derived - from this software without specific prior written permission. - THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS - IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, - THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR - PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR - CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, - EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, - PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR - PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF - LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING + +[//]: # " Copyright (c) 2019 Oracle and/or its affiliates. All rights reserved. " +[//]: # " " +[//]: # " This program and the accompanying materials are made available under the " +[//]: # " terms of the Eclipse Distribution License v. 1.0, which is available at " +[//]: # " http://www.eclipse.org/org/documents/edl-v10.php. " +[//]: # " " +[//]: # " SPDX-License-Identifier: BSD-3-Clause " + +# Notices for Jakarta Persistence + +This content is produced and maintained by the Jakarta Persistence +project. + +* Project home: https://projects.eclipse.org/projects/ee4j.jpa + +## Trademarks + + Jakarta Persistence is a trademark of the Eclipse Foundation. + +## Copyright + +All content is the property of the respective authors or their employers. For +more information regarding authorship of content, please consult the listed +source code repository logs. + +## Declared Project Licenses + +This program and the accompanying materials are made available under the terms +of the Eclipse Public License v. 2.0 which is available at +http://www.eclipse.org/legal/epl-2.0, or the Eclipse Distribution License v. 1.0 +which is available at http://www.eclipse.org/org/documents/edl-v10.php. + +SPDX-License-Identifier: EPL-2.0 OR BSD-3-Clause + +## Source Code + +The project maintains the following source code repositories: + +* https://github.com/eclipse-ee4j/jpa-api + +## Third-party Content + +This project leverages the following third party content. + +None + +## Cryptography + +Content may contain encryption software. The country in which you are currently +may have restrictions on the import, possession, and use, and/or re-export to +another country, of encryption software. BEFORE using any encryption software, +please check the country's laws, regulations and policies concerning the import, +possession, or use, and re-export of encryption software, to see if this is +permitted. + +--- +jakarta.xml.bind:jakarta.xml.bind-api + +Copyright (c) 2017, 2018 Oracle and/or its affiliates. All rights reserved. + + Redistribution and use in source and binary forms, with or without + modification, are permitted provided that the following conditions + are met: + + - Redistributions of source code must retain the above copyright + notice, this list of conditions and the following disclaimer. + + - Redistributions in binary form must reproduce the above copyright + notice, this list of conditions and the following disclaimer in the + documentation and/or other materials provided with the distribution. + + - Neither the name of the Eclipse Foundation, Inc. nor the names of its + contributors may be used to endorse or promote products derived + from this software without specific prior written permission. + + THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS + IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, + THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR + PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR + CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, + EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, + PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR + PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF + LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. @@ -3428,6 +4287,12 @@ ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. +--- +org.bouncycastle:bcprov-jdk15on + +Copyright (c) 2000-2024 The Legion of the Bouncy Castle Inc. (https://www.bouncycastle.org). Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sub license, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. --- @@ -3438,6 +4303,1071 @@ Copyright (c) 2000-2024 The Legion of the Bouncy Castle Inc. (https://www.bouncy THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. +--- +org.eclipse.angus:angus-activation + +Copyright (c) 2018 Oracle and/or its affiliates. All rights reserved. + + Redistribution and use in source and binary forms, with or without + modification, are permitted provided that the following conditions + are met: + + - Redistributions of source code must retain the above copyright + notice, this list of conditions and the following disclaimer. + + - Redistributions in binary form must reproduce the above copyright + notice, this list of conditions and the following disclaimer in the + documentation and/or other materials provided with the distribution. + + - Neither the name of the Eclipse Foundation, Inc. nor the names of its + contributors may be used to endorse or promote products derived + from this software without specific prior written permission. + + THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS + IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, + THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR + PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR + CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, + EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, + PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR + PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF + LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING + NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS + SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + + + +# Notices for Eclipse Angus + +This content is produced and maintained by the Eclipse Angus project. + +* Project home: https://projects.eclipse.org/projects/ee4j.angus + +## Trademarks + +Eclipse Angus is a trademark of the Eclipse Foundation. + +## Copyright + +All content is the property of the respective authors or their employers. For +more information regarding authorship of content, please consult the listed +source code repository logs. + +## Declared Project Licenses + +This program and the accompanying materials are made available under the terms +of the Eclipse Distribution License v1.0 which is available at +https://www.eclipse.org/org/documents/edl-v10.php. + +SPDX-License-Identifier: BSD-3-Clause + +## Source Code + +The project maintains the following source code repositories: + +* https://github.com/eclipse-ee4j/angus-activation +* https://github.com/eclipse-ee4j/angus-mail + +## Third-party Content + +This project leverages the following third party content. + +None + +## Cryptography + +Content may contain encryption software. The country in which you are currently +may have restrictions on the import, possession, and use, and/or re-export to +another country, of encryption software. BEFORE using any encryption software, +please check the country's laws, regulations and policies concerning the import, +possession, or use, and re-export of encryption software, to see if this is +permitted. + + + +--- +org.eclipse.persistence:eclipselink + +Eclipse Public License - v 2.0 + + THE ACCOMPANYING PROGRAM IS PROVIDED UNDER THE TERMS OF THIS ECLIPSE + PUBLIC LICENSE ("AGREEMENT"). ANY USE, REPRODUCTION OR DISTRIBUTION + OF THE PROGRAM CONSTITUTES RECIPIENT'S ACCEPTANCE OF THIS AGREEMENT. + +1. DEFINITIONS + +"Contribution" means: + + a) in the case of the initial Contributor, the initial content + Distributed under this Agreement, and + + b) in the case of each subsequent Contributor: + i) changes to the Program, and + ii) additions to the Program; + where such changes and/or additions to the Program originate from + and are Distributed by that particular Contributor. A Contribution + "originates" from a Contributor if it was added to the Program by + such Contributor itself or anyone acting on such Contributor's behalf. + Contributions do not include changes or additions to the Program that + are not Modified Works. + +"Contributor" means any person or entity that Distributes the Program. + +"Licensed Patents" mean patent claims licensable by a Contributor which +are necessarily infringed by the use or sale of its Contribution alone +or when combined with the Program. + +"Program" means the Contributions Distributed in accordance with this +Agreement. + +"Recipient" means anyone who receives the Program under this Agreement +or any Secondary License (as applicable), including Contributors. + +"Derivative Works" shall mean any work, whether in Source Code or other +form, that is based on (or derived from) the Program and for which the +editorial revisions, annotations, elaborations, or other modifications +represent, as a whole, an original work of authorship. + +"Modified Works" shall mean any work in Source Code or other form that +results from an addition to, deletion from, or modification of the +contents of the Program, including, for purposes of clarity any new file +in Source Code form that contains any contents of the Program. Modified +Works shall not include works that contain only declarations, +interfaces, types, classes, structures, or files of the Program solely +in each case in order to link to, bind by name, or subclass the Program +or Modified Works thereof. + +"Distribute" means the acts of a) distributing or b) making available +in any manner that enables the transfer of a copy. + +"Source Code" means the form of a Program preferred for making +modifications, including but not limited to software source code, +documentation source, and configuration files. + +"Secondary License" means either the GNU General Public License, +Version 2.0, or any later versions of that license, including any +exceptions or additional permissions as identified by the initial +Contributor. + +2. GRANT OF RIGHTS + + a) Subject to the terms of this Agreement, each Contributor hereby + grants Recipient a non-exclusive, worldwide, royalty-free copyright + license to reproduce, prepare Derivative Works of, publicly display, + publicly perform, Distribute and sublicense the Contribution of such + Contributor, if any, and such Derivative Works. + + b) Subject to the terms of this Agreement, each Contributor hereby + grants Recipient a non-exclusive, worldwide, royalty-free patent + license under Licensed Patents to make, use, sell, offer to sell, + import and otherwise transfer the Contribution of such Contributor, + if any, in Source Code or other form. This patent license shall + apply to the combination of the Contribution and the Program if, at + the time the Contribution is added by the Contributor, such addition + of the Contribution causes such combination to be covered by the + Licensed Patents. The patent license shall not apply to any other + combinations which include the Contribution. No hardware per se is + licensed hereunder. + + c) Recipient understands that although each Contributor grants the + licenses to its Contributions set forth herein, no assurances are + provided by any Contributor that the Program does not infringe the + patent or other intellectual property rights of any other entity. + Each Contributor disclaims any liability to Recipient for claims + brought by any other entity based on infringement of intellectual + property rights or otherwise. As a condition to exercising the + rights and licenses granted hereunder, each Recipient hereby + assumes sole responsibility to secure any other intellectual + property rights needed, if any. For example, if a third party + patent license is required to allow Recipient to Distribute the + Program, it is Recipient's responsibility to acquire that license + before distributing the Program. + + d) Each Contributor represents that to its knowledge it has + sufficient copyright rights in its Contribution, if any, to grant + the copyright license set forth in this Agreement. + + e) Notwithstanding the terms of any Secondary License, no + Contributor makes additional grants to any Recipient (other than + those set forth in this Agreement) as a result of such Recipient's + receipt of the Program under the terms of a Secondary License + (if permitted under the terms of Section 3). + +3. REQUIREMENTS + +3.1 If a Contributor Distributes the Program in any form, then: + + a) the Program must also be made available as Source Code, in + accordance with section 3.2, and the Contributor must accompany + the Program with a statement that the Source Code for the Program + is available under this Agreement, and informs Recipients how to + obtain it in a reasonable manner on or through a medium customarily + used for software exchange; and + + b) the Contributor may Distribute the Program under a license + different than this Agreement, provided that such license: + i) effectively disclaims on behalf of all other Contributors all + warranties and conditions, express and implied, including + warranties or conditions of title and non-infringement, and + implied warranties or conditions of merchantability and fitness + for a particular purpose; + + ii) effectively excludes on behalf of all other Contributors all + liability for damages, including direct, indirect, special, + incidental and consequential damages, such as lost profits; + + iii) does not attempt to limit or alter the recipients' rights + in the Source Code under section 3.2; and + + iv) requires any subsequent distribution of the Program by any + party to be under a license that satisfies the requirements + of this section 3. + +3.2 When the Program is Distributed as Source Code: + + a) it must be made available under this Agreement, or if the + Program (i) is combined with other material in a separate file or + files made available under a Secondary License, and (ii) the initial + Contributor attached to the Source Code the notice described in + Exhibit A of this Agreement, then the Program may be made available + under the terms of such Secondary Licenses, and + + b) a copy of this Agreement must be included with each copy of + the Program. + +3.3 Contributors may not remove or alter any copyright, patent, +trademark, attribution notices, disclaimers of warranty, or limitations +of liability ("notices") contained within the Program from any copy of +the Program which they Distribute, provided that Contributors may add +their own appropriate notices. + +4. COMMERCIAL DISTRIBUTION + +Commercial distributors of software may accept certain responsibilities +with respect to end users, business partners and the like. While this +license is intended to facilitate the commercial use of the Program, +the Contributor who includes the Program in a commercial product +offering should do so in a manner which does not create potential +liability for other Contributors. Therefore, if a Contributor includes +the Program in a commercial product offering, such Contributor +("Commercial Contributor") hereby agrees to defend and indemnify every +other Contributor ("Indemnified Contributor") against any losses, +damages and costs (collectively "Losses") arising from claims, lawsuits +and other legal actions brought by a third party against the Indemnified +Contributor to the extent caused by the acts or omissions of such +Commercial Contributor in connection with its distribution of the Program +in a commercial product offering. The obligations in this section do not +apply to any claims or Losses relating to any actual or alleged +intellectual property infringement. In order to qualify, an Indemnified +Contributor must: a) promptly notify the Commercial Contributor in +writing of such claim, and b) allow the Commercial Contributor to control, +and cooperate with the Commercial Contributor in, the defense and any +related settlement negotiations. The Indemnified Contributor may +participate in any such claim at its own expense. + +For example, a Contributor might include the Program in a commercial +product offering, Product X. That Contributor is then a Commercial +Contributor. If that Commercial Contributor then makes performance +claims, or offers warranties related to Product X, those performance +claims and warranties are such Commercial Contributor's responsibility +alone. Under this section, the Commercial Contributor would have to +defend claims against the other Contributors related to those performance +claims and warranties, and if a court requires any other Contributor to +pay any damages as a result, the Commercial Contributor must pay +those damages. + +5. NO WARRANTY + +EXCEPT AS EXPRESSLY SET FORTH IN THIS AGREEMENT, AND TO THE EXTENT +PERMITTED BY APPLICABLE LAW, THE PROGRAM IS PROVIDED ON AN "AS IS" +BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, EITHER EXPRESS OR +IMPLIED INCLUDING, WITHOUT LIMITATION, ANY WARRANTIES OR CONDITIONS OF +TITLE, NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR +PURPOSE. Each Recipient is solely responsible for determining the +appropriateness of using and distributing the Program and assumes all +risks associated with its exercise of rights under this Agreement, +including but not limited to the risks and costs of program errors, +compliance with applicable laws, damage to or loss of data, programs +or equipment, and unavailability or interruption of operations. + +6. DISCLAIMER OF LIABILITY + +EXCEPT AS EXPRESSLY SET FORTH IN THIS AGREEMENT, AND TO THE EXTENT +PERMITTED BY APPLICABLE LAW, NEITHER RECIPIENT NOR ANY CONTRIBUTORS +SHALL HAVE ANY LIABILITY FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, +EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING WITHOUT LIMITATION LOST +PROFITS), HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN +CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) +ARISING IN ANY WAY OUT OF THE USE OR DISTRIBUTION OF THE PROGRAM OR THE +EXERCISE OF ANY RIGHTS GRANTED HEREUNDER, EVEN IF ADVISED OF THE +POSSIBILITY OF SUCH DAMAGES. + +7. GENERAL + +If any provision of this Agreement is invalid or unenforceable under +applicable law, it shall not affect the validity or enforceability of +the remainder of the terms of this Agreement, and without further +action by the parties hereto, such provision shall be reformed to the +minimum extent necessary to make such provision valid and enforceable. + +If Recipient institutes patent litigation against any entity +(including a cross-claim or counterclaim in a lawsuit) alleging that the +Program itself (excluding combinations of the Program with other software +or hardware) infringes such Recipient's patent(s), then such Recipient's +rights granted under Section 2(b) shall terminate as of the date such +litigation is filed. + +All Recipient's rights under this Agreement shall terminate if it +fails to comply with any of the material terms or conditions of this +Agreement and does not cure such failure in a reasonable period of +time after becoming aware of such noncompliance. If all Recipient's +rights under this Agreement terminate, Recipient agrees to cease use +and distribution of the Program as soon as reasonably practicable. +However, Recipient's obligations under this Agreement and any licenses +granted by Recipient relating to the Program shall continue and survive. + +Everyone is permitted to copy and distribute copies of this Agreement, +but in order to avoid inconsistency the Agreement is copyrighted and +may only be modified in the following manner. The Agreement Steward +reserves the right to publish new versions (including revisions) of +this Agreement from time to time. No one other than the Agreement +Steward has the right to modify this Agreement. The Eclipse Foundation +is the initial Agreement Steward. The Eclipse Foundation may assign the +responsibility to serve as the Agreement Steward to a suitable separate +entity. Each new version of the Agreement will be given a distinguishing +version number. The Program (including Contributions) may always be +Distributed subject to the version of the Agreement under which it was +received. In addition, after a new version of the Agreement is published, +Contributor may elect to Distribute the Program (including its +Contributions) under the new version. + +Except as expressly stated in Sections 2(a) and 2(b) above, Recipient +receives no rights or licenses to the intellectual property of any +Contributor under this Agreement, whether expressly, by implication, +estoppel or otherwise. All rights in the Program not expressly granted +under this Agreement are reserved. Nothing in this Agreement is intended +to be enforceable by any entity that is not a Contributor or Recipient. +No third-party beneficiary rights are created under this Agreement. + +Exhibit A - Form of Secondary Licenses Notice + +"This Source Code may also be made available under the following +Secondary Licenses when the conditions for such availability set forth +in the Eclipse Public License, v. 2.0 are satisfied: {name license(s), +version(s), and exceptions or additional permissions here}." + + Simply including a copy of this Agreement, including this Exhibit A + is not sufficient to license the Source Code under Secondary Licenses. + + If it is not possible or desirable to put the notice in a particular + file, then You may include the notice in a location (such as a LICENSE + file in a relevant directory) where a recipient would be likely to + look for such a notice. + + You may add additional accurate notices of copyright ownership. + + + + + +Eclipse Distribution License - v 1.0 + +Copyright (c) 2007, Eclipse Foundation, Inc. and its licensors. + +All rights reserved. + +Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: + + Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. + Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. + Neither the name of the Eclipse Foundation, Inc. nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. + +THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, +THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, +OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, +WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + + + +[//]: # " Copyright (c) 2020 Oracle and/or its affiliates. All rights reserved. " +[//]: # " " +[//]: # " This program and the accompanying materials are made available under the " +[//]: # " terms of the Eclipse Public License v. 2.0 which is available at " +[//]: # " http://www.eclipse.org/legal/epl-2.0, " +[//]: # " or the Eclipse Distribution License v. 1.0 which is available at " +[//]: # " http://www.eclipse.org/org/documents/edl-v10.php. " +[//]: # " " +[//]: # " SPDX-License-Identifier: EPL-2.0 OR BSD-3-Clause " + +# Notices for EclipseLink + +This content is produced and maintained by the EclipseLink project. + +* Project home: https://projects.eclipse.org/projects/ee4j.eclipselink + +## Trademarks + + EclipseLink is a trademark of the Eclipse Foundation. + +## Copyright + +All content is the property of the respective authors or their employers. For +more information regarding authorship of content, please consult the listed +source code repository logs. + +## Declared Project Licenses + +This program and the accompanying materials are made available under the terms +of the Eclipse Public License v. 2.0 which is available at +https://www.eclipse.org/legal/epl-2.0, or the Eclipse Distribution License v1.0 +which is available at https://www.eclipse.org/org/documents/edl-v10.php. + +SPDX-License-Identifier: EPL-2.0 OR BSD-3-Clause + +## Source Code + +The project maintains the following source code repositories: + +* https://github.com/eclipse-ee4j/eclipselink +* https://github.com/eclipse-ee4j/eclipselink-workbench +* https://github.com/eclipse-ee4j/eclipselink-oracleddlparser +* https://github.com/eclipse-ee4j/eclipselink-examples +* https://git.eclipse.org/r/plugins/gitiles/eclipselink/eclipselink.releng +* https://git.eclipse.org/r/plugins/gitiles/eclipselink/eclipselink.runtime +* https://git.eclipse.org/r/plugins/gitiles/eclipselink/eclipselink.utils.temp +* https://git.eclipse.org/r/plugins/gitiles/eclipselink/examples +* https://git.eclipse.org/r/plugins/gitiles/eclipselink/examples/mysports +* https://git.eclipse.org/r/plugins/gitiles/eclipselink/examples/nosql +* https://git.eclipse.org/r/plugins/gitiles/eclipselink/examples/performance +* https://git.eclipse.org/r/plugins/gitiles/eclipselink/examples/temporal +* https://git.eclipse.org/r/plugins/gitiles/eclipselink/incubator +* https://git.eclipse.org/r/plugins/gitiles/eclipselink/javax.persistence +* https://git.eclipse.org/r/plugins/gitiles/eclipselink/oracleddlparser + +## Third-party Content + +This project leverages the following third party content. + +* Service Data Objects (SDO) (2.1) + +* License: OSOA SDO License + +Activation Framework (1.1) + +* License: Common Development and Distribution License + +ANTLR (3.0) + +* License: New BSD license + +ANTLR Runtime only (3.5.2) + +* License: New BSD License +* Project: http://www.antlr3.org/ +* Source: + http://repo1.maven.org/maven2/org/antlr/antlr-runtime/3.5.2/antlr-runtime-3.5.2-sources.jar + +ANTLR Runtime only: Version (3.2) + +* License: New BSD license + +Apache Ant (1.7.0) + +* License: Apache License, 2.0 + +Apache Ant (1.10.7) + +* License: Apache-2.0 AND W3C AND LicenseRef-Public-Domain + +Apache Ant (1.10.7) + +* License: Apache-2.0 AND W3C AND LicenseRef-Public-Domain + +Apache Geronimo Jaxws 2.1 Spec (1.0) + +* License: Apache License, 2.0 + +Apache Java Servlet API (2.4) + +* License: Apache License, 2.0 + +atinject (Package javax.inject) (1.0) + +* License: Apache License, 2.0 + +atinject (Package javax.inject) (1.0) + +* License: Apache License, 2.0 + +Bean Validation API (1.0) + +* License: Apache License, 2.0 +* Source: + http://anonsvn.jboss.org/repos/hibernate/beanvalidation/trunk/validation-api/ + +Bean Validation API (1.0.0) + +* License: Apache License, 2.0 +* Project: + http://repository.jboss.com/maven2/javax/validation/validation-api/1.0.0.GA/ +* Source: + http://repository.jboss.com/maven2/javax/validation/validation-api/1.0.0.GA/ + +Bean Validation API (1.1.0) + +* License: Apache License, 2.0 +* Project: http://beanvalidation.org/ + +Bean Validation API (2.0.1) + +* License: Apache-2.0 +* Project: http://beanvalidation.org/ +* Source: + https://github.com/beanvalidation/beanvalidation-api/releases/tag/2.0.1.Final + +bnd (0.0.351) + +* License: Apache License, 2.0 +* Project: http://sourceforge.net/projects/bnd/ +* Source: http://sourceforge.net/projects/bnd/ + +cdi-api (1.0) + +* License: Apache License, 2.0 + +cdi-api 2.0 (JSR 365: Contexts and Dependency Injection for Java (2.0) + +* License: Apache-2.0 +* Project: http://www.cdi-spec.org/ +* Source: + http://repo1.maven.org/maven2/javax/enterprise/cdi-api/2.0/cdi-api-2.0-sources.jar + +Classmate library (1.0.0) + +* License: Apache License, 2.0 +* Project: http://github.com/cowtowncoder/java-classmate +* Source: + https://github.com/cowtowncoder/java-classmate/archive/classmate-1.0.0.tar.gz + +commons-logging-1.1.1.jar (1.1.1) + +* License: Apache License, 2.0 +* Project: http://commons.apache.org/logging/ +* Source: + http://apache.siamwebhosting.com/commons/logging/binaries/commons-logging-1.1.1-bin.zip + +EJB (3.0) + +* License: Common Development and Distribution License +* Project: http://java.sun.com/products/ejb/ + +ejb-api (3.1.1) + +* License: Common Development and Distribution License + +Expression Language API (2.2) + +* License: Common Development and Distribution License, Apache 2.0 License +* Project: https://uel.java.net/ +* Source: + http://download.java.net/maven/2/javax/el/el-api/2.2/el-api-2.2-sources.jar + +Expression Language Implementation (2.2.2) + +* License: Common Development and Distribution License +* Project: https://uel.java.net/ +* Source: + http://search.maven.org/remotecontent?filepath=org/glassfish/web/javax.el/2.2.2/javax.el-2.2.2-sources.jar + +geronimo activation (1.1) + +* License: Apache License, 2.0 + +glassfish-corba-orb (4.2.0) + +* License: CDDL-1.1 OR GPL-2.0 With Classpath-exception-2.0 + +gmbal (4.0.0) + +* License: (CDDL-1.1 OR GPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0) AND + Apache-2.0 +* Project: https://javaee.github.io/gmbal/ +* Source: https://github.com/javaee/gmbal + +gmbal-api (3.2.0) + +* License: CDDL-1.1 or GPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0 +* Project: https://javaee.github.io/gmbal/ +* Source: https://github.com/javaee/gmbal + +gmbal-pfl basic_4.0.1.b003 (4.0.1) + +* License: (CDDL-1.1 OR GPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0) AND + Apache-2.0 AND BSD-3-Clause + +hk2-api (2.3.0) + +* License: Common Development and Distribution License + +hk2-locator (2.3.0) + +* License: Common Development and Distribution License + +hk2-utils (2.3.0) + +* License: (CDDL-1.1 OR GPL-2.0 WITH Classpath-exception-2.0) + +Java API for JSON Processing JSR-353 (JSON-P) (0.0.99) + +* License: Common Development and Distribution License +* Project: http://json-processing-spec.java.net +* Source: http://java.net/projects/jsonp + +Java API for JSON Processing JSR-353 (JSON-P) (1.0) + +* License: Common Development and Distribution License +* Project: http://jsonp.java.net/ +* Source: + http://search.maven.org/remotecontent?filepath=javax/json/javax.json-api/1.0/javax.json-api-1.0-sources.jar + +Java API for JSON Processing RI JSR-353 (1.0) + +* License: Common Development and Distribution License +* Project: http://jsonp.java.net/ +* Source: + http://search.maven.org/remotecontent?filepath=org/glassfish/javax.json/1.0/javax.json-1.0-sources.jar + +Java Transaction (JTA) (1.1) + +* License: Common Development and Distribution License + +Java Transaction API (1.3) + +* License: (CDDL-1.1 OR GPL-2.0-only OR GPL-2.0-only WITH + classpath-exception-2.0) + +JavaCC (5.0) + +* License: New BSD License + +JavaMail (1.4) + +* License: Common Development and Distribution License + +Javax.annotation (1.2) + +* License: Common Development and Distribution License + +Javax.interceptor API (1.2) + +* License: Common Development and Distribution License 1.1 + +javax.json (1.0.4) + +* License: Common Development and Distribution License +* Project: https://jsonp.java.net +* Source: + http://central.maven.org/maven2/org/glassfish/javax.json/1.0.4/javax.json-1.0.4-sources.jar + +javax.json.bind-api (1.0) + +* License: Common Development and Distribution License +* Project: https://java.net/projects/jsonb-spec/pages/Home +* Source: https://java.net/projects/jsonb-spec/sources/git/show + +javax.ws.rs (2.0.1) + +* License: Common Development and Distribution License, + 1 file partial ASL + +JAX-RS (JSR311) API (1.1.1) + +* License: Common Development and Distribution License +* Project: https://jsr311.dev.java.net/ +* Source: + http://download.java.net/maven/2/javax/ws/rs/jsr311-api/1.1/jsr311-api-1.1-sources.jar + +JAXB (2.1.9) + +* License: Common Development and Distribution License + +JAXB (2.1.9) + +* License: Common Development and Distribution License + +JAXB (2.1.12) + +* License: BSD, Apache 2.0, CDDL, Public Domain, MIT License, Apache 1.1 + +JAXB 2.0 Reference Implementation (jaxb-impl.jar) (2.0.5) + +* License: Common Development and Distribution License + +JAXB IMPL (2.1.12) + +* License: Common Development and Distribution License +* Project: https://jaxb.dev.java.net/2.1.12/ +* Source: https://jaxb.dev.java.net/2.1.12/JAXB2_20090708.jar + +JAXB 2.0 XJC (2.0.5) + +* License: Common Development and Distribution License + +JAXB 2.2 API (Binary only) (2.2) + +* License: Common Development and Distribution License +* Project: https://jaxb.dev.java.net/2.2/ +* Source: https://jaxb.dev.java.net/2.2/JAXB2_20091104.jar + +JAXB 2.2 Impl (Binary only) (2.2) + +* License: Common Development and Distribution License + +JAXB 2.2 XJC (Binary) (2.2) + +* License: BSD, CDDL, Public Domain +* Project: https://jaxb.dev.java.net/2.2/ +* Source: https://jaxb.dev.java.net/2.2/JAXB2_20091104.jar + +JAXB API (2.2.12) + +* License: Common Development and Distribution License +* Project: https://jaxb.java.net/ +* Source: + https://maven.java.net/service/local/artifact/maven/redirect?r=metro-388&g=javax.xml.bind&a=jaxb-api&v=2.2.12-b140109.1041&e=jar&c=sources + +JAXB API (2.1.12) + +* License: Common Development and Distribution License +* Project: https://jaxb.dev.java.net/2.1.12/ +* Source: https://jaxb.dev.java.net/2.1.12/JAXB2_20090708.jar + +JAXB CORE (2.2.11) + +* License: Common Development and Distribution License + +JAXB CORE (2.2.11) + +* License: Common Development and Distribution License +* Project: https://jaxb.java.net/ +* Source: + https://maven.java.net/service/local/artifact/maven/redirect?r=metro-535&g=org.glassfish.jaxb&a=jaxb-core&v=2.2.11-M1&e=jar&c=sources + +JAXB IMPL (2.2.11) + +* License: Common Development and Distribution License + +JAXB XJC (2.2.11) + +* License: Common Development and Distribution License, MIT, BSD, Public + Domain, Apache License, 2.0 +* Project: https://jaxb.java.net/ +* Source: + https://maven.java.net/service/local/artifact/maven/redirect?r=metro-535&g=org.glassfish.jaxb&a=jaxb-xjc&v=2.2.11-M1&e=jar&c=sources + +JAXB-API 2.0 (2.0) + +* License: Commond Development and Distribution License + +jaxrpc.jar (1.1) + +* License: Common Development and Distribution License + +Jaxws-api-2.0.jar (2.0) + +* License: Common Development and Distribution License + +JCA 1.6 (1.6) + +* License: Common Development and Distribution License + +JCA Connector (1.5) + +* License: Common Development and Distribution License + +Jersey Common (2.0) + +* License: Common Development and Distribution License +* Project: http://jersey.java.net/ +* Source: https://github.com/jersey/jersey + +Jersey Core (1.8.0) + +* License: CDDL, Apache 2.0 (four files) + +Jersey Guava Repackaged (2.14) + +* License: Apache License, 2.0 + +Jersey Server (2.0) + +* License: Common Development and Distribution License +* Project: http://jersey.java.net/ +* Source: https://github.com/jersey/jersey + +jersey-client (2.14) + +* License: Common Development and Distribution License + +jersey-common (2.14) + +* License: Common Development and Distribution License + +jgroups (4.1.8) + +* License: Apache-2.0 AND CC-BY-2.5 AND LicenseRef-Public-Domain + +JMS (1.1) + +* License: Common Development and Distribution License + +JPA (2.0) + +* License: Negotiated agreement between Sun and Eclipse (supercedes spec terms) +* Project: http://jcp.org/en/jsr/detail?id=317 + +JPA (Javax Persistence Jar) (1.0) + +* License: Common Development and Distribution License + +Logback Classic (1.0.7) + +* License: Eclipse Public License + +Logback Core (1.0.7) + +* License: Eclipse Public License + +logback-classic (1.3.0) + +* License: EPL-1.0 OR LGPL-2.1 + +management-api (3.2.1) + +* License: (CDDL-1.1 OR GPL-2.0-only OR GPL-2.0-only WITH + Classpath-exception-2.0) +* Project: https://javaee.github.io/gmbal-commons/ +* Source: https://github.com/javaee/gmbal-commons + +MongoDB Java Driver (2.7.3) + +* License: Apache License, 2.0, Eclipse Public License (One File) + +MongoDB Java Driver (2.10.1) + +* License: Apache License, 2.0 + +mongodb java driver (3.2.0) + +* License: Apache License, 2.0, Creative Commons Attribution License 2.5, + Public Domain +* Project: https://docs.mongodb.org/ecosystem/drivers/java/ +* Source: + http://central.maven.org/maven2/org/mongodb/mongo-java-driver/3.2.0/mongo-java-driver-3.2.0-sources.jar + +mongodb java driver (3.11.2) + +* License: Apache-2.0 AND MIT AND AND CC-BY-2.5 AND CC0-1.0 + +opencsv (1.8) + +* License: Apache License, 2.0 +* Project: http://opencsv.sourceforge.net/ +* Source: + http://downloads.sourceforge.net/opencsv/opencsv-1.8-src-with-libs.tar.gz?modtime=1185864370&big_mirror=0 + +oracle-nosql-client (18.3.10) + +* License: Apache-2.0 + +org.apache.ant (1.6.5) + +* License: Apache License, 2.0 +* Project: http://ant.apache.org/ + +org.apache.felix.framework (6.0.3) + +* License: Pending + +org.osgi.core (1.2.0) + +* License: Apache-2.0 + +org.osgi.core (6.0.0) + +* License: Apache-2.0 + +OSGi Enterprise Specification APIs (4.2) + +* License: Apache License, 2.0 + +osgi.compendium (4.1.0) + +* License: Apache License, 2.0 + +osgi.core (4.1.0) + +* License: Apache License, 2.0 + +pax-exam (n/a) + +* License: Pending + +pax-exam-container-forked (4.13.1) + +* License: Pending + +pax-exam-junit4 (4.13.1) + +* License: Pending + +pax-exam-link-mvn (4.13.1) + +* License: Pending + +saaj-api-1.3.jar (1.3) + +* License: Common Development and Distribution License + +sdo Version: SDO (2.1.1) + +* License: SDO License (Custom) +* Project: http://jcp.org/aboutJava/communityprocess/pr/jsr235/index.html + +SLF4J API (1.7.2) + +* License: MIT License + +slf4j-api (1.7.30) + +* License: MIT + +slf4j-api (2.0.0) + +* License: MIT + +spring-agent (2.5.3) + +* License: Apache License, 2.0 +* Project: http://www.springframework.org +* Source: + http://downloads.sourceforge.net/springframework/spring-framework-2.5.3-with-dependencies.zip?modtime=1204283106&big_mirror=0 + +spring-aop (5.2.0) + +* License: Apache-2.0 + +spring-beans (5.2.0) + +* License: Apache-2.0 + +spring-context (5.2.0) + +* License: Apache-2.0 + +spring-core (5.2.0) + +* License: Apache-2.0 AND BSD-3-Clause + +spring-expression (5.2.0) + +* License: Apache-2.0 + +spring-instrument (5.2.0) + +* License: Pending + +spring-jcl (5.2.0) + +* License: Apache-2.0 + +spring-jdbc (5.2.0) + +* License: Pending + +spring-orm (5.2.0) + +* License: Pending + +spring-test (5.2.0) + +* License: Apache-2.0 AND BSD-3-Clause AND LicenseRef-Public-Domain + +spring-tx (5.2.0) + +* License: Pending + +StAX-API.Jar (1.0.1) + +* License: Apache License, 2.0 + +wsdl4j (1.6.2) + +* License: Common Public License 1.0 + +Xerces (2.9.0) + +* License: Apache License, 2.0 + +Xerces (2.12.0) + +* License: Apache-2.0 AND W3C-19980720 +* Project: http://xerces.apache.org/xerces2-j/ +* Source: https://svn.apache.org/repos/asf/xerces/java/tags/Xerces-J_2_12_0/ + +## Cryptography + +Content may contain encryption software. The country in which you are currently +may have restrictions on the import, possession, and use, and/or re-export to +another country, of encryption software. BEFORE using any encryption software, +please check the country's laws, regulations and policies concerning the import, +possession, or use, and re-export of encryption software, to see if this is +permitted. + + + +License for the Service Data Objects JavaDoc and Interface Definition +files. + +The Service Data Objects JavaDoc and Interface Definition files are +being provided by the copyright holders under the following license. By +using and/or copying this work, you agree that you have read, +understood and will comply with the following terms and conditions: + +Permission to copy, display, make derivative works of and distribute +the Service Data Objects JavaDoc and Interface Definition files (the +"Artifacts") in any medium without fee or royalty is hereby granted, +provided that you include the following on ALL copies of the Artifacts, +or portions thereof, that you make: + +1. A link or URL to the Artifacts at this location: +http://www.jcp.org/en/jsr/detail?id=235 + +2. The full text of this copyright notice as shown in the Artifacts. + + + +THE ARTIFACTS ARE PROVIDED "AS IS" AND THE AUTHORS MAKE NO +REPRESENTATIONS OR WARRANTIES, EXPRESS OR IMPLIED, REGARDING THE +ARTIFACTS AND THE IMPLEMENTATION OF THEIR CONTENTS, +INCLUDING, BUT NOT LIMITED TO, WARRANTIES OF MERCHANTABILITY, FITNESS +FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT OR TITLE. + +THE AUTHORS WILL NOT BE LIABLE FOR ANY DIRECT, INDIRECT, SPECIAL, +INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF OR RELATING TO ANY +USE OR DISTRIBUTION OF THE ARTIFACTS. + +The name and trademarks of the Authors may NOT be used in any manner, +including advertising or publicity pertaining to the Service Data +Objects Specification or its contents without specific, written prior +permission. Title to copyright in the Service Data Objects +Specification will at all times remain with the Authors. + +No other rights are granted by implication, estoppel or otherwise. + +Revision level 1.2, last updated on 2009/01/13 +Changed the URL of the Artifacts. +Revision level 1.1, last updated on 2007/11/19 + --- org.glassfish.hk2.external:aopalliance-repackaged @@ -4785,7 +6715,10 @@ org.glassfish.hk2:osgi-resource-locator do so. If you do not wish to do so, delete this exception statement from your version. +--- +org.jline:jline +JLine is distributed under the BSD License, meaning that you are completely free to redistribute, modify, or sell it with almost no restrictions. --- org.latencyutils:LatencyUtils diff --git a/README.md b/README.md index 764e01f91..01683246d 100644 --- a/README.md +++ b/README.md @@ -60,6 +60,10 @@ insert into db1.table1 values (1, 'a'); select * from db1.table1; ``` +Apache Polaris supports the following optional build options: +- `-PeclipseLink=true` – Enables the EclipseLink extension. +- `-PeclipseLinkDeps=[groupId]:[artifactId]:[version],...` – Specifies one or more additional dependencies for EclipseLink (e.g., JDBC drivers), separated by commas. + ### More build and run options Running in Docker - `docker build -t localhost:5001/polaris:latest .` - To build the image. diff --git a/build-logic/build.gradle.kts b/build-logic/build.gradle.kts index b61156e96..eade127b1 100644 --- a/build-logic/build.gradle.kts +++ b/build-logic/build.gradle.kts @@ -24,5 +24,7 @@ dependencies { implementation(baselibs.errorprone) implementation(baselibs.idea.ext) implementation(baselibs.license.report) + implementation(baselibs.nexus.publish) + implementation(baselibs.shadow) implementation(baselibs.spotless) } diff --git a/build-logic/src/main/kotlin/polaris-java.gradle.kts b/build-logic/src/main/kotlin/polaris-java.gradle.kts index 3690e1a95..7c5aebac5 100644 --- a/build-logic/src/main/kotlin/polaris-java.gradle.kts +++ b/build-logic/src/main/kotlin/polaris-java.gradle.kts @@ -21,6 +21,7 @@ import net.ltgt.gradle.errorprone.errorprone import org.gradle.api.tasks.compile.JavaCompile import org.gradle.api.tasks.testing.Test import org.gradle.kotlin.dsl.named +import publishing.PublishingHelperPlugin plugins { id("jacoco") @@ -30,6 +31,8 @@ plugins { id("net.ltgt.errorprone") } +apply() + tasks.withType(JavaCompile::class.java).configureEach { options.compilerArgs.addAll(listOf("-Xlint:unchecked", "-Xlint:deprecation")) options.errorprone.disableAllWarnings = true @@ -84,6 +87,11 @@ spotless { dependencies { errorprone(versionCatalogs.named("libs").findLibrary("errorprone").get()) } +java { + withJavadocJar() + withSourcesJar() +} + tasks.withType().configureEach { val opt = options as CoreJavadocOptions // don't spam log w/ "warning: no @param/@return" diff --git a/build-logic/src/main/kotlin/polaris-root.gradle.kts b/build-logic/src/main/kotlin/polaris-root.gradle.kts index ad0211c28..40aa3c494 100644 --- a/build-logic/src/main/kotlin/polaris-root.gradle.kts +++ b/build-logic/src/main/kotlin/polaris-root.gradle.kts @@ -20,12 +20,16 @@ import org.jetbrains.gradle.ext.copyright import org.jetbrains.gradle.ext.encodings import org.jetbrains.gradle.ext.settings +import publishing.PublishingHelperExtension +import publishing.PublishingHelperPlugin plugins { id("com.diffplug.spotless") id("org.jetbrains.gradle.plugin.idea-ext") } +apply() + spotless { kotlinGradle { ktfmt().googleStyle() @@ -57,3 +61,22 @@ if (System.getProperty("idea.sync.active").toBoolean()) { } } } + +extensions.getByType().apply { + asfProjectName = "polaris" + + mailingLists.addAll("dev", "issues", "commits") + + podlingPpmcAsfIds.addAll( + "anoop", + "ashvin", + "jackye", + "jbonofre", + "russellspitzer", + "snazy", + "takidau", + "vvcephei" + ) + podlingMentorsAsfIds.addAll("bdelacretaz", "blue", "holden", "jbonofre", "yao") + podlingCommitterAsfIds.addAll() +} diff --git a/build-logic/src/main/kotlin/polaris-shadow-jar.gradle.kts b/build-logic/src/main/kotlin/polaris-shadow-jar.gradle.kts new file mode 100644 index 000000000..8ed23bee2 --- /dev/null +++ b/build-logic/src/main/kotlin/polaris-shadow-jar.gradle.kts @@ -0,0 +1,40 @@ +/* + * Licensed to the Apache Software Foundation (ASF) under one + * or more contributor license agreements. See the NOTICE file + * distributed with this work for additional information + * regarding copyright ownership. The ASF licenses this file + * to you under the Apache License, Version 2.0 (the + * "License"); you may not use this file except in compliance + * with the License. You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, + * software distributed under the License is distributed on an + * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY + * KIND, either express or implied. See the License for the + * specific language governing permissions and limitations + * under the License. + */ + +import com.github.jengelman.gradle.plugins.shadow.tasks.ShadowJar + +plugins { id("com.gradleup.shadow") } + +val shadowJar = tasks.named("shadowJar") + +shadowJar.configure { + outputs.cacheIf { false } // do not cache uber/shaded jars + archiveClassifier = "" + mergeServiceFiles() +} + +tasks.named("jar").configure { + dependsOn(shadowJar) + archiveClassifier = "raw" +} + +tasks.withType().configureEach { + exclude("META-INF/jandex.idx") + isZip64 = true +} diff --git a/build-logic/src/main/kotlin/publishing/MemoizedGitInfo.kt b/build-logic/src/main/kotlin/publishing/MemoizedGitInfo.kt new file mode 100644 index 000000000..df56de76b --- /dev/null +++ b/build-logic/src/main/kotlin/publishing/MemoizedGitInfo.kt @@ -0,0 +1,85 @@ +/* + * Licensed to the Apache Software Foundation (ASF) under one + * or more contributor license agreements. See the NOTICE file + * distributed with this work for additional information + * regarding copyright ownership. The ASF licenses this file + * to you under the Apache License, Version 2.0 (the + * "License"); you may not use this file except in compliance + * with the License. You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, + * software distributed under the License is distributed on an + * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY + * KIND, either express or implied. See the License for the + * specific language governing permissions and limitations + * under the License. + */ + +package publishing + +import org.gradle.api.GradleException +import org.gradle.api.Project +import org.gradle.api.java.archives.Attributes +import org.gradle.kotlin.dsl.extra +import java.io.ByteArrayOutputStream +import java.nio.charset.StandardCharsets + +/** + * Container to memoize Git information retrieved via `git` command executions across all Gradle projects. + * Jar release artifacts get some attributes added to the jar manifest, which can be quite useful for released jars. + */ +internal class MemoizedGitInfo { + companion object { + private fun execProc(rootProject: Project, cmd: String, vararg args: Any): String { + val buf = ByteArrayOutputStream() + rootProject.exec { + executable = cmd + args(args.toList()) + standardOutput = buf + } + return buf.toString(StandardCharsets.UTF_8).trim() + } + + fun gitInfo(rootProject: Project, attribs: Attributes) { + val props = gitInfo(rootProject) + attribs.putAll(props) + } + + fun gitInfo(rootProject: Project): Map { + return if (rootProject.extra.has("gitReleaseInfo")) { + @Suppress("UNCHECKED_CAST") + rootProject.extra["gitReleaseInfo"] as Map + } else { + val isRelease = rootProject.hasProperty("release") + val gitHead = execProc(rootProject, "git", "rev-parse", "HEAD") + val gitDescribe = if (isRelease) { + try { + execProc(rootProject, "git", "describe", "--tags") + } catch (e: Exception) { + throw GradleException("'git describe --tags' failed - no Git tag?", e) + } + } else { + execProc(rootProject, "git", "describe", "--always", "--dirty") + } + val timestamp = execProc(rootProject, "date", "+%Y-%m-%d-%H:%M:%S%:z") + val system = execProc(rootProject, "uname", "-a") + val javaVersion = System.getProperty("java.version") + + val info = + mapOf( + "Apache-Polaris-Version" to rootProject.version.toString(), + "Apache-Polaris-Is-Release" to isRelease.toString(), + "Apache-Polaris-Build-Git-Head" to gitHead, + "Apache-Polaris-Build-Git-Describe" to gitDescribe, + "Apache-Polaris-Build-Timestamp" to timestamp, + "Apache-Polaris-Build-System" to system, + "Apache-Polaris-Build-Java-Version" to javaVersion + ) + rootProject.extra["gitReleaseInfo"] = info + return info + } + } + } +} \ No newline at end of file diff --git a/build-logic/src/main/kotlin/publishing/PublishingHelperExtension.kt b/build-logic/src/main/kotlin/publishing/PublishingHelperExtension.kt new file mode 100644 index 000000000..7ec06a830 --- /dev/null +++ b/build-logic/src/main/kotlin/publishing/PublishingHelperExtension.kt @@ -0,0 +1,61 @@ +/* + * Licensed to the Apache Software Foundation (ASF) under one + * or more contributor license agreements. See the NOTICE file + * distributed with this work for additional information + * regarding copyright ownership. The ASF licenses this file + * to you under the Apache License, Version 2.0 (the + * "License"); you may not use this file except in compliance + * with the License. You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, + * software distributed under the License is distributed on an + * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY + * KIND, either express or implied. See the License for the + * specific language governing permissions and limitations + * under the License. + */ + +package publishing + +import org.gradle.api.Project +import org.gradle.api.model.ObjectFactory +import org.gradle.kotlin.dsl.listProperty +import org.gradle.kotlin.dsl.property +import java.io.File +import javax.inject.Inject + +/** + * Gradle plugin extension object for the `PublishingHelperPlugin. Most attributes are likely never changed from the + * default values. + * + * Apache podlings need to specify the PPMC members and committers manually, Apache TLPs don't populate these + * properties. + */ +abstract class PublishingHelperExtension +@Inject +constructor(objectFactory: ObjectFactory, project: Project) +{ + // optional customization of the pom.xml element + val mavenName = objectFactory.property().convention(project.provider { project.name }) + + val licenseUrl = objectFactory.property().convention("https://www.apache.org/licenses/LICENSE-2.0.txt") + + // the following are only relevant on the root project + val asfProjectName = objectFactory.property() + val baseName = objectFactory.property().convention(project.provider { "apache-${asfProjectName.get()}-${project.version}" }) + val distributionDir = objectFactory.directoryProperty().convention(project.layout.buildDirectory.dir("distributions")) + val sourceTarball = objectFactory.fileProperty().convention(project.provider { distributionDir.get().file("${baseName.get()}.tar.gz") }) + val sourceTarballDigest = objectFactory.fileProperty().convention(project.provider { distributionDir.get().file("${baseName.get()}.sha512") }) + + val mailingLists = objectFactory.listProperty(String::class.java).convention(emptyList()) + + // override the list of developers (P)PMC members + committers, necessary for podlings + val podlingPpmcAsfIds = objectFactory.setProperty(String::class.java).convention(emptySet()) + val podlingMentorsAsfIds = objectFactory.setProperty(String::class.java).convention(emptySet()) + val podlingCommitterAsfIds = objectFactory.setProperty(String::class.java).convention(emptySet()) + + fun distributionFile(ext: String): File = + distributionDir.get().file("${baseName.get()}.$ext").asFile +} diff --git a/build-logic/src/main/kotlin/publishing/PublishingHelperPlugin.kt b/build-logic/src/main/kotlin/publishing/PublishingHelperPlugin.kt new file mode 100644 index 000000000..5dbae0a5b --- /dev/null +++ b/build-logic/src/main/kotlin/publishing/PublishingHelperPlugin.kt @@ -0,0 +1,147 @@ +/* + * Licensed to the Apache Software Foundation (ASF) under one + * or more contributor license agreements. See the NOTICE file + * distributed with this work for additional information + * regarding copyright ownership. The ASF licenses this file + * to you under the Apache License, Version 2.0 (the + * "License"); you may not use this file except in compliance + * with the License. You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, + * software distributed under the License is distributed on an + * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY + * KIND, either express or implied. See the License for the + * specific language governing permissions and limitations + * under the License. + */ + +package publishing + +import com.github.jengelman.gradle.plugins.shadow.ShadowExtension +import org.gradle.api.* +import javax.inject.Inject +import org.gradle.api.component.SoftwareComponentFactory +import org.gradle.api.publish.PublishingExtension +import org.gradle.api.publish.maven.MavenPublication +import org.gradle.api.publish.maven.plugins.MavenPublishPlugin +import org.gradle.api.publish.tasks.GenerateModuleMetadata +import org.gradle.kotlin.dsl.* +import org.gradle.plugins.signing.SigningExtension +import org.gradle.plugins.signing.SigningPlugin +import org.gradle.jvm.tasks.Jar + +/** Release-publishing helper plugin to generate publications that pass Sonatype validations, + * generate Apache release source tarball. + * + * The `release` Gradle project property triggers: signed artifacts + jars with Git information. + * The current Git HEAD must point to a Git tag. + * + * The `jarWithGitInfo` Gradle project property triggers: jars with Git information (not necessary + * with `release`). + * + * The task `sourceTarball` (available on the root project) generates a source tarball using + * `git archive`. + * + * The task `releaseEmailTemplate` generates the release-vote email subject + body. Outputs on + * the console and in the `build/distributions/` directory. + * + * Signing tip: If you want to use `gpg-agent`, set the `useGpgAgent` Gradle project property + * + * The following command publishes the project artifacts to your local maven repository, + * generates the source tarball - and uses `gpg-agent` to sign all artifacts and the tarball. + * Note that this requires a Git tag! + * ``` + * ./gradlew publishToMavenLocal sourceTarball -Prelease -PuseGpgAgent + * ``` + * + * You can generate signed artifacts when using the `signArtifacts` project property: + * ``` + * ./gradlew publishToMavenLocal sourceTarball -PsignArtifacts -PuseGpgAgent + * ``` + */ +@Suppress("unused") +class PublishingHelperPlugin +@Inject +constructor(private val softwareComponentFactory: SoftwareComponentFactory) : Plugin { + override fun apply(project: Project): Unit = + project.run { + extensions.create("publishingHelper", PublishingHelperExtension::class.java) + + val isRelease = project.hasProperty("release") + val isSigning = isRelease || project.hasProperty("signArtifacts") + + // Adds Git/Build/System related information to the generated jars, if the `release` project + // property is present. Do not add that information in development builds, so that the + // generated jars are still cacheable for Gradle. + if (isRelease || project.hasProperty("jarWithGitInfo")) { + // Runs `git`, considered expensive, so guarded behind project properties. + tasks.withType().configureEach { + manifest { MemoizedGitInfo.gitInfo(rootProject, attributes) } + } + } + + apply(plugin = "maven-publish") + apply(plugin = "signing") + + // Generate a source tarball for a release to be uploaded to + // https://dist.apache.org/repos/dist/dev//apache--/ + if (project == rootProject) { + configureOnRootProject(project) + } + + if (isSigning) { + plugins.withType().configureEach { + configure { + val signingKey: String? by project + val signingPassword: String? by project + useInMemoryPgpKeys(signingKey, signingPassword) + val publishing = project.extensions.getByType(PublishingExtension::class.java) + afterEvaluate { sign(publishing.publications.getByName("maven")) } + + if (project.hasProperty("useGpgAgent")) { + useGpgCmd() + } + } + } + } + + // Gradle complains when a Gradle module metadata ("pom on steroids") is generated with an + // enforcedPlatform() dependency - but Quarkus requires enforcedPlatform(), so we have to + // allow it. + tasks.withType().configureEach { + suppressedValidationErrors.add("enforced-platform") + } + + plugins.withType().configureEach { + configure { + publications { + register("maven") { + val mavenPublication = this + afterEvaluate { + // This MUST happen in an 'afterEvaluate' to ensure that the Shadow*Plugin has + // been applied. + if (project.extensions.findByType(ShadowExtension::class.java) != null) { + configureShadowPublishing(project, mavenPublication, softwareComponentFactory) + } else { + from(components.firstOrNull { c -> c.name == "javaPlatform" || c.name == "java" }) + } + + suppressPomMetadataWarningsFor("testFixturesApiElements") + suppressPomMetadataWarningsFor("testFixturesRuntimeElements") + + mavenPublication.groupId = "$group" + mavenPublication.version = project.version.toString() + } + + tasks.named("generatePomFileForMavenPublication").configure { + configurePom(project, mavenPublication, this) + } + } + } + } + } + } +} + diff --git a/build-logic/src/main/kotlin/publishing/configurePom.kt b/build-logic/src/main/kotlin/publishing/configurePom.kt new file mode 100644 index 000000000..e33cbf48d --- /dev/null +++ b/build-logic/src/main/kotlin/publishing/configurePom.kt @@ -0,0 +1,241 @@ +/* + * Licensed to the Apache Software Foundation (ASF) under one + * or more contributor license agreements. See the NOTICE file + * distributed with this work for additional information + * regarding copyright ownership. The ASF licenses this file + * to you under the Apache License, Version 2.0 (the + * "License"); you may not use this file except in compliance + * with the License. You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, + * software distributed under the License is distributed on an + * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY + * KIND, either express or implied. See the License for the + * specific language governing permissions and limitations + * under the License. + */ + +package publishing + +import groovy.util.Node +import org.gradle.api.GradleException +import org.gradle.api.Project +import org.gradle.api.Task +import org.gradle.api.artifacts.component.ModuleComponentSelector +import org.gradle.api.publish.maven.MavenPom +import org.gradle.api.publish.maven.MavenPublication +import org.gradle.internal.extensions.stdlib.capitalized + +/** + * Configures the content of the generated `pom.xml` files. + * + * For all projects except the root project, the pom gets the ``, ``, ``, `` + * elements and fixes dependencies in `` to be consumable by Maven. + * + * The root project generates the parent pom, containing all the necessary elements to pass Sonatype validation + * and some more information like `` and ``. Most of the information is taken from publicly + * consumable Apache project information from `https://projects.apache.org/json/projects/>.json`. + * `` contains all (P)PMC members and committers from that project info JSON, ordered by real name. + * `` is taken from GitHub's `https://api.github.com/repos/apache//contributors?per_page=1000` + * endpoint to give all contributors credit, ordered by number of contributions (as returned by that endpoint). + */ +internal fun configurePom(project: Project, mavenPublication: MavenPublication, task: Task) = mavenPublication.run { + val e = project.extensions.getByType(PublishingHelperExtension::class.java) + + pom { + if (project != project.rootProject) { + name.set(e.mavenName.get()) + description.set(project.description) + + // Add the license to every pom to make it easier for downstream project to retrieve the license. + licenses { + license { + name.set("Apache-2.0") // SPDX identifier + url.set(e.licenseUrl.get()) + } + } + + withXml { + val projectNode = asNode() + + val parentNode = projectNode.appendNode("parent") + val parent = project.parent!! + parentNode.appendNode("groupId", parent.group) + parentNode.appendNode("artifactId", parent.name) + parentNode.appendNode("version", parent.version) + + addMissingMandatoryDependencyVersions(project, projectNode) + } + } else { + val mavenPom = this + + task.doFirst { + val asfName = e.asfProjectName.get() + val (asfPrj, fromPodlings) = fetchAsfProject(asfName) + + val asfProjectName = asfPrj["name"] as String + + mavenPom.name.set(asfProjectName) + mavenPom.description.set(asfPrj["description"] as String) + + inceptionYear.set((asfPrj["created"] ?: asfPrj["started"]!!).toString().replace("(\\d+)-.*", "\\1")) + url.set(asfPrj["homepage"] as String) + organization { + name.set("The Apache Software Foundation") + url.set("https://www.apache.org/") + } + licenses { + license { + name.set("Apache-2.0") // SPDX identifier + url.set(e.licenseUrl.get()) + } + } + mailingLists { + e.mailingLists.get().forEach { ml -> + mailingList { + name.set("${ml.capitalized()} Mailing List") + subscribe.set("$ml-subscribe@$asfName.apache.org") + unsubscribe.set("$ml-ubsubscribe@$asfName.apache.org") + post.set("$ml@$asfName.apache.org") + archive.set("https://lists.apache.org/list.html?$ml@$asfName.apache.org") + } + } + } + scm { + val codeRepo: String = if (asfPrj.contains("repository")) { + val repos: List = unsafeCast(asfPrj["repository"]) as List + repos[0] + } else { + "https://github.com/apache/$asfName.git" + } + connection.set("scm:git:$codeRepo") + developerConnection.set("scm:git:$codeRepo") + url.set("$codeRepo/tree/main") + tag.set("main") + } + issueManagement { + url.set(if (asfPrj.contains("repository")) { + asfPrj["bug-database"] as String + } else { + "https://github.com/apache/$asfName/issues" + }) + } + addDevelopersToPom(mavenPom, asfName, e, fromPodlings) + addContributorsToPom(mavenPom, asfName, asfProjectName) + } + } + } +} + +/** + * Adds contributors as returned by GitHub, in descending `contributions` order. + */ +fun addContributorsToPom(mavenPom: MavenPom, asfName: String, asfProjectName: String) = mavenPom.run { + contributors { + val contributors: List>? = + parseJson("https://api.github.com/repos/apache/$asfName/contributors?per_page=1000") + if (contributors != null) { + contributors.filter { contributor -> + contributor["type"] == "User" + }.forEach { contributor -> + contributor { + name.set(contributor["login"] as String) + url.set(contributor["url"] as String) + organization.set("$asfProjectName, GitHub contributors") + organizationUrl.set("https://github.com/apache/$asfName") + } + } + } + } +} + +/** + * Adds Apache (P)PMC members + committers, in `name` order. + */ +fun addDevelopersToPom(mavenPom: MavenPom, asfName: String, e: PublishingHelperExtension, fromPodlings: Boolean) = mavenPom.run { + developers { + // Cannot use check the 'groups' for podlings, because the (only) podling's group + // references the mentors, not the PPMC members/committers. There seems to be no + // way to automatically fetch the committers + PPMC members for a podling, except + // maybe + val people: Map> = + parseJson("https://projects.apache.org/json/foundation/people.json")!! + val filteredPeople: List>> + val pmc: (Pair>) -> Boolean + val mentor: (Pair>) -> Boolean + val pmcRole: String + if (!fromPodlings) { + val asfNamePmc = "$asfName-pmc" + filteredPeople = people.filter { entry -> + val groups: List = unsafeCast(entry.value["groups"]) + groups.any { it == asfName || it == asfNamePmc } + }.toList() + pmc = {(_, info) -> + val groups: List = unsafeCast(info["groups"]) + groups.contains(asfNamePmc) + } + pmcRole = "PMC Member" + mentor = {(_, _) -> false} + } else { + val podlingPpmc = e.podlingPpmcAsfIds.get() + val podlingMentors = e.podlingMentorsAsfIds.get() + filteredPeople = (e.podlingCommitterAsfIds.get() + podlingPpmc + podlingMentors).map { id -> + val info = people[id] + if (info == null) { + throw GradleException("Person with ASF id '%id' not found in people.json".format(id)) + } + Pair(id, info) + } + pmc = {(id, _) -> podlingPpmc.contains(id) || podlingMentors.contains(id)} + pmcRole = "PPMC Member" + mentor = {(id, _) -> podlingMentors.contains(id)} + } + + val sortedPeople = filteredPeople.sortedBy { (id, info) -> "${info["name"] as String}_$id" } + + sortedPeople.forEach { (id, info) -> + developer { + this.id.set(id) + this.name.set(info["name"] as String) + this.organization.set("Apache Software Foundation") + this.email.set("$id@apache.org") + this.roles.add("Committer") + if (pmc.invoke(Pair(id, info))) { + this.roles.add(pmcRole) + } + if (mentor.invoke(Pair(id, info))) { + this.roles.add("Mentor") + } + } + } + } +} + +/** + * Scans the generated `pom.xml` for `` in `` that do not have a + * `` and adds one, if possible. Maven kinda requires `` tags there, even if the + * `` without a `` is a bom and that bom's version is available transitively. + */ +fun addMissingMandatoryDependencyVersions(project: Project, projectNode: Node) { + xmlNode(xmlNode(projectNode, "dependencyManagement"), "dependencies")?.children()?.forEach { + val dependency = it as Node + if (xmlNode(dependency, "version") == null) { + val depGroup = xmlNode(dependency, "groupId")!!.text() + val depName = xmlNode(dependency, "artifactId")!!.text() + + var depResult = + findDependency(project.configurations.findByName("runtimeClasspath"), depGroup, depName) + if (depResult == null) { + depResult = + findDependency(project.configurations.findByName("testRuntimeClasspath"), depGroup, depName) + } + + if (depResult != null) { + val req = depResult.requested as ModuleComponentSelector + dependency.appendNode("version", req.version) + } + } + } +} diff --git a/build-logic/src/main/kotlin/publishing/rootProject.kt b/build-logic/src/main/kotlin/publishing/rootProject.kt new file mode 100644 index 000000000..3d14a1cbf --- /dev/null +++ b/build-logic/src/main/kotlin/publishing/rootProject.kt @@ -0,0 +1,198 @@ +/* + * Licensed to the Apache Software Foundation (ASF) under one + * or more contributor license agreements. See the NOTICE file + * distributed with this work for additional information + * regarding copyright ownership. The ASF licenses this file + * to you under the Apache License, Version 2.0 (the + * "License"); you may not use this file except in compliance + * with the License. You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, + * software distributed under the License is distributed on an + * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY + * KIND, either express or implied. See the License for the + * specific language governing permissions and limitations + * under the License. + */ + +package publishing + +import io.github.gradlenexus.publishplugin.NexusPublishExtension +import io.github.gradlenexus.publishplugin.NexusPublishPlugin +import io.github.gradlenexus.publishplugin.internal.StagingRepositoryDescriptorRegistryBuildService +import org.gradle.api.GradleException +import org.gradle.api.Project +import org.gradle.api.services.BuildServiceRegistration +import org.gradle.kotlin.dsl.apply +import org.gradle.kotlin.dsl.named +import org.gradle.kotlin.dsl.register +import org.gradle.plugins.signing.Sign + +/** + * Configures Apache project specific publishing tasks on the root project, for example the source-tarball related tasks. + */ +internal fun configureOnRootProject(project: Project) = project.run { + apply() + + val isRelease = project.hasProperty("release") + val isSigning = isRelease || project.hasProperty("signArtifacts") + + val sourceTarball = tasks.register("sourceTarball") + sourceTarball.configure(){ + group = "build" + description = "Generate a source tarball for a release to be uploaded to dist.apache.org/repos/dist" + + doFirst { + val e = project.extensions.getByType(PublishingHelperExtension::class.java) + mkdir(e.distributionDir) + exec { + executable = "git" + args("archive", "--prefix=${e.baseName.get()}/", "--format=tar.gz", "--output=${e.sourceTarball.get().asFile.relativeTo(projectDir)}", "HEAD") + workingDir(project.projectDir) + } + } + } + + val digestSourceTarball = tasks.register("digestSourceTarball") + digestSourceTarball.configure { + mustRunAfter(sourceTarball) + + doFirst { + val e = project.extensions.getByType(PublishingHelperExtension::class.java) + generateDigest(e.sourceTarball.get().asFile, e.sourceTarballDigest.get().asFile, "SHA-512") + } + } + + sourceTarball.configure { + finalizedBy(digestSourceTarball) + } + + if (isSigning) { + val signSourceTarball = tasks.register("signSourceTarball") + signSourceTarball.configure { + mustRunAfter(sourceTarball) + doFirst { + val e = project.extensions.getByType(PublishingHelperExtension::class.java) + sign(e.sourceTarball.get().asFile) + } + } + sourceTarball.configure { + finalizedBy(signSourceTarball) + } + } + + val releaseEmailTemplate = tasks.register("releaseEmailTemplate") + releaseEmailTemplate.configure { + group = "publishing" + description = "Generate release-vote email subject + body, including the staging repository URL, if run during the Maven release." + + mustRunAfter("initializeApacheStagingRepository") + + doFirst { + val e = project.extensions.getByType(PublishingHelperExtension::class.java) + val asfName = e.asfProjectName.get() + + val gitInfo = MemoizedGitInfo.gitInfo(rootProject) + val gitCommitId = gitInfo["Apache-Polaris-Build-Git-Head"] + + val repos = project.extensions.getByType(NexusPublishExtension::class.java).repositories + val repo = repos.iterator().next() + + val stagingRepositoryUrlRegistryRegistration = gradle.sharedServices.registrations.named>("stagingRepositoryUrlRegistry") + val staginRepoUrl = if (stagingRepositoryUrlRegistryRegistration.isPresent) { + val stagingRepositoryUrlRegistryBuildServiceRegistration = stagingRepositoryUrlRegistryRegistration.get() + val stagingRepositoryUrlRegistryService = stagingRepositoryUrlRegistryBuildServiceRegistration.getService() + if (stagingRepositoryUrlRegistryService.isPresent) { + val registry = stagingRepositoryUrlRegistryService.get().registry + try { + val stagingRepoDesc = registry.get(repo.name) + val stagingRepoId = stagingRepoDesc.stagingRepositoryId + "https://repository.apache.org/content/repositories/$stagingRepoId/" + } catch (e: IllegalStateException) { + "NO STAGING REPOSITORY ($e)" + } + } else { + "NO STAGING REPOSITORY (no registry service) !!" + } + } else { + "NO STAGING REPOSITORY (no build service) !!" + } + + val (asfPrj, _) = fetchAsfProject(asfName) + val asfProjectName = asfPrj["name"] as String + + val versionNoRc = version.toString().replace("-rc-?[0-9]+".toRegex(), "") + + val subjectFile = e.distributionFile("vote-email-subject.txt").relativeTo(projectDir) + val bodyFile = e.distributionFile("vote-email-body.txt").relativeTo(projectDir) + + val emailSubject = "[VOTE] Release $asfProjectName $version" + subjectFile.writeText(emailSubject) + + val emailBody = """ + Hi everyone, + + I propose that we release the following RC as the official + $asfProjectName $versionNoRc release. + + The commit ID is 229d8f6fcd109e6c8943ea7cbb41dab746c6d0ed + * This corresponds to the tag: apache-$asfName-$version + * https://github.com/apache/$asfName/commits/apache-$asfName-$version + * https://github.com/apache/$asfName/tree/$gitCommitId + + The release tarball, signature, and checksums are here: + * https://dist.apache.org/repos/dist/dev/$asfName/apache-$asfName-$version + + You can find the KEYS file here: + * https://dist.apache.org/repos/dist/dev/$asfName/KEYS + + Convenience binary artifacts are staged on Nexus. The Maven repository URL is: + * $staginRepoUrl + + Please download, verify, and test. + + Please vote in the next 72 hours. + + [ ] +1 Release this as Apache Iceberg 1.6.0 + [ ] +0 + [ ] -1 Do not release this because... + + Only PMC members have binding votes, but other community members are + encouraged to cast non-binding votes. This vote will pass if there are + 3 binding +1 votes and more binding +1 votes than -1 votes. + + Thanks + Regards + """ + + logger.lifecycle(""" + + + The email for your release vote mail: + ------------------------------------- + + Suggested subject: (also in file $subjectFile) + + $emailSubject + + Suggested body: (also in file $bodyFile) + + $emailBody + + """.trimIndent()) + bodyFile.writeText(emailBody.trimIndent()) + } + } + + if (isRelease) { + sourceTarball.configure { + finalizedBy(releaseEmailTemplate) + } + } + + afterEvaluate { + tasks.named("closeApacheStagingRepository") { mustRunAfter(releaseEmailTemplate) } + } +} diff --git a/build-logic/src/main/kotlin/publishing/shadowPub.kt b/build-logic/src/main/kotlin/publishing/shadowPub.kt new file mode 100644 index 000000000..4fb78410e --- /dev/null +++ b/build-logic/src/main/kotlin/publishing/shadowPub.kt @@ -0,0 +1,125 @@ +/* + * Licensed to the Apache Software Foundation (ASF) under one + * or more contributor license agreements. See the NOTICE file + * distributed with this work for additional information + * regarding copyright ownership. The ASF licenses this file + * to you under the Apache License, Version 2.0 (the + * "License"); you may not use this file except in compliance + * with the License. You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, + * software distributed under the License is distributed on an + * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY + * KIND, either express or implied. See the License for the + * specific language governing permissions and limitations + * under the License. + */ + +package publishing + +import groovy.util.Node +import groovy.util.NodeList +import org.gradle.api.Project +import org.gradle.api.artifacts.ConfigurationVariant +import org.gradle.api.artifacts.ProjectDependency +import org.gradle.api.attributes.Bundling +import org.gradle.api.attributes.Category +import org.gradle.api.attributes.LibraryElements +import org.gradle.api.attributes.Usage +import org.gradle.api.component.SoftwareComponentFactory +import org.gradle.api.plugins.JavaBasePlugin +import org.gradle.api.publish.maven.MavenPublication + + +/** + * "Proper" publication of shadow-jar instead of the "main" jar, with "the right" Gradle's module + * metadata that refers to the shadow-jar instead of the "main" jar, which is not published by + * Nessie. + * + * Pieces of this function are taken from the `Java(Base)Plugin` and `ShadowExtension`. + */ +internal fun configureShadowPublishing(project: Project, mavenPublication: MavenPublication, softwareComponentFactory: SoftwareComponentFactory) = project.run { + fun isPublishable(element: ConfigurationVariant): Boolean { + for (artifact in element.artifacts) { + if (JavaBasePlugin.UNPUBLISHABLE_VARIANT_ARTIFACTS.contains(artifact.type)) { + return false + } + } + return true + } + + val shadowJar = project.tasks.named("shadowJar") + + val shadowApiElements = + project.configurations.create("shadowApiElements") { + isCanBeConsumed = true + isCanBeResolved = false + attributes { + attribute(Usage.USAGE_ATTRIBUTE, project.objects.named(Usage::class.java, Usage.JAVA_API)) + attribute( + Category.CATEGORY_ATTRIBUTE, + project.objects.named(Category::class.java, Category.LIBRARY) + ) + attribute( + LibraryElements.LIBRARY_ELEMENTS_ATTRIBUTE, + project.objects.named(LibraryElements::class.java, LibraryElements.JAR) + ) + attribute( + Bundling.BUNDLING_ATTRIBUTE, + project.objects.named(Bundling::class.java, Bundling.SHADOWED) + ) + } + outgoing.artifact(shadowJar) + } + + val component = softwareComponentFactory.adhoc("shadow") + component.addVariantsFromConfiguration(shadowApiElements) { + if (isPublishable(configurationVariant)) { + mapToMavenScope("compile") + } else { + skip() + } + } + // component.addVariantsFromConfiguration(configurations.getByName("runtimeElements")) { + component.addVariantsFromConfiguration( + project.configurations.getByName("shadowRuntimeElements") + ) { + if (isPublishable(configurationVariant)) { + mapToMavenScope("runtime") + } else { + skip() + } + } + // Sonatype requires the javadoc and sources jar to be present, but the + // Shadow extension does not publish those. + component.addVariantsFromConfiguration(project.configurations.getByName("javadocElements")) {} + component.addVariantsFromConfiguration(project.configurations.getByName("sourcesElements")) {} + mavenPublication.from(component) + + // This a replacement to add dependencies to the pom, if necessary. Equivalent to + // 'shadowExtension.component(mavenPublication)', which we cannot use. + + mavenPublication.pom { + withXml { + val node = asNode() + val depNode = node.get("dependencies") + val dependenciesNode = + if ((depNode as NodeList).isNotEmpty()) depNode[0] as Node + else node.appendNode("dependencies") + project.configurations.getByName("shadow").allDependencies.forEach { + @Suppress("DEPRECATION") + if ( + (it is ProjectDependency) || it !is org.gradle.api.artifacts.SelfResolvingDependency + ) { + val dependencyNode = dependenciesNode.appendNode("dependency") + dependencyNode.appendNode("groupId", it.group) + dependencyNode.appendNode("artifactId", it.name) + dependencyNode.appendNode("version", it.version) + dependencyNode.appendNode("scope", "runtime") + } + } + } + } +} diff --git a/build-logic/src/main/kotlin/publishing/util.kt b/build-logic/src/main/kotlin/publishing/util.kt new file mode 100644 index 000000000..ee5919ce7 --- /dev/null +++ b/build-logic/src/main/kotlin/publishing/util.kt @@ -0,0 +1,109 @@ +/* + * Licensed to the Apache Software Foundation (ASF) under one + * or more contributor license agreements. See the NOTICE file + * distributed with this work for additional information + * regarding copyright ownership. The ASF licenses this file + * to you under the Apache License, Version 2.0 (the + * "License"); you may not use this file except in compliance + * with the License. You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, + * software distributed under the License is distributed on an + * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY + * KIND, either express or implied. See the License for the + * specific language governing permissions and limitations + * under the License. + */ + +package publishing + +import groovy.json.JsonException +import groovy.json.JsonSlurper +import groovy.util.Node +import groovy.util.NodeList +import groovy.xml.XmlSlurper +import groovy.xml.slurpersupport.GPathResult +import org.gradle.api.GradleException +import org.gradle.api.artifacts.Configuration +import org.gradle.api.artifacts.component.ModuleComponentSelector +import org.gradle.api.artifacts.result.DependencyResult +import java.io.File +import java.io.FileNotFoundException +import java.net.URI +import java.security.MessageDigest + +internal fun findDependency( + config: Configuration?, + depGroup: String, + depName: String +): DependencyResult? { + if (config != null) { + val depResult = + config.incoming.resolutionResult.allDependencies.find { depResult -> + val req = depResult.requested + if (req is ModuleComponentSelector) req.group == depGroup && req.module == depName + else false + } + return depResult + } + return null +} + +internal fun xmlNode(node: Node?, child: String): Node? { + val found = node?.get(child) + if (found is NodeList) { + if (found.isNotEmpty()) { + return found[0] as Node + } + } + return null +} + +internal fun generateDigest(input: File, output: File, algorithm: String) { + val md = MessageDigest.getInstance(algorithm) + input.inputStream().use { + val buffered = it.buffered(8192) + val buf = ByteArray(8192) + var rd: Int + while (true) { + rd = buffered.read(buf) + if (rd == -1) break + md.update(buf, 0, rd) + } + + output.writeText(md.digest().joinToString(separator = "") { eachByte -> "%02x".format(eachByte) }) + } +} + +internal fun fetchAsfProject(asfName: String): Pair, Boolean> { + val tlpPrj: Map? = parseJson("https://projects.apache.org/json/projects/$asfName.json") + return if (tlpPrj != null) { + Pair(tlpPrj, false) + } else { + val podlings: Map> = parseJson("https://projects.apache.org/json/foundation/podlings.json")!! + val podling = podlings[asfName] + if (podling == null) { + throw GradleException("Neither a project nor a podling for $asfName could be found at Apache") + } + Pair(podling, true) + } +} + +internal fun unsafeCast(o: Any?): T { + @Suppress("UNCHECKED_CAST") + return o as T +} + +internal fun parseJson(url: String): T? { + try { + @Suppress("UNCHECKED_CAST") + return JsonSlurper().parse(URI(url).toURL()) as T + } catch (e: JsonException) { + if (e.cause is FileNotFoundException) { + return null + } + throw e + } +} diff --git a/build.gradle.kts b/build.gradle.kts index 0b58abc8c..21e403989 100644 --- a/build.gradle.kts +++ b/build.gradle.kts @@ -17,6 +17,7 @@ * under the License. */ +import java.net.URI import org.nosphere.apache.rat.RatTask buildscript { @@ -82,6 +83,7 @@ tasks.named("rat").configure { excludes.add("gradle/wrapper/gradle-wrapper*.jar*") + excludes.add("logs/**") excludes.add("polaris-service/src/**/banner.txt") excludes.add("polaris-service/logs") @@ -94,6 +96,7 @@ tasks.named("rat").configure { excludes.add("regtests/derby.log") excludes.add("regtests/metastore_db/**") excludes.add("regtests/client/python/.openapi-generator/**") + excludes.add("regtests/output/**") excludes.add("**/*.ipynb") excludes.add("**/*.iml") @@ -108,3 +111,35 @@ tasks.named("rat").configure { excludes.add("**/*.env*") } + +// Pass environment variables: +// ORG_GRADLE_PROJECT_apacheUsername +// ORG_GRADLE_PROJECT_apachePassword +// OR in ~/.gradle/gradle.properties set +// apacheUsername +// apachePassword +// Call targets: +// publishToApache +// closeApacheStagingRepository +// releaseApacheStagingRepository +// or closeAndReleaseApacheStagingRepository +// +// Username is your ASF ID +// Password: your ASF LDAP password - or better: a token generated via +// https://repository.apache.org/ +nexusPublishing { + transitionCheckOptions { + // default==60 (10 minutes), wait up to 120 minutes + maxRetries = 720 + // default 10s + delayBetween = java.time.Duration.ofSeconds(10) + } + + repositories { + register("apache") { + nexusUrl = URI.create("https://repository.apache.org/service/local/") + snapshotRepositoryUrl = + URI.create("https://repository.apache.org/content/repositories/snapshots/") + } + } +} diff --git a/docs/access-control.md b/docs/access-control.md index 95fd6a243..783b017f6 100644 --- a/docs/access-control.md +++ b/docs/access-control.md @@ -160,8 +160,8 @@ includes the following users: create service principals. She can also create catalogs and namespaces and configure access control for Polaris resources. -- **Bob:** A data engineer who uses Snowpipe Streaming (in Snowflake) - and Apache Spark™ connections to interact with Polaris. +- **Bob:** A data engineer who uses Apache Spark™ to + interact with Polaris. - Alice has created a service principal for Bob. It has been granted the Data_engineer principal role, which in turn has been @@ -175,8 +175,8 @@ includes the following users: - The Data administrator roles grant full administrative rights to the Silver zone catalog and Gold zone catalog. -- **Mark:** A data scientist who uses Snowflake AI services to - interact with Polaris. +- **Mark:** A data scientist who uses trains models with data managed + by Polaris. - Alice has created a service principal for Mark. It has been granted the Data_scientist principal role, which in turn has diff --git a/docs/index.html b/docs/index.html index 861bce66e..bc2da3046 100644 --- a/docs/index.html +++ b/docs/index.html @@ -961,10 +961,10 @@

Connecting with Spark

<h3 id="apache-iceberg-tables-and-catalogs">Apache Iceberg&trade; tables and catalogs</h3> <p>In an internal catalog, an Iceberg table is registered in Polaris, but read and written via query engines. The table data and metadata is stored in your external cloud storage. The table uses Polaris as the Iceberg catalog.</p> -<p>If you have tables that use Snowflake as the Iceberg catalog (Snowflake-managed tables), you can sync these tables to an external -catalog in Polaris. If you sync this catalog to Polaris, it appears as an external catalog in Polaris. The table data and -metadata is stored in your external cloud storage. The Snowflake query engine can read from or write to these tables. However, the other query -engines can only read from these tables.</p> +<p>If you have tables housed in another Iceberg catalog, you can sync these tables to an external catalog in Polaris. +If you sync this catalog to Polaris, it appears as an external catalog in Polaris. Clients connecting to the external +catalog can read from or write to these tables. However, clients connecting to Polaris will only be able to +read from these tables.</p> <blockquote> <p><strong>Important</strong></p> <p>For the access privileges defined for a catalog to be enforced correctly, the following conditions must be met:</p> @@ -1092,10 +1092,10 @@

Namespace

Apache Iceberg™ tables and catalogs

In an internal catalog, an Iceberg table is registered in Polaris, but read and written via query engines. The table data and metadata is stored in your external cloud storage. The table uses Polaris as the Iceberg catalog.

-

If you have tables that use Snowflake as the Iceberg catalog (Snowflake-managed tables), you can sync these tables to an external -catalog in Polaris. If you sync this catalog to Polaris, it appears as an external catalog in Polaris. The table data and -metadata is stored in your external cloud storage. The Snowflake query engine can read from or write to these tables. However, the other query -engines can only read from these tables.

+

If you have tables housed in another Iceberg catalog, you can sync these tables to an external catalog in Polaris. +If you sync this catalog to Polaris, it appears as an external catalog in Polaris. Clients connecting to the external +catalog can read from or write to these tables. However, clients connecting to Polaris will only be able to +read from these tables.

Important

For the access privileges defined for a catalog to be enforced correctly, the following conditions must be met:

@@ -1199,11 +1199,10 @@

Storage configuration

service connection with a service principal that has the privileges to perform these actions.</p> </li> -<li><p>Alice uses Snowflake to read data from Table1.</p> +<li><p>Alice uses Trino to read data from Table1.</p> <p>Alice can read data from Table1 because she is using a service -connection with a service principal with a catalog integration that -has the privileges to perform this action. Alice -creates an unmanaged table in Snowflake to read data from Table1.</p> +connection with a service principal that has the privileges to +perform this action.</p> </li> </ol> <p><img src="img/example-workflow.svg" alt="Diagram that shows an example workflow for Apache Polaris (Incubating)" title="Example workflow for Apache Polaris (Incubating)"></p> @@ -1216,11 +1215,10 @@

Storage configuration

service connection with a service principal that has the privileges to perform these actions.

-

  • Alice uses Snowflake to read data from Table1.

    +

  • Alice uses Trino to read data from Table1.

    Alice can read data from Table1 because she is using a service -connection with a service principal with a catalog integration that -has the privileges to perform this action. Alice -creates an unmanaged table in Snowflake to read data from Table1.

    +connection with a service principal that has the privileges to +perform this action.

    • Diagram that shows an example workflow for Apache Polaris (Incubating)

    @@ -1867,8 +1865,8 @@

    Catalog privileges

    create service principals. She can also create catalogs and namespaces and configure access control for Polaris resources.</p> </li> -<li><p><strong>Bob:</strong> A data engineer who uses Snowpipe Streaming (in Snowflake) - and Apache Spark&trade; connections to interact with Polaris.</p> +<li><p><strong>Bob:</strong> A data engineer who uses Apache Spark&trade; to + interact with Polaris.</p> <ul> <li><p>Alice has created a service principal for Bob. It has been granted the Data_engineer principal role, which in turn has been @@ -1884,8 +1882,8 @@

    Catalog privileges

    </li> </ul> </li> -<li><p><strong>Mark:</strong> A data scientist who uses Snowflake AI services to - interact with Polaris.</p> +<li><p><strong>Mark:</strong> A data scientist who uses trains models with data managed + by Polaris.</p> <ul> <li><p>Alice has created a service principal for Mark. It has been granted the Data_scientist principal role, which in turn has @@ -1905,8 +1903,8 @@

    Catalog privileges

    create service principals. She can also create catalogs and namespaces and configure access control for Polaris resources.

    -

  • Bob: A data engineer who uses Snowpipe Streaming (in Snowflake) - and Apache Spark™ connections to interact with Polaris.

    +

  • Bob: A data engineer who uses Apache Spark™ to + interact with Polaris.

    • Alice has created a service principal for Bob. It has been granted the Data_engineer principal role, which in turn has been @@ -1922,8 +1920,8 @@

      Catalog privileges

    • -

  • Mark: A data scientist who uses Snowflake AI services to - interact with Polaris.

    +

  • Mark: A data scientist who uses trains models with data managed + by Polaris.

    • Alice has created a service principal for Mark. It has been granted the Data_scientist principal role, which in turn has @@ -2220,8 +2218,8 @@

      featureConfiguratio " class="sc-euGpHm sc-exayXG fwfkcU jYGAQp">

      Server URL when the port can be inferred from the scheme

      {scheme}://{host}/{basePath}/catalogs/{catalogName}

      Generic base server URL, with all parts configurable

      -
      {scheme}://{host}:{port}/{basePath}/catalogs/{catalogName}

      Request samples

      Content type
      application/json
      {
      • "currentEntityVersion": 0,
      • "properties": {
        },
      • "storageConfigInfo": {
        }
      }

      Response samples

      Content type
      application/json
      Example
      {
      • "type": "INTERNAL",
      • "name": "string",
      • "properties": {
        },
      • "createTimestamp": 0,
      • "lastUpdateTimestamp": 0,
      • "entityVersion": 0,
      • "storageConfigInfo": {
        }
      }

      deleteCatalog

      Delete an existing catalog. This is a cascading operation that deletes all metadata, including principals, roles and grants. If the catalog is an internal catalog, all tables and namespaces are dropped without purge.

      +
      {scheme}://{host}:{port}/{basePath}/catalogs/{catalogName}

      Request samples

      Content type
      application/json
      {
      • "currentEntityVersion": 0,
      • "properties": {
        },
      • "storageConfigInfo": {
        }
      }

      Response samples

      Content type
      application/json
      Example
      {
      • "type": "INTERNAL",
      • "name": "string",
      • "properties": {
        },
      • "createTimestamp": 0,
      • "lastUpdateTimestamp": 0,
      • "entityVersion": 0,
      • "storageConfigInfo": {
        }
      }

      deleteCatalog

      Delete an existing catalog. The catalog must be empty.

      Authorizations:
      Polaris_Management_Service_OAuth2
      path Parameters
      catalogName
      required
      string [ 1 .. 256 ] characters ^(?!\s*[s|S][y|Y][s|S][t|T][e|E][m|M]\$).*$

      The name of the catalog

      Responses

      table
      required
      string
      Example: sales

      A table name

      -
      Request Body schema: application/json
      required

      The request containing the notification to be sent

      -
      notification-type
      required
      string (Apache_Iceberg_REST_Catalog_API_NotificationType)
      Enum: "UNKNOWN" "CREATE" "UPDATE" "DROP"
      object (Apache_Iceberg_REST_Catalog_API_TableUpdateNotification)

      Responses

      The request containing the notification to be sent. +For each table, Polaris will reject any notification where the timestamp in the request body is older than or equal to the most recent time Polaris has already processed for the table. The responsibility of ensuring the correct order of timestamps for a sequence of notifications lies with the caller of the API. This includes managing potential clock skew or inconsistencies when notifications are sent from multiple sources.

      +
      notification-type
      required
      string (Apache_Iceberg_REST_Catalog_API_NotificationType)
      Enum: "UNKNOWN" "CREATE" "UPDATE" "DROP"
      required
      object (Apache_Iceberg_REST_Catalog_API_TableUpdateNotification)

      Responses

      Generic base server URL, with all parts configurable

      -
      {scheme}://{host}:{port}/{basePath}/v1/{prefix}/namespaces/{namespace}/tables/{table}/notifications

      Request samples

      Content type
      application/json
      {
      • "notification-type": "UNKNOWN",
      • "payload": {
        }
      }

      Response samples

      Content type
      application/json
      {
      • "error": {
        }
      }

      Commit updates to multiple tables in an atomic operation

      Authorizations:
      Apache_Iceberg_REST_Catalog_API_OAuth2Apache_Iceberg_REST_Catalog_API_BearerAuth
      path Parameters
      prefix
      required
      string
      {scheme}://{host}:{port}/{basePath}/v1/{prefix}/namespaces/{namespace}/tables/{table}/notifications

      Request samples

      Content type
      application/json
      {
      • "notification-type": "UNKNOWN",
      • "payload": {
        }
      }

      Response samples

      Content type
      application/json
      {
      • "error": {
        }
      }

      Commit updates to multiple tables in an atomic operation

      Authorizations:
      Apache_Iceberg_REST_Catalog_API_OAuth2Apache_Iceberg_REST_Catalog_API_BearerAuth
      path Parameters
      prefix
      required
      string

      An optional prefix in the path

      Request Body schema: application/json
      required
      featureConfiguratio " class="sc-euGpHm sc-exayXG fwfkcU jYGAQp">

      Generic base server URL, with all parts configurable

      {scheme}://{host}:{port}/{basePath}/v1/{prefix}/views/rename

      Request samples

      Content type
      application/json
      {
      • "source": {
        },
      • "destination": {
        }
      }

      Response samples

      Content type
      application/json
      {
      • "error": {
        }
      }