Skip to content

Commit a8e130d

Browse files
jscheffljscheffl
authored
Apache RAT 0.18 is released, upgrade references (#64231)
1 parent c65c7fd commit a8e130d

7 files changed

Lines changed: 37 additions & 37 deletions

File tree

‎dev/README_RELEASE_AIRFLOW.md‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -903,10 +903,10 @@ Download the latest jar from https://creadur.apache.org/rat/download_rat.cgi (un
903903
You can run this command to do it for you (including checksum verification for your own security):
904904
905905
```shell script
906-
# Checksum value is taken from https://downloads.apache.org/creadur/apache-rat-0.17/apache-rat-0.17-bin.tar.gz.sha512
907-
wget -q https://archive.apache.org/dist/creadur/apache-rat-0.17/apache-rat-0.17-bin.tar.gz -O /tmp/apache-rat-0.17-bin.tar.gz
908-
echo "32848673dc4fb639c33ad85172dfa9d7a4441a0144e407771c9f7eb6a9a0b7a9b557b9722af968500fae84a6e60775449d538e36e342f786f20945b1645294a0 /tmp/apache-rat-0.17-bin.tar.gz" | sha512sum -c -
909-
tar -xzf /tmp/apache-rat-0.17-bin.tar.gz -C /tmp
906+
# Checksum value is taken from https://downloads.apache.org/creadur/apache-rat-0.18/apache-rat-0.18-bin.tar.gz.sha512
907+
wget -q https://archive.apache.org/dist/creadur/apache-rat-0.18/apache-rat-0.18-bin.tar.gz -O /tmp/apache-rat-0.18-bin.tar.gz
908+
echo "32848673dc4fb639c33ad85172dfa9d7a4441a0144e407771c9f7eb6a9a0b7a9b557b9722af968500fae84a6e60775449d538e36e342f786f20945b1645294a0 /tmp/apache-rat-0.18-bin.tar.gz" | sha512sum -c -
909+
tar -xzf /tmp/apache-rat-0.18-bin.tar.gz -C /tmp
910910
```
911911
912912
Unpack the release source archive (the `<package + version>-source.tar.gz` file) to a folder
@@ -919,13 +919,13 @@ Run the check:
919919
920920
```shell script
921921
cp ${AIRFLOW_REPO_ROOT}/.rat-excludes /tmp/apache-airflow-src/.rat-excludes
922-
java -jar /tmp/apache-rat-0.17/apache-rat-0.17.jar --input-exclude-file /tmp/apache-airflow-src/.rat-excludes /tmp/apache-airflow-src/ | grep -E "! |INFO: "
922+
java -jar /tmp/apache-rat-0.18/apache-rat-0.18.jar --input-exclude-file /tmp/apache-airflow-src/.rat-excludes /tmp/apache-airflow-src/ | grep -E "! |INFO: "
923923
```
924924
925925
You should see no files reported as Unknown or with wrong licence and summary of the check similar to:
926926
927927
```
928-
INFO: Apache Creadur RAT 0.17 (Apache Software Foundation)
928+
INFO: Apache Creadur RAT 0.18 (Apache Software Foundation)
929929
INFO: Excluding patterns: .git-blame-ignore-revs, .github/*, .git ...
930930
INFO: Excluding MISC collection.
931931
INFO: Excluding HIDDEN_DIR collection.

‎dev/README_RELEASE_AIRFLOWCTL.md‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -550,10 +550,10 @@ Download the latest jar from https://creadur.apache.org/rat/download_rat.cgi (un
550550
You can run this command to do it for you (including checksum verification for your own security):
551551

552552
```shell script
553-
# Checksum value is taken from https://downloads.apache.org/creadur/apache-rat-0.17/apache-rat-0.17-bin.tar.gz.sha512
554-
wget -q https://archive.apache.org/dist/creadur/apache-rat-0.17/apache-rat-0.17-bin.tar.gz -O /tmp/apache-rat-0.17-bin.tar.gz
555-
echo "32848673dc4fb639c33ad85172dfa9d7a4441a0144e407771c9f7eb6a9a0b7a9b557b9722af968500fae84a6e60775449d538e36e342f786f20945b1645294a0 /tmp/apache-rat-0.17-bin.tar.gz" | sha512sum -c -
556-
tar -xzf /tmp/apache-rat-0.17-bin.tar.gz -C /tmp
553+
# Checksum value is taken from https://downloads.apache.org/creadur/apache-rat-0.18/apache-rat-0.18-bin.tar.gz.sha512
554+
wget -q https://archive.apache.org/dist/creadur/apache-rat-0.18/apache-rat-0.18-bin.tar.gz -O /tmp/apache-rat-0.18-bin.tar.gz
555+
echo "32848673dc4fb639c33ad85172dfa9d7a4441a0144e407771c9f7eb6a9a0b7a9b557b9722af968500fae84a6e60775449d538e36e342f786f20945b1645294a0 /tmp/apache-rat-0.18-bin.tar.gz" | sha512sum -c -
556+
tar -xzf /tmp/apache-rat-0.18-bin.tar.gz -C /tmp
557557
```
558558

559559
Unpack the release source archive (the `<package + version>-source.tar.gz` file) to a folder
@@ -566,13 +566,13 @@ Run the check:
566566

567567
```shell script
568568
cp ${AIRFLOW_REPO_ROOT}/.rat-excludes /tmp/apache-airflow-src/.rat-excludes
569-
java -jar /tmp/apache-rat-0.17/apache-rat-0.17.jar --input-exclude-file /tmp/apache-airflow-src/.rat-excludes /tmp/apache-airflow-src/ | grep -E "! |INFO: "
569+
java -jar /tmp/apache-rat-0.18/apache-rat-0.18.jar --input-exclude-file /tmp/apache-airflow-src/.rat-excludes /tmp/apache-airflow-src/ | grep -E "! |INFO: "
570570
```
571571

572572
You should see no files reported as Unknown or with wrong licence and summary of the check similar to:
573573

574574
```
575-
INFO: Apache Creadur RAT 0.17 (Apache Software Foundation)
575+
INFO: Apache Creadur RAT 0.18 (Apache Software Foundation)
576576
INFO: Excluding patterns: .git-blame-ignore-revs, .github/*, .git ...
577577
INFO: Excluding MISC collection.
578578
INFO: Excluding HIDDEN_DIR collection.

‎dev/README_RELEASE_HELM_CHART.md‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -419,7 +419,7 @@ For license checks, the .rat-excludes files is included, so you can run the foll
419419
420420
tar -xvf airflow-chart-${VERSION}-source.tar.gz
421421
cd airflow-chart-${VERSION}
422-
java -jar apache-rat-0.13.jar chart -E .rat-excludes
422+
java -jar apache-rat-0.18.jar chart -E .rat-excludes
423423
424424
Please note that the version number excludes the \`rcX\` string, so it's now
425425
simply ${VERSION}. This will allow us to rename the artifact without modifying
@@ -550,10 +550,10 @@ cd ${SVN_REPO_ROOT}/dev/airflow/helm-chart/${VERSION_RC}
550550
You can run this command to do it for you (including checksum verification for your own security):
551551

552552
```shell script
553-
# Checksum value is taken from https://downloads.apache.org/creadur/apache-rat-0.17/apache-rat-0.17-bin.tar.gz.sha512
554-
wget -q https://archive.apache.org/dist/creadur/apache-rat-0.17/apache-rat-0.17-bin.tar.gz -O /tmp/apache-rat-0.17-bin.tar.gz
555-
echo "32848673dc4fb639c33ad85172dfa9d7a4441a0144e407771c9f7eb6a9a0b7a9b557b9722af968500fae84a6e60775449d538e36e342f786f20945b1645294a0 /tmp/apache-rat-0.17-bin.tar.gz" | sha512sum -c -
556-
tar -xzf /tmp/apache-rat-0.17-bin.tar.gz -C /tmp
553+
# Checksum value is taken from https://downloads.apache.org/creadur/apache-rat-0.18/apache-rat-0.18-bin.tar.gz.sha512
554+
wget -q https://archive.apache.org/dist/creadur/apache-rat-0.18/apache-rat-0.18-bin.tar.gz -O /tmp/apache-rat-0.18-bin.tar.gz
555+
echo "32848673dc4fb639c33ad85172dfa9d7a4441a0144e407771c9f7eb6a9a0b7a9b557b9722af968500fae84a6e60775449d538e36e342f786f20945b1645294a0 /tmp/apache-rat-0.18-bin.tar.gz" | sha512sum -c -
556+
tar -xzf /tmp/apache-rat-0.18-bin.tar.gz -C /tmp
557557
```
558558

559559
* Unpack the release source archive (the `<package + version>-source.tar.gz` file) to a folder
@@ -565,15 +565,15 @@ rm -rf /tmp/apache/airflow-helm-chart-src && mkdir -p /tmp/apache/airflow-helm-c
565565

566566
```shell
567567
cp ${AIRFLOW_REPO_ROOT}/.rat-excludes /tmp/apache/airflow-helm-chart-src/.rat-excludes
568-
java -jar /tmp/apache-rat-0.17/apache-rat-0.17.jar --input-exclude-file /tmp/apache/airflow-helm-chart-src/.rat-excludes /tmp/apache/airflow-helm-chart-src/ | grep -E "! |INFO: "
568+
java -jar /tmp/apache-rat-0.18/apache-rat-0.18.jar --input-exclude-file /tmp/apache/airflow-helm-chart-src/.rat-excludes /tmp/apache/airflow-helm-chart-src/ | grep -E "! |INFO: "
569569
```
570570

571571
where `.rat-excludes` is the file in the root of Chart source code.
572572

573573
You should see no files reported as Unknown or with wrong licence and summary of the check similar to:
574574

575575
```
576-
INFO: Apache Creadur RAT 0.17 (Apache Software Foundation)
576+
INFO: Apache Creadur RAT 0.18 (Apache Software Foundation)
577577
INFO: Excluding patterns: .git-blame-ignore-revs, .github/*, .git ...
578578
INFO: Excluding MISC collection.
579579
INFO: Excluding HIDDEN_DIR collection.

‎dev/README_RELEASE_PROVIDERS.md‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -843,10 +843,10 @@ Download the latest jar from https://creadur.apache.org/rat/download_rat.cgi (un
843843
You can run this command to do it for you (including checksum verification for your own security):
844844

845845
```shell script
846-
# Checksum value is taken from https://downloads.apache.org/creadur/apache-rat-0.17/apache-rat-0.17-bin.tar.gz.sha512
847-
wget -q https://archive.apache.org/dist/creadur/apache-rat-0.17/apache-rat-0.17-bin.tar.gz -O /tmp/apache-rat-0.17-bin.tar.gz
848-
echo "32848673dc4fb639c33ad85172dfa9d7a4441a0144e407771c9f7eb6a9a0b7a9b557b9722af968500fae84a6e60775449d538e36e342f786f20945b1645294a0 /tmp/apache-rat-0.17-bin.tar.gz" | sha512sum -c -
849-
tar -xzf /tmp/apache-rat-0.17-bin.tar.gz -C /tmp
846+
# Checksum value is taken from https://downloads.apache.org/creadur/apache-rat-0.18/apache-rat-0.18-bin.tar.gz.sha512
847+
wget -q https://archive.apache.org/dist/creadur/apache-rat-0.18/apache-rat-0.18-bin.tar.gz -O /tmp/apache-rat-0.18-bin.tar.gz
848+
echo "32848673dc4fb639c33ad85172dfa9d7a4441a0144e407771c9f7eb6a9a0b7a9b557b9722af968500fae84a6e60775449d538e36e342f786f20945b1645294a0 /tmp/apache-rat-0.18-bin.tar.gz" | sha512sum -c -
849+
tar -xzf /tmp/apache-rat-0.18-bin.tar.gz -C /tmp
850850
```
851851

852852
Unpack the release source archive (the `<package + version>-source.tar.gz` file) to a folder
@@ -859,13 +859,13 @@ Run the check:
859859

860860
```shell script
861861
cp ${AIRFLOW_REPO_ROOT}/.rat-excludes /tmp/apache-airflow-providers-src/.rat-excludes
862-
java -jar /tmp/apache-rat-0.17/apache-rat-0.17.jar --input-exclude-file /tmp/apache-airflow-providers-src/.rat-excludes /tmp/apache-airflow-providers-src/ | grep -E "! |INFO: "
862+
java -jar /tmp/apache-rat-0.18/apache-rat-0.18.jar --input-exclude-file /tmp/apache-airflow-providers-src/.rat-excludes /tmp/apache-airflow-providers-src/ | grep -E "! |INFO: "
863863
```
864864

865865
You should see no files reported as Unknown or with wrong licence and summary of the check similar to:
866866

867867
```
868-
INFO: Apache Creadur RAT 0.17 (Apache Software Foundation)
868+
INFO: Apache Creadur RAT 0.18 (Apache Software Foundation)
869869
INFO: Excluding patterns: .git-blame-ignore-revs, .github/*, .git ...
870870
INFO: Excluding MISC collection.
871871
INFO: Excluding HIDDEN_DIR collection.

‎dev/README_RELEASE_PYTHON_CLIENT.md‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -487,10 +487,10 @@ Download the latest jar from https://creadur.apache.org/rat/download_rat.cgi (un
487487
You can run this command to do it for you (including checksum verification for your own security):
488488

489489
```shell script
490-
# Checksum value is taken from https://downloads.apache.org/creadur/apache-rat-0.17/apache-rat-0.17-bin.tar.gz.sha512
491-
wget -q https://archive.apache.org/dist/creadur/apache-rat-0.17/apache-rat-0.17-bin.tar.gz -O /tmp/apache-rat-0.17-bin.tar.gz
492-
echo "32848673dc4fb639c33ad85172dfa9d7a4441a0144e407771c9f7eb6a9a0b7a9b557b9722af968500fae84a6e60775449d538e36e342f786f20945b1645294a0 /tmp/apache-rat-0.17-bin.tar.gz" | sha512sum -c -
493-
tar -xzf /tmp/apache-rat-0.17-bin.tar.gz -C /tmp
490+
# Checksum value is taken from https://downloads.apache.org/creadur/apache-rat-0.18/apache-rat-0.18-bin.tar.gz.sha512
491+
wget -q https://archive.apache.org/dist/creadur/apache-rat-0.18/apache-rat-0.18-bin.tar.gz -O /tmp/apache-rat-0.18-bin.tar.gz
492+
echo "32848673dc4fb639c33ad85172dfa9d7a4441a0144e407771c9f7eb6a9a0b7a9b557b9722af968500fae84a6e60775449d538e36e342f786f20945b1645294a0 /tmp/apache-rat-0.18-bin.tar.gz" | sha512sum -c -
493+
tar -xzf /tmp/apache-rat-0.18-bin.tar.gz -C /tmp
494494
```
495495

496496
Unpack the release source archive (the `<package + version>-source.tar.gz` file) to a folder
@@ -503,13 +503,13 @@ Run the check:
503503

504504
```shell script
505505
cp ${AIRFLOW_REPO_ROOT}/.rat-excludes /tmp/apache-airflow-python-client-src/.rat-excludes
506-
java -jar /tmp/apache-rat-0.17/apache-rat-0.17.jar --input-exclude-file /tmp/apache-airflow-python-client-src/.rat-excludes /tmp/apache-airflow-python-client-src/ | grep -E "! |INFO: "
506+
java -jar /tmp/apache-rat-0.18/apache-rat-0.18.jar --input-exclude-file /tmp/apache-airflow-python-client-src/.rat-excludes /tmp/apache-airflow-python-client-src/ | grep -E "! |INFO: "
507507
```
508508

509509
You should see no files reported as Unknown or with wrong licence and summary of the check similar to:
510510

511511
```
512-
INFO: Apache Creadur RAT 0.17 (Apache Software Foundation)
512+
INFO: Apache Creadur RAT 0.18 (Apache Software Foundation)
513513
INFO: Excluding patterns: .git-blame-ignore-revs, .github/*, .git ...
514514
INFO: Excluding MISC collection.
515515
INFO: Excluding HIDDEN_DIR collection.

‎dev/breeze/src/airflow_breeze/utils/release_validator.py‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -52,10 +52,10 @@ class ReleaseValidator(ABC):
5252
"""Base class for release validators with common functionality for PMC verification."""
5353

5454
APACHE_RAT_JAR_DOWNLOAD_URL = (
55-
"https://downloads.apache.org/creadur/apache-rat-0.17/apache-rat-0.17-bin.tar.gz"
55+
"https://downloads.apache.org/creadur/apache-rat-0.18/apache-rat-0.18-bin.tar.gz"
5656
)
5757
APACHE_RAT_JAR_SHA512_DOWNLOAD_URL = (
58-
"https://downloads.apache.org/creadur/apache-rat-0.17/apache-rat-0.17-bin.tar.gz.sha512"
58+
"https://downloads.apache.org/creadur/apache-rat-0.18/apache-rat-0.18-bin.tar.gz.sha512"
5959
)
6060
GPG_KEYS_URL = "https://dist.apache.org/repos/dist/release/airflow/KEYS"
6161

@@ -481,15 +481,15 @@ def _download_apache_rat(self) -> Path | None:
481481
482482
Returns the path to the jar file, or None if download/verification failed.
483483
"""
484-
rat_jar = Path("/tmp/apache-rat-0.17/apache-rat-0.17.jar")
484+
rat_jar = Path("/tmp/apache-rat-0.18/apache-rat-0.18.jar")
485485

486486
if rat_jar.exists():
487487
console_print("[green]Apache RAT already present[/green]")
488488
return rat_jar
489489

490490
console_print("Downloading Apache RAT...")
491-
rat_tarball = Path("/tmp/apache-rat-0.17-bin.tar.gz")
492-
rat_sha512 = Path("/tmp/apache-rat-0.17-bin.tar.gz.sha512")
491+
rat_tarball = Path("/tmp/apache-rat-0.18-bin.tar.gz")
492+
rat_sha512 = Path("/tmp/apache-rat-0.18-bin.tar.gz.sha512")
493493

494494
# Download tarball
495495
wget_result = run_command(

‎scripts/ci/dockerfiles/apache-rat/build_and_push.sh‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ set -euo pipefail
1919
GITHUB_REPOSITORY=${GITHUB_REPOSITORY:="apache/airflow"}
2020
readonly GITHUB_REPOSITORY
2121

22-
APACHERAT_VERSION="0.17"
22+
APACHERAT_VERSION="0.18"
2323
readonly APACHERAT_VERSION
2424

2525
AIRFLOW_APACHERAT_VERSION="2025.10.24"

0 commit comments

Comments
 (0)