Skip to content

Make LICENSE-wheel reflect the bundled UI dependencies, plus two 0.43.0 RC0 fixes #868

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
skrawcz merged 4 commits into from
Aug 3, 2026
Merged

Make LICENSE-wheel reflect the bundled UI dependencies, plus two 0.43.0 RC0 fixes #868

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
ef76ed4
Generate the wheel's third-party license section from the UI build
potiuk Aug 3, 2026
1fb551b
Skip the Bedrock tests instead of aborting collection without boto3
potiuk Aug 3, 2026
b2ec6eb
Use importlib.metadata for /api/v0/version instead of pkg_resources
potiuk Aug 3, 2026
81aea57
Fail release validation when LICENSE-wheel drifts from the UI bundle
potiuk Aug 3, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 14 additions & 3 deletions .github/workflows/release-validation.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,11 +18,14 @@
#-->
# Validates the Apache release pipeline on every PR: builds the real release
# artifacts (git archive, sdist, wheel) using the release script with
# --skip-signing, runs Apache RAT on the source tarball, then installs the
# wheel into a fresh venv outside the source tree and smoke-tests the server.
# --skip-signing, runs Apache RAT on the source tarball, checks that
# LICENSE-wheel still covers the npm packages bundled into the compiled UI,
# then installs the wheel into a fresh venv outside the source tree and
# smoke-tests the server.
#
# This is designed to catch the class of bugs that have broken recent RCs:
# license/header issues (RAT), examples missing from the wheel (smoke test),
# license/header issues (RAT), a LICENSE-wheel that no longer matches the
# bundled UI dependencies, examples missing from the wheel (smoke test),
# and general "voter tries to install this and it breaks" failures.

name: Release Validation
Expand Down Expand Up @@ -142,6 +145,14 @@ jobs:
test -f "dist/apache-burr-${BURR_VERSION}-incubating-sdist.tar.gz"
test -f "dist/apache_burr-${BURR_VERSION}-py3-none-any.whl"

# RAT excludes burr/tracking/server/build/**, so it never inspects the
# compiled UI -- the only content the wheel adds over the sdist. This
# step covers that gap: it re-derives the bundled npm packages from a
# sourcemap build and fails if LICENSE-wheel no longer matches, which
# is what silently drifts on a dependency bump.
- name: Check LICENSE-wheel covers the bundled UI dependencies
run: python scripts/generate_wheel_license.py --check

- name: Run Apache RAT on source and sdist tarballs
run: |
python scripts/verify_apache_artifacts.py licenses \
Expand Down
Loading
Loading