Skip to content

chore(licensing): refresh transitive versions in LICENSE-binary-python#5159

Merged
Yicong-Huang merged 2 commits into
apache:mainfrom
bobbai00:fix/5002-license-binary-python-drift
May 30, 2026
Merged

chore(licensing): refresh transitive versions in LICENSE-binary-python#5159
Yicong-Huang merged 2 commits into
apache:mainfrom
bobbai00:fix/5002-license-binary-python-drift

Conversation

@bobbai00

Copy link
Copy Markdown
Contributor

What changes were proposed in this PR?

Refreshes 14 transitive Python package versions in amber/LICENSE-binary-python to match the versions currently bundled, fixing the drift reported by the nightly license-binary-checker workflow on bf2f92c:

  • aiohappyeyeballs 2.6.1 → 2.6.2 (PSF)
  • certifi 2026.4.22 → 2026.5.20 (MPL 2.0)
  • click 8.3.3 → 8.4.1 (BSD 3-Clause)
  • fonttools 4.62.1 → 4.63.0 (MIT)
  • greenlet 3.5.0 → 3.5.1 (MIT)
  • huggingface-hub 0.36.2 → 1.16.1 (Apache 2.0)
  • idna 3.13 → 3.16 (BSD 3-Clause)
  • markdown-it-py 4.1.0 → 4.2.0 (MIT)
  • propcache 0.4.1 → 0.5.2 (Apache 2.0)
  • regex 2026.4.4 → 2026.5.9 (Apache 2.0)
  • requests 2.33.1 → 2.34.2 (Apache 2.0)
  • tifffile 2026.5.2 → 2026.5.15 (BSD 3-Clause)
  • urllib3 2.6.3 → 2.7.0 (MIT)
  • yarl 1.23.0 → 1.24.2 (Apache 2.0)

Version-only updates — no license category changes.

Any related issues, documentation, discussions?

Closes #5002

How was this PR tested?

Relies on the existing build / python (ubuntu-latest, 3.12) job that runs "Check installed Python packages against per-module LICENSE-binary files" in strict (nightly) mode. The drift entries listed above were taken directly from that job's failure log.

Was this PR authored or co-authored using generative AI tooling?

Generated-by: Claude Opus 4.7 (1M context)

Comment thread amber/LICENSE-binary-python
@Yicong-Huang Yicong-Huang added this pull request to the merge queue May 30, 2026
Merged via the queue into apache:main with commit 5b09ca1 May 30, 2026
14 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

License-binary drift detected

2 participants