Skip to content

chore: complete distribution licensing and harden the release gate - #42

Merged
Zhoujie628 merged 5 commits into
project-openan:mainfrom
Zhoujie628:main
Sep 3, 2026
Merged

Zhoujie628 merged 5 commits into
project-openan:mainfrom
Zhoujie628:main

Conversation

@Zhoujie628

Copy link
Copy Markdown
Contributor

Closes #41

Summary

Three commits responding to the release-readiness review (round 3):

  • chore: complete Apache-2.0 distribution licensing and align dependencies - full license terms + NOTICE; META-INF/LICENSE/NOTICE in binary and sources jars; Jackson aligned to 2.22; SLF4J 2.0.18; enforcer dependency-convergence gate; javadoc failOnError.
  • ci: harden Maven Central release gate - tag ancestry must be on the protected main branch; full main reactor verify before deploy; license-content assertion on publishable jars; workflow_dispatch is now a true dry run (secrets and publish gated on tag events).
  • docs: mark reserved events and fix transport javadoc boundary - API_REFERENCE (en/zh) marks AUTHORIZATION_REQUEST/AUTHORIZATION_RESOLVED/NOTIFICATION as reserved; A2ATransport javadoc matches the implemented facade boundary and the notification-stream javadoc moved to its actual method.

Verification

  • Full reactor mvn clean verify green on main (278 tests) and dev (351 tests, Eastcom samples included) with the Jackson 2.22 upgrade.
  • Enforcer dependency-convergence passes on both branches.
  • Jar inspection confirms META-INF/LICENSE and META-INF/NOTICE in binary and sources jars of workflow-engine and spring-boot-starter. The javadoc jar has no native license-injection mechanism; that gap is documented.

Follow-ups (not in this PR)

Streaming endpoints delegating through RestHandler.sendStreamingMessage with negative protocol tests; execution-scoped callbacks on the shared client; a unified redaction formatter for exception paths; A2A Java SDK 1.3 migration decision.

- replace the short LICENSE notice with the full Apache-2.0 terms and add NOTICE
- carry META-INF/LICENSE and META-INF/NOTICE into binary and sources jars
- align Jackson to the 2.22 line (databind/core/annotations) and SLF4J to 2.0.18
- add enforcer dependency-convergence gate; javadoc now fails on error

Signed-off-by: Zhoujie628 <zhoujie628@users.noreply.github.com>
- reject tags pointing at commits outside the protected main branch
- verify the full main reactor before deployment (samples included; no vendor jar on main)
- assert META-INF/LICENSE and NOTICE in publishable jars
- gate secrets and publish on tag events so workflow_dispatch is a true dry run

Signed-off-by: Zhoujie628 <zhoujie628@users.noreply.github.com>
- API_REFERENCE (en/zh): AUTHORIZATION_REQUEST, AUTHORIZATION_RESOLVED, and NOTIFICATION are reserved constants, not emitted; point to ExtensionSender and NotificationSubscription
- A2ATransport: describe the implemented facades (dispatch and negotiation correlation, not prompt generation); move the notification-stream javadoc off getCard to openNotificationStream

Signed-off-by: Zhoujie628 <zhoujie628@users.noreply.github.com>
@Zhoujie628
Zhoujie628 requested a review from a team as a code owner September 2, 2026 14:49
Replace the literal '发射' (launch/fire) with '上报' when describing event emission in API_REFERENCE and DESIGN; the term read like weapon launch in Chinese technical writing.

Signed-off-by: Zhoujie628 <zhoujie628@users.noreply.github.com>
Signed-off-by: Zhoujie628 <zhoujie628@users.noreply.github.com>
@Zhoujie628
Zhoujie628 merged commit 271677e into project-openan:main Sep 3, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

chore: complete distribution licensing and harden the release gate

1 participant