Track release-verification issues found in OpenDAL 0.59.0-rc.1

[Xuanwo]

During verification of the 0.59.0-rc.1 release candidate, I found several issues that should be tracked independently from the vote thread.

Source package licensing

The .NET and Node.js source archives include third-party .gitignore files with explicit upstream provenance, but their root LICENSE files do not account for those CC0 works:

• bindings/dotnet/.gitignore derives from github/gitignore's VisualStudio.gitignore.
• bindings/nodejs/.gitignore was generated by Toptal's gitignore.io.

The affected source-package LICENSE files should identify these components and their licenses or point to the bundled license text.

Source headers

The following substantive ASF-authored files do not contain the ASF header or the accepted three-line SPDX form:

• bindings/dotnet/OpenDAL/OpenDAL.csproj
• bindings/dotnet/OpenDAL.Tests/OpenDAL.Tests.csproj
• bindings/dotnet/examples/GettingStarted/GettingStarted.csproj
• bindings/python/docs/examples/basic.ipynb
• bindings/python/docs/examples/pandas.ipynb
• bindings/python/docs/examples/polars.ipynb

HawkEye's default mode reports these file types as unknown and exits successfully, so the current release check does not cover them.

Declared Rust MSRV

core/Cargo.toml declares rust-version = "1.91", but the locked compfs package does not build on rustc 1.91.1. compio-buf 0.8.3 and compio-executor 0.1.2 use unstable standard-library features. The same locked source builds on current stable Rust, which isolates this to the declared MSRV rather than the verification host.

A minimal check is:

cd core
cargo +1.91.1 check --locked -p compfs

Native package license accounting

The staged Maven Linux native JAR and the TestPyPI Linux wheel contain compiled MIT and ISC Rust dependencies, while their packaged license material only accounts for Apache-2.0 and the explicitly listed MPL components. Their LICENSE/DEPENDENCIES material should cover the bundled dependency set.

This thread tracks the fixes independently of the release vote.

[github-actions[bot]]

Mailing list thread: https://lists.apache.org/thread/ssz6btv8409rvxxz2xv1v1fcdtblhny6

[Fatorin]

I've opened #8217 covering the .NET part of this.