Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.
Bug 361287 - using unreleased thirdparty code in eclipse project development builds
Summary: using unreleased thirdparty code in eclipse project development builds
Status: RESOLVED FIXED
Alias: None
Product: Community
Classification: Eclipse Foundation
Component: Architecture Council (show other bugs)
Version: unspecified   Edit
Hardware: All All
: P3 normal (vote)
Target Milestone: ---   Edit
Assignee: eclipse.org-architecture-council CLA
QA Contact:
URL:
Whiteboard: "stalebug"
Keywords:
Depends on: 360994
Blocks:
  Show dependency tree
 
Reported: 2011-10-18 14:09 EDT by Igor Fedorenko CLA
Modified: 2020-12-02 20:44 EST (History)
4 users (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Igor Fedorenko CLA 2011-10-18 14:09:00 EDT
If I understand parallel IP process [1] correctly, I have to submit CQs for all
thirdparty dependencies and wait for checkintocvs before I can push
corresponding code changes to my project git repository. I also believe
that only released versions of thirdparty code can be submitted for IP
review.

If I follow this process to the letter, it more or less prevents
development of new features that require tightly coupled changes to
eclipse and non-eclipse code. Taking m2e and maven as an example, here
is what it will take to introduce new feature that requires changes to
both projects

1. make change to m2e and maven, push maven changes to apache
2. wait for the next maven release (assume this takes 3 months)
3. open CQ for the new maven version and get checkintocvs (assume this takes
two weeks)
4. push m2e changes to eclipse and wait for next the milestone (assume this
takes two weeks)
5. receive negative user, repeat

Is there a way to stay within Eclipse legal requirements and still consume development versions of thirdparty code or I have to do this outside of Eclipse?

[1] http://wiki.eclipse.org/Development_Resources/HOWTO/Parallel_IP_Process
Comment 1 Igor Fedorenko CLA 2011-10-30 12:48:04 EDT
Any estimate when this issue will be resolved one way or another? As it stands now, the only compliant way forward for us is to essentially fork m2e outside of eclipse.org, continue all development on the fork and do the CQs and m2e code drop sometime next January or February (or whenever Juno IP deadline is).
Comment 2 John Arthorne CLA 2011-10-31 11:57:03 EDT
I think this is related to bug 360994. In particular, one proposal in that bug is that pre-checkin clearance is restricted to just checking for license and license compatibility. With this model, as long as the license of the third party library hasn't changed the check should be trivial for ongoing changes to a previously approved third party library.

Beyond that, maybe the missing piece is a CQ workflow where a CQ is left open and can be updated each time a new "build" of the third party library is consumed in your eclipse build. The CQ would remain open for "incremental" approvals until you are ready to release, and then it is resolved.  We have had cases similar to this in the past, but nothing formalized. See for example this CQ where we were evolving a third party library in unison with changes in an Eclipse project:

https://dev.eclipse.org/ipzilla/show_bug.cgi?id=1927

We can have a discussion about this in the arch council but ultimately it will need to be a process that the foundation legal folks are comfortable with.
Comment 3 Wayne Beaton CLA 2011-10-31 12:43:52 EDT
Sorry, EclipseCon preparation and travel got in the way of resolving this. We've been discussing it at the EF and we know we can make this work doing something along the lines of what John has suggested. We should have something for you this week.

One caveat is that any solution here will effectively push the full due diligence process for affected libraries to the end of the development cycle. Those versions of the third party libraries will have to be fully reviewed before the formal release can be made. Depending on IP Team backlog, this can have an impact on your release schedule. Delta scans are generally faster/easier, but not without risk. 

Not a show-stopper, just something to keep in mind.
Comment 4 Janet Campbell CLA 2011-11-01 07:01:34 EDT
A quick update for everyone.  I spoke to Igor yesterday.  We've been taking a more dynamic approach to IP review on a case by case basis for some time now, as John suggested. 

It sounds like Igor's requirements may be well suited to the more dynamic approach.  We'll work with Igor on his specific requirements in parallel to the development of more general guidelines.  

Rolling out a more dynamic approach to IP review on a broader basis will have an impact on the IP Team, so I don't want to rush roll out.  That said, I expect to publish guidelines for more general application by the end of next week.

Janet
Comment 5 Eclipse Genie CLA 2014-12-22 11:35:27 EST
This bug hasn't had any activity in quite some time. Maybe the problem got resolved, was a duplicate of something else, or became less pressing for some reason - or maybe it's still relevant but just hasn't been looked at yet.

If you have further information on the current state of the bug, please add it. The information can be, for example, that the problem still occurs, that you still want the feature, that more information is needed, or that the bug is (for whatever reason) no longer relevant.

--
The automated Eclipse Genie.
Comment 6 Eclipse Genie CLA 2016-12-17 11:57:52 EST
This bug hasn't had any activity in quite some time. Maybe the problem got resolved, was a duplicate of something else, or became less pressing for some reason - or maybe it's still relevant but just hasn't been looked at yet.

If you have further information on the current state of the bug, please add it. The information can be, for example, that the problem still occurs, that you still want the feature, that more information is needed, or that the bug is (for whatever reason) no longer relevant.

--
The automated Eclipse Genie.
Comment 7 Eclipse Genie CLA 2018-12-08 08:08:47 EST
This bug hasn't had any activity in quite some time. Maybe the problem got resolved, was a duplicate of something else, or became less pressing for some reason - or maybe it's still relevant but just hasn't been looked at yet.

If you have further information on the current state of the bug, please add it. The information can be, for example, that the problem still occurs, that you still want the feature, that more information is needed, or that the bug is (for whatever reason) no longer relevant.

--
The automated Eclipse Genie.
Comment 8 Dani Megert CLA 2018-12-10 11:23:01 EST
Sharon, what are your thoughts on this? Can we close this?
Comment 9 Eclipse Genie CLA 2020-11-30 05:29:28 EST
This bug hasn't had any activity in quite some time. Maybe the problem got resolved, was a duplicate of something else, or became less pressing for some reason - or maybe it's still relevant but just hasn't been looked at yet.

If you have further information on the current state of the bug, please add it. The information can be, for example, that the problem still occurs, that you still want the feature, that more information is needed, or that the bug is (for whatever reason) no longer relevant.

--
The automated Eclipse Genie.
Comment 10 Wayne Beaton CLA 2020-12-02 20:44:26 EST
The last round of IP Policy updates changed things so that projects can now use third-party IP during development without first clearing it with the IP Team. 

Project committers must take care to ensure that licenses are compatible (if there's any question or help is required, connect with the IP Team).

All third-party IP must be vetted via the due diligence process before it may be included in any release.