[GH] (texera/chore/binary-license-ci): Workflow run "Release Auditing" is working again!

[GitBox <gi...@apache.org>]

The GitHub Actions job "Release Auditing" on texera.git/chore/binary-license-ci has succeeded.
Run started by GitHub user bobbai00 (triggered by bobbai00).

Head commit for run:
5adbf6b9d8cfda1f3760da85969fd289586477d2 / Jiadong Bai <bo...@gmail.com>
chore(ci): add binary-license manifest check and collector script

Adds a CI workflow and two helper scripts that keep LICENSE-binary
and NOTICE-binary honest against the actually-bundled dependencies:

- .github/workflows/check-binary-licenses.yml: runs on PRs touching
  build.sbt, plugins.sbt, the licensing helpers, the frontend package
  manifests, the Python requirements, or LICENSE-binary/NOTICE-binary.
  Three jobs:
    * check-jvm-deps: builds every sbt-native-packager dist, unzips
      the lib/ directories, and runs the JVM checker against them.
    * check-npm-deps: runs the frontend production build to emit
      3rdpartylicenses.txt and runs the npm checker against it.
    * check-python-deps: installs the Python requirements, runs
      pip-licenses to produce a CSV manifest, and runs the Python
      checker against it.

- bin/licensing/check_binary_deps.py: the checker. Parses bullets in
  LICENSE-binary per ecosystem and reports ADDED (bundled but not
  claimed) and STALE (claimed but not bundled) with remediation hints.

- bin/licensing/collect_binary_licenses.sh: a maintainer helper that
  enumerates the currently-bundled jars/packages across the three
  ecosystems to seed or refresh LICENSE-binary.

This PR depends on LICENSE-binary / NOTICE-binary being present at
the repo root (see the companion content PR); until both land, the
workflow will no-op or fail with a clear message.

Generated-by: Claude Code (Claude Opus 4.7)

Co-Authored-By: Claude Opus 4.7 (1M context) <no...@anthropic.com>

Report URL: https://github.com/apache/texera/actions/runs/24792194761

With regards,
GitHub Actions via GitBox