From 625b67824ec90569b4c64a9854a85714a01bbfff Mon Sep 17 00:00:00 2001
From: Dianjin Wang <wangdianjin@gmail.com>
Date: Tue, 22 Sep 2026 18:20:43 +0800
Subject: [PATCH 1/3] Remove stale gometalinter.config entry from RAT excludes

gometalinter.config was removed from the repository but remained in
the Apache RAT exclude list in pom.xml. It matches no file in the
source tree or in release archives, so drop it to keep the audit
configuration accurate.
---
 pom.xml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index b3302e0e..9a320550 100644
--- a/pom.xml
+++ b/pom.xml
@@ -267,7 +267,6 @@ code or new licensing patterns.
             <exclude>gprestore.go</exclude>
             <exclude>show_coverage.sh</exclude>
             <exclude>go.mod</exclude>
-            <exclude>gometalinter.config</exclude>
             <exclude>.github/workflows/build_and_unit_test.yml</exclude>
             <exclude>gpbackup_helper.go</exclude>
             <exclude>tools.go</exclude>

From 43bf7115a6e39c9fd85219e3bce0cc65072f93ed Mon Sep 17 00:00:00 2001
From: Dianjin Wang <wangdianjin@gmail.com>
Date: Tue, 22 Sep 2026 18:22:30 +0800
Subject: [PATCH 2/3] Bump RAT pom version to 2.2.0-incubating

Align the project version in pom.xml with VERSION on main, which was
bumped to 2.2.0; the RAT audit pom still declared 2.1.0-incubating.
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 9a320550..cbfd7dc6 100644
--- a/pom.xml
+++ b/pom.xml
@@ -30,7 +30,7 @@ code or new licensing patterns.
   <modelVersion>4.0.0</modelVersion>
   <groupId>org.apache.cloudberry</groupId>
   <artifactId>apache-cloudberry-backup-incubating</artifactId>
-  <version>2.1.0-incubating</version>
+  <version>2.2.0-incubating</version>
   <packaging>pom</packaging>
 
   <name>Apache Cloudberry Backup (Incubating)</name>

From d7077119cfc71fd04f118fdb116e4d5bdb21e52b Mon Sep 17 00:00:00 2001
From: Dianjin Wang <wangdianjin@gmail.com>
Date: Wed, 23 Sep 2026 10:20:59 +0800
Subject: [PATCH 3/3] Extend binary file extension check with deb, rpm, gppkg
 and bin

The CI binary-file check explicitly scans a fixed list of extensions
to keep compiled or packaged artifacts out of the source tree. Add
deb, rpm, gppkg and bin so packaged binaries and Greenplum package
files are caught as well.
---
 .github/workflows/apache-rat-audit.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/apache-rat-audit.yml b/.github/workflows/apache-rat-audit.yml
index 8a251c11..2c45eb13 100644
--- a/.github/workflows/apache-rat-audit.yml
+++ b/.github/workflows/apache-rat-audit.yml
@@ -106,7 +106,7 @@ jobs:
       - name: Check for binary files
         run: |
           echo "Checking for binary files..."
-          echo "Checking extensions: class, jar, tar, tgz, zip, exe, dll, so, gz, bz2"
+          echo "Checking extensions: class, jar, tar, tgz, zip, exe, dll, so, gz, bz2, deb, rpm, gppkg, bin"
           echo "----------------------------------------------------------------------"
           
           # Binary file allowlist, see README.apache.md
@@ -139,7 +139,7 @@ jobs:
           )
           
           # Check for specific binary file extensions
-          binary_extensions="class jar tar tgz zip exe dll so gz bz2"
+          binary_extensions="class jar tar tgz zip exe dll so gz bz2 deb rpm gppkg bin"
           echo "BINARY_EXTENSIONS=${binary_extensions}" >> $GITHUB_ENV
           binary_results=""
           binaryfiles_found=false