[ARROW-14336] [C++] Maintain bundled dependency tarballs in an Apache-managed location

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 7.0.0
• Component/s: C++
• External issue URL: https://github.com/apache/arrow/issues/18890
• Assignee: Krisztian Szucs
• Reporter: Ian Cook
• Created: 15/Oct/21 03:37
• Updated: 11/Jan/23 08:39
• Resolved: 20/Jan/22 00:49

Description

The CMake scripts for the Arrow C++ library download bundled third-party dependencies from https://github.com/ursa-labs/thirdparty/releases/. Consider maintaining these in an ASF-managed location (probably http://apache.jfrog.io) instead of an Ursa Labs / Voltron Data-managed location. This would make it possible for Arrow committers / PMC members outside of Ursa / Voltron to upload new versions of these dependency tarballs (like in ARROW-14229).

Issue Links

• is related to: ARROW-6407 [C++] Consolidate thirdparty bundle URLs, version bumping logic, etc