You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@beam.apache.org by "Paul Gerver (JIRA)" <ji...@apache.org> on 2018/03/12 18:33:00 UTC

[jira] [Created] (BEAM-3831) Update Google Cloud Core version (which depends on org.json)

Paul Gerver created BEAM-3831:
---------------------------------

             Summary: Update Google Cloud Core version (which depends on org.json)
                 Key: BEAM-3831
                 URL: https://issues.apache.org/jira/browse/BEAM-3831
             Project: Beam
          Issue Type: Bug
          Components: io-java-gcp
    Affects Versions: 2.3.0
            Reporter: Paul Gerver
            Assignee: Chamikara Jayalath


Looking at dependencies pulled in for my application and saw that org.json jar file was being used. Looked up the dependency tree and saw the following:
{noformat}
[INFO] |  +- org.apache.beam:beam-sdks-java-io-google-cloud-platform:jar:2.3.0:compile
...
[INFO] |  |  +- com.google.cloud:google-cloud-core:jar:1.0.2:compile
[INFO] |  |  |  \- org.json:json:jar:20160810:compile{noformat}
The Apache Foundation has noted that use of software with the json license should not be used: [https://www.apache.org/legal/resolved.html#json]

 

The earliest version to exclude the dependency is v1.15.0 ([https://mvnrepository.com/artifact/com.google.cloud/google-cloud-core/1.15.0)]



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)