You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@beam.apache.org by "Ismaël Mejía (JIRA)" <ji...@apache.org> on 2019/01/28 14:18:00 UTC

[jira] [Resolved] (BEAM-3831) Update Google Cloud Core version (which depends on org.json)

     [ https://issues.apache.org/jira/browse/BEAM-3831?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ismaël Mejía resolved BEAM-3831.
--------------------------------
       Resolution: Fixed
         Assignee:     (was: Chamikara Jayalath)
    Fix Version/s: 2.6.0

{color:#6a8759}A commit related to Spanner updated the google-cloud-core dependency to version 1.36.0 so this seems to not be a valid issue anymore.
{color}

> Update Google Cloud Core version (which depends on org.json)
> ------------------------------------------------------------
>
>                 Key: BEAM-3831
>                 URL: https://issues.apache.org/jira/browse/BEAM-3831
>             Project: Beam
>          Issue Type: Wish
>          Components: io-java-gcp
>    Affects Versions: 2.3.0
>            Reporter: Paul Gerver
>            Priority: Minor
>             Fix For: 2.6.0
>
>
> Looking at dependencies pulled in for my application and saw that org.json jar file was being used. Looked up the dependency tree and saw the following:
> {noformat}
> [INFO] |  +- org.apache.beam:beam-sdks-java-io-google-cloud-platform:jar:2.3.0:compile
> ...
> [INFO] |  |  +- com.google.cloud:google-cloud-core:jar:1.0.2:compile
> [INFO] |  |  |  \- org.json:json:jar:20160810:compile{noformat}
> The Apache Foundation has noted that use of software with the json license should not be used: [https://www.apache.org/legal/resolved.html#json]
>  
> The earliest version to exclude the dependency is v1.15.0: https://mvnrepository.com/artifact/com.google.cloud/google-cloud-core/1.15.0



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)