[jira] [Work logged] (BEAM-13538) :release:go-license doesn't get the correct version of container boot for licenses

["ASF GitHub Bot (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/BEAM-13538?focusedWorklogId=738111&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-738111 ]

ASF GitHub Bot logged work on BEAM-13538:
-----------------------------------------

                Author: ASF GitHub Bot
            Created on: 08/Mar/22 12:46
            Start Date: 08/Mar/22 12:46
    Worklog Time Spent: 10m 
      Work Description: github-actions[bot] commented on pull request #16348:
URL: https://github.com/apache/beam/pull/16348#issuecomment-1061740578


   This pull request has been marked as stale due to 60 days of inactivity. It will be closed in 1 week if no further activity occurs. If you think that’s incorrect or this pull request requires a review, please simply write any comment. If closed, you can revive the PR at any time and @mention a reviewer or discuss it on the dev@beam.apache.org list. Thank you for your contributions.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscribe@beam.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Issue Time Tracking
-------------------

    Worklog Id:     (was: 738111)
    Time Spent: 1.5h  (was: 1h 20m)

> :release:go-license doesn't get the correct version of container boot for licenses
> ----------------------------------------------------------------------------------
>
>                 Key: BEAM-13538
>                 URL: https://issues.apache.org/jira/browse/BEAM-13538
>             Project: Beam
>          Issue Type: Bug
>          Components: release
>            Reporter: Robert Burke
>            Priority: P2
>              Labels: bash, go, gradle
>          Time Spent: 1.5h
>  Remaining Estimate: 0h
>
> Likely has been an issue throughout the lifetime of the code.
> At present the code is pulling the old pre-modules version of the code (2.32.0), so 2.33.0 through to present, haven't reflected licences to the go boot code. We need to check to see if those releases are missing licenses, but I think the risk there is small as the Go code used isn't large.
> The current fix would be to move things to be module aware and pull the v2 (post module) paths with go-get. 
> Our mitigation options in the short term are Be Eager (@master), or Be Stale (using @latest), which have the following implications. Being Stale means getting the code at the previous release, meaning the licences included *do not* include what's new since the last release. This is marginally better than present (locked at 2.32.0). Being Eager would mean getting what's at Beam Repo Head, which will include the release being built, but be at risk of diffs since the cut.
> The first PR is to stopgap into getting us to Be Eager which given the rate of change to the boot loaders, to be more accurate.
> The ideal would be to plumb the current release tag being built (or at least the short commit ID) so we can get the precise version of the code being built for licenses. This Jira is to track that fix.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)