[jira] [Updated] (FLINK-33075) Notice files for Statefun are outdated

["ASF GitHub Bot (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/FLINK-33075?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

ASF GitHub Bot updated FLINK-33075:
-----------------------------------
    Labels: pull-request-available  (was: )

> Notice files for Statefun are outdated
> --------------------------------------
>
>                 Key: FLINK-33075
>                 URL: https://issues.apache.org/jira/browse/FLINK-33075
>             Project: Flink
>          Issue Type: Bug
>          Components: Stateful Functions
>    Affects Versions: statefun-3.3.0
>            Reporter: Martijn Visser
>            Assignee: Martijn Visser
>            Priority: Blocker
>              Labels: pull-request-available
>
> {code:java}
> - NOTICE files are present
>   - Note: The copyright year is out of data (2020)
>   - Concern: we bundle AnchorJS (MIT) v3.1.0 and this is not listed in the
> NOTICE file
>   - Concern: "statefun-sdk-java" bundles
> "com.google.auto.service:auto-service-annotations:jar:1.0-rc6" but does not
> declare it in the NOTICE
>   - Concern: "statefun-flink-distribution"
>     - bundles "org.apache.kafka:kafka-clients:3.2.3" but declares
> "org.apache.kafka:kafka-clients:2.4.1"
>     - bundles "com.github.luben:zstd-jni:1.5.2-1" but declares
> "com.github.luben:zstd-jni:1.4.3-1"
>     - bundles "com.fasterxml.jackson.core:jackson-core:2.13.4" but declares
> "com.fasterxml.jackson.core:jackson-core:2.12.1"
>     - bundles "com.fasterxml.jackson.core:jackson-annotations:2.13.4" but
> declares "com.fasterxml.jackson.core:jackson-annotations:2.12.1"
>     - bundles "com.fasterxml.jackson.core:jackson-databind:2.13.4.2" but
> declares "com.fasterxml.jackson.core:jackson-databind:2.12.1"
>     - bundles
> "com.fasterxml.jackson.dataformat:jackson-dataformat-cbor:2.13.4" but
> declares "com.fasterxml.jackson.dataformat:jackson-dataformat-cbor:2.12.1"
>     - bundles "commons-io:commons-io:jar:2.11.0" but declares
> "commons-io:commons-io:jar:2.8.0"
>     - bundles "commons-codec:commons-codec:1.15" but declares
> "commons-codec:commons-codec:1.13"
>     - bundles "com.esotericsoftware.minlog:minlog:1.2" but does not declare
> it
>     - bundles "com.ibm.icu:icu4j:jar:67.1" but does not declare it
>     - bundles "org.objenesis:objenesis:jar:2.1" but does not declare it
>     - bundles "com.esotericsoftware.kryo:kryo:2.24.0" but does not declare
> it
>     - bundles "commons-collections:commons-collections:3.2.2" but does not
> declare it
>     - bundles "org.apache.commons:commons-compress:1.21" but does not
> declare it
> {code}



--
This message was sent by Atlassian Jira
(v8.20.10#820010)