[jira] [Commented] (RAT-283) Unify Java 8 requirement or non-requirement

["ASF subversion and git services (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/RAT-283?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17381482#comment-17381482 ] 

ASF subversion and git services commented on RAT-283:
-----------------------------------------------------

Commit 5d32c63342d675ba74b95c05215df5f100a2a283 in creadur-rat's branch refs/heads/master from Philipp Ottlinger
[ https://gitbox.apache.org/repos/asf?p=creadur-rat.git;h=5d32c63 ]

RAT-283: Upgrade commons-compress and fix https://snyk.io/vuln/SNYK-JAVA-ORGAPACHECOMMONS-1316639


> Unify Java 8 requirement or non-requirement
> -------------------------------------------
>
>                 Key: RAT-283
>                 URL: https://issues.apache.org/jira/browse/RAT-283
>             Project: Apache Rat
>          Issue Type: Bug
>            Reporter: Elliotte Rusty Harold
>            Assignee: Philipp Ottlinger
>            Priority: Critical
>
> In the pom.xml I find dependencies that are very old to avoid requiring Java *1.6* or later. However I also see commons-io 2.8.0 that requires Java *1.8* or later. Make a clear decision on the minimum version of Java and upgrade or downgrade dependencies accordingly. 
> FYI Apache Maven requires Java 1.7 so I'd prefer not to go higher than that.
> ```
>       <dependency>
>         <groupId>commons-collections</groupId>
>         <artifactId>commons-collections</artifactId>
>         <!-- Later versions require Java 1.6+ -->
>         <version>3.2.2</version>
>       </dependency>
>       <dependency>
>         <groupId>commons-io</groupId>
>         <artifactId>commons-io</artifactId>
>         <version>2.8.0</version>
>       </dependency>
>       <dependency>
>         <groupId>org.apache.commons</groupId>
>         <artifactId>commons-lang3</artifactId>
>         <!--  later versions require Java 1.6+ -->
>         <version>3.5</version>
>       </dependency>
>       <dependency>
>         <groupId>org.apache.commons</groupId>
>         <artifactId>commons-compress</artifactId>
>         <!--  later versions require Java 1.6+ -->
>         <version>1.19</version>
>       </dependency>
> ```



--
This message was sent by Atlassian Jira
(v8.3.4#803005)