This is an automated email from the ASF dual-hosted git repository. mblow pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/asterixdb.git
commit c2d6db8d30ebe13da29ca8c2a7e76791e902ae8e Merge: aedda3544b 35c42acd3c Author: Michael Blow <[email protected]> AuthorDate: Wed May 24 21:53:15 2023 -0400 Merge branch 'gerrit/cheshire-cat' Change-Id: I0c0bbeae92635eb016af3e42e0b1f9c5d5743645 asterixdb/asterix-external-data/pom.xml | 5 + asterixdb/asterix-server/pom.xml | 24 ++-- asterixdb/pom.xml | 7 +- .../appended-resources/supplemental-models.xml | 122 ++++++++++++++++----- ...or-java_azure-storage-blob_12.22.0_LICENSE.txt} | 0 ...for-java_azure-storage-blob_12.22.0_NOTICE.txt} | 21 +++- hyracks-fullstack/pom.xml | 5 + 7 files changed, 142 insertions(+), 42 deletions(-) diff --cc asterixdb/asterix-external-data/pom.xml index f8a4401186,21bbfb941d..c2d78199f4 --- a/asterixdb/asterix-external-data/pom.xml +++ b/asterixdb/asterix-external-data/pom.xml @@@ -536,27 -503,9 +537,31 @@@ <groupId>io.netty</groupId> <artifactId>netty-transport-native-unix-common</artifactId> </dependency> + <!-- TODO(htowaileb): removed from hadoop transitively and added separately to avoid CVEs, can + be removed once upgraded to hadoop 3.3.4 as it addresses the CVEs --> + <dependency> + <groupId>org.eclipse.jetty</groupId> + <artifactId>jetty-util</artifactId> + </dependency> + <dependency> + <groupId>org.eclipse.jetty</groupId> + <artifactId>jetty-util-ajax</artifactId> + </dependency> + <!-- Manually included to avoid CVE-2023-1370 --> + <dependency> + <groupId>net.minidev</groupId> + <artifactId>json-smart</artifactId> + </dependency> + <dependency> + <groupId>io.netty</groupId> + <artifactId>netty-handler-proxy</artifactId> + </dependency> </dependencies> + <!-- apply patch for HADOOP-17225 to workaround CVE-2019-10172 --> + <repositories> + <repository> + <id>atlassian-3rdparty</id> + <url>https://packages.atlassian.com/maven-3rdparty/</url> + </repository> + </repositories> </project> diff --cc asterixdb/asterix-server/pom.xml index 2ab0e5f2a2,33ab5882c0..495b92f628 --- a/asterixdb/asterix-server/pom.xml +++ b/asterixdb/asterix-server/pom.xml @@@ -232,225 -216,25 +232,232 @@@ <gav>software.amazon.eventstream:eventstream:1.0.1</gav> <noticeUrl>https://raw.githubusercontent.com/awslabs/aws-eventstream-java/7be2dd80e12f8835674c8ffb0f4a2efb64c7b585/NOTICE</noticeUrl> </override> + <override> + <gav>software.amazon.ion:ion-java:1.0.2</gav> + <noticeUrl>https://raw.githubusercontent.com/amzn/ion-java/v1.0.2/NOTICE</noticeUrl> + </override> <override> <gavs> - <gav>com.azure:azure-core:1.24.1</gav> - <gav>com.azure:azure-core-http-netty:1.11.6</gav> - <gav>com.azure:azure-storage-blob:12.14.3</gav> - <gav>com.azure:azure-storage-common:12.14.2</gav> - <gav>com.azure:azure-storage-internal-avro:12.1.3</gav> + <gav>com.azure:azure-core:1.38.0</gav> + <gav>com.azure:azure-core-http-netty:1.13.2</gav> + <gav>com.azure:azure-json:1.0.0</gav> + <gav>com.azure:azure-storage-blob:12.22.0</gav> + <gav>com.azure:azure-storage-common:12.21.0</gav> + <gav>com.azure:azure-storage-internal-avro:12.7.0</gav> </gavs> - <!-- azure-storage-blob-batch_12.11.3 release is at 89a32290750a18d1b99c27c16b1b11d42f16c622 --> - <noticeUrl>https://raw.githubusercontent.com/Azure/azure-sdk-for-java/89a32290750a18d1b99c27c16b1b11d42f16c622/NOTICE.txt</noticeUrl> - <url>https://raw.githubusercontent.com/Azure/azure-sdk-for-java/89a32290750a18d1b99c27c16b1b11d42f16c622/LICENSE.txt</url> + <noticeUrl>https://raw.githubusercontent.com/Azure/azure-sdk-for-java/azure-storage-blob_12.22.0/NOTICE.txt</noticeUrl> + <url>https://raw.githubusercontent.com/Azure/azure-sdk-for-java/azure-storage-blob_12.22.0/LICENSE.txt</url> + </override> + <override> + <gavs> + <gav>io.projectreactor.netty:reactor-netty-core:1.0.28</gav> + <gav>io.projectreactor.netty:reactor-netty-http:1.0.28</gav> + </gavs> + <url>https://raw.githubusercontent.com/reactor/reactor-netty/v1.0.28/LICENSE</url> </override> + <override> + <gav>com.microsoft.azure:msal4j:1.11.0</gav> + <url>https://raw.githubusercontent.com/AzureAD/microsoft-authentication-library-for-java/v1.11.0/LICENSE</url> + </override> + <override> + <gav>com.microsoft.azure:msal4j-persistence-extension:1.1.0</gav> + <url>https://raw.githubusercontent.com/AzureAD/microsoft-authentication-extensions-for-java/1.1.0/LICENSE</url> + </override> + <override> + <gav>com.microsoft.azure:azure-keyvault-core:1.2.4</gav> + <url>https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/keyvault/LICENSE</url> + </override> + <override> + <gav>com.nimbusds:nimbus-jose-jwt:9.9.3</gav> + <noticeUrl>https://bitbucket.org/connect2id/nimbus-jose-jwt/raw/50ae2a39a4a6d0dcbf05572af8a581377174ac96/COPYRIGHT.txt</noticeUrl> + </override> + <!-- com.nimbusds:oauth2-oidc-sdk:9.7 points to https://www.apache.org/licenses/LICENSE-2.0.html in the pom.xml but has bad characters in the URI, overriding to fix --> + <override> + <gav>com.nimbusds:oauth2-oidc-sdk:9.7</gav> + <url>https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/raw/5d13925b57ace092ea5e1131c338f464d85545f4/LICENSE.txt</url> + <noticeUrl>https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/raw/5d13925b57ace092ea5e1131c338f464d85545f4/COPYRIGHT.txt</noticeUrl> + </override> + <override> + <gav>com.nimbusds:lang-tag:1.5</gav> + <noticeUrl>https://bitbucket.org/connect2id/nimbus-language-tags/raw/ead5120f62b5849309069808509b4cc6e57a0841/COPYRIGHT.txt</noticeUrl> + </override> + <override> + <gav>com.nimbusds:content-type:2.1</gav> + <noticeUrl>https://bitbucket.org/connect2id/nimbus-content-type/raw/c6d2701ed5cd57e0f88728c6f3e6303db97c5bcf/COPYRIGHT.txt</noticeUrl> + </override> + <override> + <gavs> + <gav>io.projectreactor.netty:reactor-netty:1.0.7</gav> + <gav>io.projectreactor.netty:reactor-netty-core:1.0.7</gav> + <gav>io.projectreactor.netty:reactor-netty-http:1.0.7</gav> + <gav>io.projectreactor.netty:reactor-netty-http-brave:1.0.7</gav> + </gavs> + <url>https://raw.githubusercontent.com/reactor/reactor-netty/v1.0.7/LICENSE</url> + </override> + <override> + <gavs> + <gav>io.projectreactor.netty:reactor-netty-core:1.0.11</gav> + <gav>io.projectreactor.netty:reactor-netty-http:1.0.11</gav> + </gavs> + <url>https://raw.githubusercontent.com/reactor/reactor-netty/v1.0.11/LICENSE</url> + </override> + <override> + <gav>io.projectreactor:reactor-core:3.4.6</gav> + <url>https://raw.githubusercontent.com/reactor/reactor-core/v3.4.6/LICENSE</url> + </override> + <override> + <gav>io.projectreactor:reactor-core:3.4.10</gav> + <url>https://raw.githubusercontent.com/reactor/reactor-core/v3.4.10/LICENSE</url> + </override> + <override> + <gavs> + <gav>stax:stax-api:1.0.1</gav> + </gavs> + <url>https://raw.githubusercontent.com/codehaus/stax/master/dev/ASF2.0.txt</url> + </override> + <override> + <gav>org.ow2.asm:asm:9.3</gav> + <url>https://raw.githubusercontent.com/llbit/ow2-asm/master/LICENSE.txt</url> + </override> + <override> + <gavs> + <gav>com.google.http-client:google-http-client:1.42.3</gav> + <gav>com.google.http-client:google-http-client-jackson2:1.42.3</gav> + <gav>com.google.http-client:google-http-client-appengine:1.42.3</gav> + <gav>com.google.http-client:google-http-client-gson:1.42.3</gav> + <gav>com.google.http-client:google-http-client-apache-v2:1.42.3</gav> + </gavs> + <url>https://raw.githubusercontent.com/googleapis/google-http-java-client/v1.42.3/LICENSE</url> + </override> + <override> + <gav>com.google.oauth-client:google-oauth-client:1.34.1</gav> + <url>https://raw.githubusercontent.com/googleapis/google-oauth-java-client/v1.34.1/LICENSE</url> + </override> + <override> + <gavs> + <gav>com.google.protobuf:protobuf-java:3.21.12</gav> + <gav>com.google.protobuf:protobuf-java-util:3.21.12</gav> + </gavs> + <url>https://raw.githubusercontent.com/protocolbuffers/protobuf/v3.21.12/LICENSE</url> + </override> + <override> + <gavs> + <gav>com.google.auth:google-auth-library-oauth2-http:1.14.0</gav> + <gav>com.google.auth:google-auth-library-credentials:1.14.0</gav> + </gavs> + <url>https://raw.githubusercontent.com/googleapis/google-auth-library-java/v1.14.0/LICENSE</url> + </override> + <override> + <gavs> + <gav>com.google.cloud:google-cloud-core:2.9.4</gav> + <gav>com.google.cloud:google-cloud-core-http:2.9.4</gav> + <gav>com.google.cloud:google-cloud-core-grpc:2.9.4</gav> + </gavs> + <url>https://raw.githubusercontent.com/googleapis/java-core/v2.9.4/LICENSE</url> + </override> + <override> + <gav>com.google.cloud:google-cloud-storage:2.17.2</gav> + <gav>com.google.api.grpc:gapic-google-cloud-storage-v2:2.17.2-alpha</gav> + <gav>com.google.api.grpc:proto-google-cloud-storage-v2:2.17.2-alpha</gav> + <gav>com.google.api.grpc:grpc-google-cloud-storage-v2:2.17.2-alpha</gav> + <url>https://raw.githubusercontent.com/googleapis/java-storage/v2.17.2/LICENSE</url> + </override> + <override> + <gav>com.google.api.grpc:proto-google-cloud-monitoring-v3:1.64.0</gav> + <url>https://raw.githubusercontent.com/googleapis/googleapis/master/LICENSE</url> + </override> + <override> + <gavs> + <gav>io.opencensus:opencensus-proto:0.2.0</gav> + </gavs> + <url>https://raw.githubusercontent.com/census-instrumentation/opencensus-proto/v0.2.0/LICENSE</url> + </override> + <override> + <gavs> + <gav>io.opencensus:opencensus-api:0.31.1</gav> + <gav>io.opencensus:opencensus-contrib-http-util:0.31.1</gav> + </gavs> + <url>https://raw.githubusercontent.com/census-instrumentation/opencensus-java/v0.31.1/LICENSE</url> + </override> + <override> + <gavs> + <gav>io.opencensus:opencensus-contrib-exemplar-util:0.31.0</gav> + <gav>io.opencensus:opencensus-contrib-grpc-metrics:0.31.0</gav> + <gav>io.opencensus:opencensus-contrib-resource-util:0.31.0</gav> + <gav>io.opencensus:opencensus-exporter-metrics-util:0.31.0</gav> + <gav>io.opencensus:opencensus-exporter-stats-stackdriver:0.31.0</gav> + <gav>io.opencensus:opencensus-impl-core:0.31.0</gav> + <gav>io.opencensus:opencensus-impl:0.31.0</gav> + </gavs> + <url>https://raw.githubusercontent.com/census-instrumentation/opencensus-java/v0.31.0/LICENSE</url> + </override> + <override> + <gav>com.google.api-client:google-api-client:2.1.2</gav> + <url>https://raw.githubusercontent.com/googleapis/google-api-java-client/v2.1.2/LICENSE</url> + </override> + <override> + <gav>com.google.api.grpc:proto-google-iam-v1:1.8.0</gav> + <gav>com.google.api.grpc:proto-google-common-protos:2.13.0</gav> + <url>https://raw.githubusercontent.com/googleapis/gapic-generator-java/v2.13.0/java-common-protos/LICENSE</url> + </override> + <!-- api-common-java has been moved to a new repo, using the same license, for more info, see: + https://github.com/googleapis/gapic-generator-java/tree/v2.13.0/api-common-java + --> + <override> + <gav>com.google.api:api-common:2.5.0</gav> + <url>https://raw.githubusercontent.com/googleapis/gapic-generator-java/v2.13.0/api-common-java/LICENSE</url> + </override> + <!-- gax has been moved to a new repo, using the same license, for more info, see: + https://github.com/googleapis/gax-java + https://github.com/googleapis/gapic-generator-java/tree/v2.13.0/gax-java + --> + <override> + <gavs> + <gav>com.google.api:gax-httpjson:0.107.0</gav> + <gav>com.google.api:gax:2.22.0</gav> + <gav>com.google.api:gax-grpc:2.22.0</gav> + </gavs> + <url>https://raw.githubusercontent.com/googleapis/gapic-generator-java/v2.13.0/gax-java/LICENSE</url> + </override> + <override> + <gav>com.google.auto.value:auto-value:1.10.1</gav> + <gav>com.google.auto.value:auto-value-annotations:1.10.1</gav> + <url>https://raw.githubusercontent.com/google/auto/auto-value-1.10.1/LICENSE</url> + </override> + <override> + <gav>com.google.code.findbugs:jsr305:3.0.2</gav> + <url>https://raw.githubusercontent.com/findbugsproject/findbugs/3.0.2_preview2/findbugs/licenses/LICENSE-jsr305.txt</url> + </override> + <override> + <gav>com.google.code.gson:gson:2.10.1</gav> + <url>https://raw.githubusercontent.com/google/gson/gson-parent-2.10.1/LICENSE</url> + </override> + <override> + <gav>com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava</gav> + <url>https://raw.githubusercontent.com/google/guava/master/COPYING</url> + </override> + <override> + <gav>com.google.j2objc:j2objc-annotations:1.3</gav> + <url>https://raw.githubusercontent.com/google/j2objc/1.3/LICENSE</url> + </override> + <override> + <gavs> + <gav>io.grpc:grpc-alts:1.52.1</gav> + <gav>io.grpc:grpc-api:1.52.1</gav> + <gav>io.grpc:grpc-auth:1.52.1</gav> + <gav>io.grpc:grpc-context:1.52.1</gav> + <gav>io.grpc:grpc-core:1.52.1</gav> + <gav>io.grpc:grpc-grpclb:1.52.1</gav> + <gav>io.grpc:grpc-googleapis:1.52.1</gav> + <gav>io.grpc:grpc-protobuf-lite:1.52.1</gav> + <gav>io.grpc:grpc-protobuf:1.52.1</gav> + <gav>io.grpc:grpc-services:1.52.1</gav> + <gav>io.grpc:grpc-stub:1.52.1</gav> + <gav>io.grpc:grpc-xds:1.52.1</gav> + </gavs> + <url>https://raw.githubusercontent.com/grpc/grpc-java/v1.52.1/LICENSE</url> + <noticeUrl>https://raw.githubusercontent.com/grpc/grpc-java/v1.52.1/NOTICE.txt</noticeUrl> + </override> <override> <gav>org.mindrot:jbcrypt:0.4</gav> <url>http://www.mindrot.org/files/jBCrypt/LICENSE</url> @@@ -512,30 -278,7 +519,31 @@@ <aliasUrl>http://www.apache.org/licenses/LICENSE-2.0.html</aliasUrl> <aliasUrl>https://www.apache.org/licenses/LICENSE-2.0.html</aliasUrl> <aliasUrl>https://aws.amazon.com/apache2.0</aliasUrl> + <aliasUrl>https://raw.githubusercontent.com/jorabin/KeePassJava2/KeePassJava2-2.1.4/LICENSE</aliasUrl> + <aliasUrl>https://raw.githubusercontent.com/reactor/reactor-netty/v1.0.7/LICENSE</aliasUrl> + <aliasUrl>https://raw.githubusercontent.com/reactor/reactor-netty/v1.0.11/LICENSE</aliasUrl> + <aliasUrl>https://raw.githubusercontent.com/reactor/reactor-core/v3.4.6/LICENSE</aliasUrl> + <aliasUrl>https://raw.githubusercontent.com/reactor/reactor-core/v3.4.10/LICENSE</aliasUrl> + <aliasUrl>https://raw.githubusercontent.com/codehaus/stax/master/dev/ASF2.0.txt</aliasUrl> + <aliasUrl>https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/raw/5d13925b57ace092ea5e1131c338f464d85545f4/LICENSE.txt</aliasUrl> + <aliasUrl>https://raw.githubusercontent.com/google/auto/auto-value-1.10.1/LICENSE</aliasUrl> + <aliasUrl>https://raw.githubusercontent.com/google/j2objc/1.3/LICENSE</aliasUrl> + <aliasUrl>https://raw.githubusercontent.com/googleapis/java-storage/v2.17.2/LICENSE</aliasUrl> + <aliasUrl>http://repository.jboss.org/licenses/apache-2.0.txt</aliasUrl> + <aliasUrl>https://raw.githubusercontent.com/census-instrumentation/opencensus-java/v0.31.0/LICENSE</aliasUrl> + <aliasUrl>https://raw.githubusercontent.com/census-instrumentation/opencensus-java/v0.31.1/LICENSE</aliasUrl> + <aliasUrl>https://raw.githubusercontent.com/census-instrumentation/opencensus-proto/v0.2.0/LICENSE</aliasUrl> + <aliasUrl>https://raw.githubusercontent.com/google/conscrypt/2.5.2/LICENSE</aliasUrl> + <aliasUrl>https://raw.githubusercontent.com/googleapis/googleapis/master/LICENSE</aliasUrl> + <aliasUrl>https://raw.githubusercontent.com/perfmark/perfmark/v0.26.0/LICENSE</aliasUrl> + <aliasUrl>https://raw.githubusercontent.com/googleapis/google-http-java-client/v1.42.3/LICENSE</aliasUrl> + <aliasUrl>https://raw.githubusercontent.com/googleapis/google-oauth-java-client/v1.34.1/LICENSE</aliasUrl> + <aliasUrl>https://raw.githubusercontent.com/googleapis/java-core/v2.9.4/LICENSE</aliasUrl> + <aliasUrl>https://raw.githubusercontent.com/google/gson/gson-parent-2.10.1/LICENSE</aliasUrl> + <aliasUrl>https://raw.githubusercontent.com/googleapis/gapic-generator-java/v2.13.0/java-common-protos/LICENSE</aliasUrl> + <aliasUrl>https://raw.githubusercontent.com/googleapis/google-api-java-client/v2.1.2/LICENSE</aliasUrl> + <aliasUrl>https://raw.githubusercontent.com/grpc/grpc-java/v1.52.1/LICENSE</aliasUrl> + <aliasUrl>https://raw.githubusercontent.com/reactor/reactor-netty/v1.0.28/LICENSE</aliasUrl> </aliasUrls> <metric>1</metric> </license> diff --cc asterixdb/pom.xml index 3610b19ee9,92f0473225..868c7eeb9b --- a/asterixdb/pom.xml +++ b/asterixdb/pom.xml @@@ -88,12 -88,9 +88,13 @@@ <jacoco.version>0.7.6.201602180812</jacoco.version> <log4j.version>2.19.0</log4j.version> <awsjavasdk.version>2.17.218</awsjavasdk.version> + <parquet.version>1.12.3</parquet.version> + <hadoop-awsjavasdk.version>1.12.402</hadoop-awsjavasdk.version> - <azureblobjavasdk.version>12.14.2</azureblobjavasdk.version> + <azureblobjavasdk.version>12.22.0</azureblobjavasdk.version> + <azurecommonjavasdk.version>12.21.0</azurecommonjavasdk.version> - <parquet.version>1.8.2</parquet.version> + <azuredatalakejavasdk.version>12.7.2</azuredatalakejavasdk.version> + <gcsjavasdk.version>2.17.2</gcsjavasdk.version> + <hadoop-azuresdk.version>8.6.6</hadoop-azuresdk.version> <implementation.title>Apache AsterixDB - ${project.name}</implementation.title> <implementation.url>https://asterixdb.apache.org/</implementation.url> diff --cc asterixdb/src/main/appended-resources/supplemental-models.xml index 1a97cbfef9,2300c925d0..ac3e63c50f --- a/asterixdb/src/main/appended-resources/supplemental-models.xml +++ b/asterixdb/src/main/appended-resources/supplemental-models.xml @@@ -874,11 -755,34 +911,36 @@@ <!-- See https://github.com/FasterXML/jackson-modules-java8 --> <supplement> <project> - <groupId>com.fasterxml.jackson.datatype</groupId> - <artifactId>jackson-datatype-jsr310</artifactId> + <groupId>com.fasterxml.jackson.dataformat</groupId> + <artifactId>jackson-dataformat-cbor</artifactId> <properties> - <license.ignoreMissingEmbeddedNotice>2.13.5</license.ignoreMissingEmbeddedNotice> + <license.ignoreMissingEmbeddedLicense>2.12.6</license.ignoreMissingEmbeddedLicense> - <license.ignoreMissingEmbeddedNotice>2.12.6</license.ignoreMissingEmbeddedNotice> ++ <license.ignoreMissingEmbeddedNotice>2.12.6,2.13.5</license.ignoreMissingEmbeddedNotice> ++ <license.ignoreLicenseOverride>2.12.6</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- com.fasterxml.woodstox contains embedded license but has no NOTICE --> + <!-- See https://github.com/FasterXML/woodstox --> + <supplement> + <project> + <groupId>com.fasterxml.woodstox</groupId> + <artifactId>woodstox-core</artifactId> + <properties> + <license.ignoreMissingEmbeddedNotice>6.4.0</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <!-- org.codehaus.woodstox contains embedded license but has no NOTICE --> + <!-- See https://github.com/FasterXML/stax2-api --> + <supplement> + <project> + <groupId>org.codehaus.woodstox</groupId> + <artifactId>stax2-api</artifactId> + <properties> + <license.ignoreMissingEmbeddedNotice>4.2.1</license.ignoreMissingEmbeddedNotice> </properties> </project> </supplement> @@@ -969,1106 -869,13 +1031,1106 @@@ </project> </supplement> - <!-- io.zipkin.reporter2:zipkin-reporter-brave has embedded license but no notice --> + <!-- com.nimbusds:lang-tag has ALv2 embedded in pom.xml --> <supplement> <project> - <groupId>io.zipkin.reporter2</groupId> - <artifactId>zipkin-reporter-brave</artifactId> + <groupId>com.nimbusds</groupId> + <artifactId>lang-tag</artifactId> <properties> - <license.ignoreMissingEmbeddedNotice>2.16.3</license.ignoreMissingEmbeddedNotice> + <license.ignoreMissingEmbeddedLicense>1.5</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>1.5</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <!-- com.nimbusds:content-type has ALv2 embedded in pom.xml --> + <supplement> + <project> + <groupId>com.nimbusds</groupId> + <artifactId>content-type</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>2.1</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>2.1</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <!-- org.linguafranca.pwdb:KeePassJava2 uses ALv2 and has no notice --> + <supplement> + <project> + <groupId>org.linguafranca.pwdb</groupId> + <artifactId>KeePassJava2</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>2.1.4</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>2.1.4</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>2.1.4</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- org.linguafranca.pwdb:KeePassJava2-dom uses ALv2 and has no notice --> + <supplement> + <project> + <groupId>org.linguafranca.pwdb</groupId> + <artifactId>KeePassJava2-dom</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>2.1.4</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>2.1.4</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>2.1.4</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- org.linguafranca.pwdb:KeePassJava2-jaxb uses ALv2 and has no notice --> + <supplement> + <project> + <groupId>org.linguafranca.pwdb</groupId> + <artifactId>KeePassJava2-jaxb</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>2.1.4</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>2.1.4</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>2.1.4</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- org.linguafranca.pwdb:KeePassJava2-kdb uses ALv2 and has no notice --> + <supplement> + <project> + <groupId>org.linguafranca.pwdb</groupId> + <artifactId>KeePassJava2-kdb</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>2.1.4</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>2.1.4</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>2.1.4</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- org.linguafranca.pwdb:KeePassJava2-kdbx uses ALv2 and has no notice --> + <supplement> + <project> + <groupId>org.linguafranca.pwdb</groupId> + <artifactId>KeePassJava2-kdbx</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>2.1.4</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>2.1.4</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>2.1.4</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- org.linguafranca.pwdb:KeePassJava2-simple uses ALv2 and has no notice --> + <supplement> + <project> + <groupId>org.linguafranca.pwdb</groupId> + <artifactId>KeePassJava2-simple</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>2.1.4</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>2.1.4</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>2.1.4</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- org.linguafranca.pwdb:database uses ALv2 and has no notice --> + <supplement> + <project> + <groupId>org.linguafranca.pwdb</groupId> + <artifactId>database</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>2.1.4</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>2.1.4</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>2.1.4</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- net.minidev:json-smart has ALv2 embedded in pom.xml --> + <supplement> + <project> + <groupId>net.minidev</groupId> + <artifactId>json-smart</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>2.4.11</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>2.4.11</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <!-- net.minidev:accessors-smart has ALv2 embedded in pom.xml --> + <supplement> + <project> + <groupId>net.minidev</groupId> + <artifactId>accessors-smart</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>2.4.11</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>2.4.11</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <supplement> + <project> + <groupId>org.ow2.asm</groupId> + <artifactId>asm</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>9.3</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>9.3</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>9.3</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- GCS SDK for Java start --> + <!-- com.google.api has no NOTICE file --> + <supplement> + <project> + <groupId>com.google.api</groupId> + <artifactId>api-common</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>2.5.0</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>2.5.0</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>2.5.0</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- com.google.api:gax-httpjson has no NOTICE file --> + <supplement> + <project> + <groupId>com.google.api</groupId> + <artifactId>gax-httpjson</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>0.107.0</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>0.107.0</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>0.107.0</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- com.google.api:gax has no NOTICE file --> + <supplement> + <project> + <groupId>com.google.api</groupId> + <artifactId>gax</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>2.22.0</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>2.22.0</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>2.22.0</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- com.google.api-client uses non-fixed ALv2 with no NOTICE file --> + <supplement> + <project> + <groupId>com.google.api-client</groupId> + <artifactId>google-api-client</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>2.1.2</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>2.1.2</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>2.1.2</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- io.opencensus uses ALv2 with no NOTICE file --> + <supplement> + <project> + <groupId>io.opencensus</groupId> + <artifactId>opencensus-proto</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>0.2.0</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>0.2.0</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>0.2.0</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- com.google.android:annotations has ASLv2 <license> in pom --> + <supplement> + <project> + <groupId>com.google.android</groupId> + <artifactId>annotations</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>4.1.1.4</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>4.1.1.4</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <!-- io.opencensus uses non-fixed ALv2 with no NOTICE file --> + <supplement> + <project> + <groupId>io.opencensus</groupId> + <artifactId>opencensus-api</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>0.31.1</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>0.31.1</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>0.31.1</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- io.opencensus uses ALv2 with no NOTICE file --> + <supplement> + <project> + <groupId>io.opencensus</groupId> + <artifactId>opencensus-contrib-exemplar-util</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>0.31.0</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>0.31.0</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>0.31.0</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- io.opencensus uses ALv2 with no NOTICE file --> + <supplement> + <project> + <groupId>io.opencensus</groupId> + <artifactId>opencensus-contrib-grpc-metrics</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>0.31.0</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>0.31.0</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>0.31.0</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- io.opencensus uses non-fixed ALv2 with no NOTICE file --> + <supplement> + <project> + <groupId>io.opencensus</groupId> + <artifactId>opencensus-contrib-http-util</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>0.31.1</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>0.31.1</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>0.31.1</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- com.google.api.grpc uses ALv2 with no NOTICE file --> + <supplement> + <project> + <groupId>com.google.api.grpc</groupId> + <artifactId>gapic-google-cloud-storage-v2</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>2.17.2-alpha</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>2.17.2-alpha</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>2.17.2-alpha</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- com.google.api.grpc uses ALv2 with no NOTICE file --> + <supplement> + <project> + <groupId>com.google.api.grpc</groupId> + <artifactId>grpc-google-cloud-storage-v2</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>2.17.2-alpha</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>2.17.2-alpha</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>2.17.2-alpha</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- com.google.api.grpc uses ALv2 with no NOTICE file --> + <supplement> + <project> + <groupId>com.google.api.grpc</groupId> + <artifactId>proto-google-cloud-storage-v2</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>2.17.2-alpha</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>2.17.2-alpha</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>2.17.2-alpha</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- org.conscrypt uses ALv2 LICENSE and has a NOTICE file --> + <supplement> + <project> + <groupId>org.conscrypt</groupId> + <artifactId>conscrypt-openjdk-uber</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>2.5.2</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>2.5.2</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>2.5.2</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- io.perfmark uses ALv2 license --> + <supplement> + <project> + <groupId>io.perfmark</groupId> + <artifactId>perfmark-api</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>0.26.0</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>0.26.0</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>0.26.0</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- org.codehaus.mojo:animal-sniffer-annotations uses MIT license --> + <supplement> + <project> + <groupId>org.codehaus.mojo</groupId> + <artifactId>animal-sniffer-annotations</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>1.22</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>1.22</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <!-- com.google.apis:google-api-services-iamcredentials has embedded ASLv2 in pom.xml --> + <supplement> + <project> + <groupId>com.google.apis</groupId> + <artifactId>google-api-services-iamcredentials</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>v1-rev20210326-1.32.1</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>v1-rev20210326-1.32.1</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <!-- com.google.apis:google-api-services-iamcredentials has embedded ASLv2 in pom.xml --> + <supplement> + <project> + <groupId>com.google.api</groupId> + <artifactId>gax-grpc</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>2.22.0</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>2.22.0</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>2.22.0</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- com.google.cloud uses ALv2 with no NOTICE file --> + <supplement> + <project> + <groupId>com.google.cloud</groupId> + <artifactId>google-cloud-core-grpc</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>2.9.4</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>2.9.4</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>2.9.4</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- com.google.cloud:google-cloud-core is non-fixed ALv2 with no NOTICE file --> + <supplement> + <project> + <groupId>com.google.cloud</groupId> + <artifactId>google-cloud-core</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>2.9.4</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>2.9.4</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>2.9.4</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- com.google.cloud:google-cloud-core-http is non-fixed ALv2 with no NOTICE file --> + <supplement> + <project> + <groupId>com.google.cloud</groupId> + <artifactId>google-cloud-core-http</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>2.9.4</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>2.9.4</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>2.9.4</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- com.google.auth has no NOTICE file --> + <supplement> + <project> + <groupId>com.google.auth</groupId> + <artifactId>google-auth-library-credentials</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>1.14.0</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>1.14.0</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>1.14.0</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- com.google.auth has no NOTICE file --> + <supplement> + <project> + <groupId>com.google.auth</groupId> + <artifactId>google-auth-library-oauth2-http</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>1.14.0</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>1.14.0</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>1.14.0</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- io.grpc uses ALv2 --> + <supplement> + <project> + <groupId>io.grpc</groupId> + <artifactId>grpc-alts</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>1.52.1</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>1.52.1</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>1.52.1</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- io.grpc uses ALv2 --> + <supplement> + <project> + <groupId>io.grpc</groupId> + <artifactId>grpc-api</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>1.52.1</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>1.52.1</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>1.52.1</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- io.grpc uses ALv2 --> + <supplement> + <project> + <groupId>io.grpc</groupId> + <artifactId>grpc-auth</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>1.52.1</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>1.52.1</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>1.52.1</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- io.grpc uses ALv2 --> + <supplement> + <project> + <groupId>io.grpc</groupId> + <artifactId>grpc-census</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>1.43.2</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>1.43.2</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>1.43.2</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- io.grpc uses ALv2 --> + <supplement> + <project> + <groupId>io.grpc</groupId> + <artifactId>grpc-context</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>1.52.1</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>1.52.1</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>1.52.1</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- io.grpc uses ALv2 --> + <supplement> + <project> + <groupId>io.grpc</groupId> + <artifactId>grpc-core</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>1.52.1</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>1.52.1</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>1.52.1</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- io.grpc uses ALv2 --> + <supplement> + <project> + <groupId>io.grpc</groupId> + <artifactId>grpc-googleapis</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>1.52.1</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>1.52.1</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>1.52.1</license.ignoreLicenseOverride> + <license.ignoreNoticeOverride>1.52.1</license.ignoreNoticeOverride> + </properties> + </project> + </supplement> + + <!-- io.grpc uses ALv2 --> + <supplement> + <project> + <groupId>io.grpc</groupId> + <artifactId>grpc-grpclb</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>1.52.1</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>1.52.1</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>1.52.1</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- io.grpc uses ALv2 --> + <supplement> + <project> + <groupId>io.grpc</groupId> + <artifactId>grpc-protobuf-lite</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>1.52.1</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>1.52.1</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>1.52.1</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- io.grpc uses ALv2 --> + <supplement> + <project> + <groupId>io.grpc</groupId> + <artifactId>grpc-protobuf</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>1.52.1</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>1.52.1</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>1.52.1</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- io.grpc uses ALv2 --> + <supplement> + <project> + <groupId>io.grpc</groupId> + <artifactId>grpc-services</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>1.52.1</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>1.52.1</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>1.52.1</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- io.grpc uses ALv2 --> + <supplement> + <project> + <groupId>io.grpc</groupId> + <artifactId>grpc-stub</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>1.52.1</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>1.52.1</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>1.52.1</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- io.grpc uses ALv2 --> + <supplement> + <project> + <groupId>io.grpc</groupId> + <artifactId>grpc-xds</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>1.52.1</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>1.52.1</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>1.52.1</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- com.google.protobuf has no NOTICE file --> + <supplement> + <project> + <groupId>com.google.protobuf</groupId> + <artifactId>protobuf-java-util</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>3.21.12</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>3.21.12</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>3.21.12</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- com.google.protobuf has no NOTICE file --> + <supplement> + <project> + <groupId>com.google.protobuf</groupId> + <artifactId>protobuf-java</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>3.21.12</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>3.21.12</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>3.21.12</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- org.threeten has no NOTICE file --> + <supplement> + <project> + <groupId>org.threeten</groupId> + <artifactId>threetenbp</artifactId> + <properties> + <license.ignoreMissingEmbeddedNotice>1.6.5</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <!-- com.google.http-client is ALv2 with no NOTICE file --> + <supplement> + <project> + <groupId>com.google.http-client</groupId> + <artifactId>google-http-client-jackson2</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>1.42.3</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>1.42.3</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <!-- com.google.http-client is ALv2 with no NOTICE file --> + <supplement> + <project> + <groupId>com.google.http-client</groupId> + <artifactId>google-http-client</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>1.42.3</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>1.42.3</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <!-- com.google.http-client is ALv2 with no NOTICE file --> + <supplement> + <project> + <groupId>com.google.http-client</groupId> + <artifactId>google-http-client-appengine</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>1.42.3</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>1.42.3</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <!-- com.google.http-client is ALv2 with no NOTICE file --> + <supplement> + <project> + <groupId>com.google.http-client</groupId> + <artifactId>google-http-client-apache-v2</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>1.42.3</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>1.42.3</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <!-- com.google.http-client is ALv2 with no NOTICE file --> + <supplement> + <project> + <groupId>com.google.http-client</groupId> + <artifactId>google-http-client-gson</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>1.42.3</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>1.42.3</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <!-- com.google.code.findbugs:jsr305 has no NOTICE file --> + <supplement> + <project> + <groupId>com.google.code.findbugs</groupId> + <artifactId>jsr305</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>3.0.2</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>3.0.2</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>3.0.2</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- com.google.code.gson:gson uses non-fixed ALv2 and has no NOTICE file --> + <supplement> + <project> + <groupId>com.google.code.gson</groupId> + <artifactId>gson</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>2.10.1</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>2.10.1</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>2.10.1</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- com.google.guava:listenablefuture uses non-fixed ALv2 and has no NOTICE file --> + <supplement> + <project> + <groupId>com.google.guava</groupId> + <artifactId>listenablefuture</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>9999.0-empty-to-avoid-conflict-with-guava</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>9999.0-empty-to-avoid-conflict-with-guava</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>9999.0-empty-to-avoid-conflict-with-guava</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- org.checkerframework:checker-qual has no NOTICE file --> + <supplement> + <project> + <groupId>org.checkerframework</groupId> + <artifactId>checker-qual</artifactId> + <properties> + <license.ignoreMissingEmbeddedNotice>3.29.0</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <!-- com.google.auto.value:auto-value-annotations has no NOTICE file --> + <supplement> + <project> + <groupId>com.google.auto.value</groupId> + <artifactId>auto-value</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>1.10.1</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>1.10.1</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <!-- com.google.auto.value:auto-value-annotations has no NOTICE file --> + <supplement> + <project> + <groupId>com.google.auto.value</groupId> + <artifactId>auto-value-annotations</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>1.10.1</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>1.10.1</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <!-- javax.annotation:javax.annotation-api has no NOTICE file --> + <supplement> + <project> + <groupId>javax.annotation</groupId> + <artifactId>javax.annotation-api</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>1.3.2</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>1.3.2</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <!-- com.google.apis:google-api-services-storage has no NOTICE file --> + <supplement> + <project> + <groupId>com.google.apis</groupId> + <artifactId>google-api-services-storage</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>v1-rev20220705-2.0.0</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>v1-rev20220705-2.0.0</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <!-- com.google.oauth-client:google-oauth-client uses non-fixed ALv2 and has no NOTICE file --> + <supplement> + <project> + <groupId>com.google.oauth-client</groupId> + <artifactId>google-oauth-client</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>1.34.1</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>1.34.1</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>1.34.1</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- com.google.api.grpc:proto-google-iam-v1 has no NOTICE file --> + <supplement> + <project> + <groupId>com.google.api.grpc</groupId> + <artifactId>proto-google-iam-v1</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>1.8.0</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>1.8.0</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <!-- com.google.api.grpc:proto-google-common-protos has no NOTICE file --> + <supplement> + <project> + <groupId>com.google.api.grpc</groupId> + <artifactId>proto-google-common-protos</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>2.13.0</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>2.13.0</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <!-- com.google.cloud:google-cloud-storage has no NOTICE file --> + <supplement> + <project> + <groupId>com.google.cloud</groupId> + <artifactId>google-cloud-storage</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>2.17.2</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>2.17.2</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <!-- com.google.j2objc:j2objc-annotations has no NOTICE file --> + <supplement> + <project> + <groupId>com.google.j2objc</groupId> + <artifactId>j2objc-annotations</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>1.3</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>1.3</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + <!-- GCS SDK for Java end --> + + <!-- jackson-datatype-jsr contains embedded license but has no NOTICE --> + <!-- See https://github.com/FasterXML/jackson-modules-java8 --> + <supplement> + <project> + <groupId>com.fasterxml.jackson.datatype</groupId> + <artifactId>jackson-datatype-jsr310</artifactId> + <properties> - <license.ignoreMissingEmbeddedNotice>2.13.1</license.ignoreMissingEmbeddedNotice> ++ <license.ignoreMissingEmbeddedNotice>2.13.1,2.13.5</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <!-- com.fasterxml.woodstox contains embedded license but has no NOTICE --> + <!-- See https://github.com/FasterXML/woodstox --> + <supplement> + <project> + <groupId>com.fasterxml.woodstox</groupId> + <artifactId>woodstox-core</artifactId> + <properties> + <license.ignoreMissingEmbeddedNotice>6.2.7,6.4.0</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <!-- org.codehaus.woodstox contains embedded license but has no NOTICE --> + <!-- See https://github.com/FasterXML/stax2-api --> + <supplement> + <project> + <groupId>org.codehaus.woodstox</groupId> + <artifactId>stax2-api</artifactId> + <properties> + <license.ignoreMissingEmbeddedNotice>4.2.1</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <supplement> + <project> + <groupId>stax</groupId> + <artifactId>stax-api</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>1.0.1</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>1.0.1</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>1.0.1</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <!-- net.java.dev.jna:jna has embedded license but no notice --> + <supplement> + <project> + <groupId>net.java.dev.jna</groupId> + <artifactId>jna</artifactId> + <properties> + <license.ignoreMissingEmbeddedNotice>5.5.0</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <!-- net.java.dev.jna:jna-platform has embedded license but no notice --> + <supplement> + <project> + <groupId>net.java.dev.jna</groupId> + <artifactId>jna-platform</artifactId> + <properties> + <license.ignoreMissingEmbeddedNotice>5.6.0</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <!-- io.zipkin2:zipkin has embedded license but no notice --> + <supplement> + <project> + <groupId>io.zipkin.zipkin2</groupId> + <artifactId>zipkin</artifactId> + <properties> + <license.ignoreMissingEmbeddedNotice>2.23.2</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <!-- io.zipkin.reporter2:zipkin-reporter has embedded license but no notice --> + <supplement> + <project> + <groupId>io.zipkin.reporter2</groupId> + <artifactId>zipkin-reporter</artifactId> + <properties> + <license.ignoreMissingEmbeddedNotice>2.16.3</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <!-- io.zipkin.reporter2:zipkin-reporter-brave has embedded license but no notice --> + <supplement> + <project> + <groupId>io.zipkin.reporter2</groupId> + <artifactId>zipkin-reporter-brave</artifactId> + <properties> + <license.ignoreMissingEmbeddedNotice>2.16.3</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <!-- com.fasterxml:aalto-xml has embedded license but no notice --> + <supplement> + <project> + <groupId>com.fasterxml</groupId> + <artifactId>aalto-xml</artifactId> + <properties> + <license.ignoreMissingEmbeddedNotice>1.0.0</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <!-- com.github.stephenc.jcip:jcip-annotations is ALv2 embedded in pom.xml and has no notice --> + <supplement> + <project> + <groupId>com.github.stephenc.jcip</groupId> + <artifactId>jcip-annotations</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>1.0-1</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>1.0-1</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <!-- org.jetbrains:annotations is ALv2 embedded in pom.xml and has no notice --> + <supplement> + <project> + <groupId>org.jetbrains</groupId> + <artifactId>annotations</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>15.0</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>15.0</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <!-- org.simpleframework:simple-xml is ALv2 embedded in pom.xml --> + <supplement> + <project> + <groupId>org.simpleframework</groupId> + <artifactId>simple-xml</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>2.7.1</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>2.7.1</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <supplement> + <project> + <groupId>com.github.luben</groupId> + <artifactId>zstd-jni</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>1.5.0-1</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>1.5.0-1</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>1.5.0-1</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + + <supplement> + <project> + <groupId>org.slf4j</groupId> + <artifactId>slf4j-reload4j</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>1.7.36</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>1.7.36</license.ignoreMissingEmbeddedNotice> + <license.ignoreLicenseOverride>1.7.36</license.ignoreLicenseOverride> + </properties> + </project> + </supplement> + <!-- Apache Parquet --> + <supplement> + <project> + <groupId>org.apache.parquet</groupId> + <artifactId>parquet-format-structures</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>1.12.3</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>1.12.3</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <supplement> + <project> + <groupId>org.apache.parquet</groupId> + <artifactId>parquet-common</artifactId> + <properties> + <license.ignoreMissingEmbeddedLicense>1.12.3</license.ignoreMissingEmbeddedLicense> + <license.ignoreMissingEmbeddedNotice>1.12.3</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <!-- Contains embedded LICENSE but missing NOTICE --> + <supplement> + <project> + <groupId>org.apache.parquet</groupId> + <artifactId>parquet-column</artifactId> + <properties> + <license.ignoreMissingEmbeddedNotice>1.12.3</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <!-- Contains embedded LICENSE but missing NOTICE --> + <supplement> + <project> + <groupId>org.apache.parquet</groupId> + <artifactId>parquet-encoding</artifactId> + <properties> + <license.ignoreMissingEmbeddedNotice>1.12.3</license.ignoreMissingEmbeddedNotice> + </properties> + </project> + </supplement> + + <!-- Contains embedded LICENSE but missing NOTICE --> + <supplement> + <project> + <groupId>org.apache.parquet</groupId> + <artifactId>parquet-hadoop</artifactId> + <properties> + <license.ignoreMissingEmbeddedNotice>1.12.3</license.ignoreMissingEmbeddedNotice> </properties> </project> </supplement>
