This is an automated email from the ASF dual-hosted git repository.
rzo1 pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/storm.git
The following commit(s) were added to refs/heads/master by this push:
new a27723a5c Fix Dependency licenses and License binary (hopefully
finally)
a27723a5c is described below
commit a27723a5c4367dc0622ffa109fce34067080f6cd
Author: Richard Zowalla <[email protected]>
AuthorDate: Thu Nov 7 21:54:24 2024 +0100
Fix Dependency licenses and License binary (hopefully finally)
---
DEPENDENCY-LICENSES | 39 ++++++---------------------------------
LICENSE-binary | 3 ++-
2 files changed, 8 insertions(+), 34 deletions(-)
diff --git a/DEPENDENCY-LICENSES b/DEPENDENCY-LICENSES
index 67df73fcb..b38f864ef 100644
--- a/DEPENDENCY-LICENSES
+++ b/DEPENDENCY-LICENSES
@@ -21,10 +21,6 @@ List of third-party dependencies grouped by their license
type.
Apache License, Version 2.0
* ActiveMQ :: Client (org.apache.activemq:activemq-client:5.18.3 -
http://activemq.apache.org/activemq-client)
- * Aether :: API (org.sonatype.aether:aether-api:1.7 -
http://aether.sonatype.org/aether-api/)
- * Aether :: Implementation (org.sonatype.aether:aether-impl:1.7 -
http://aether.sonatype.org/aether-impl/)
- * Aether :: SPI (org.sonatype.aether:aether-spi:1.7 -
http://aether.sonatype.org/aether-spi/)
- * Aether :: Utilities (org.sonatype.aether:aether-util:1.7 -
http://aether.sonatype.org/aether-util/)
* Aggregate Designer Algorithm
(net.hydromatic:aggdesigner-algorithm:6.0 -
http://github.com/julianhyde/aggdesigner/aggdesigner-algorithm)
* aircompressor (io.airlift:aircompressor:0.10 -
http://github.com/airlift/aircompressor)
* Annotations for Metrics
(io.dropwizard.metrics:metrics-annotation:4.2.28 -
https://metrics.dropwizard.io/metrics-annotation)
@@ -102,11 +98,7 @@ List of third-party dependencies grouped by their license
type.
* Apache Log4j API (org.apache.logging.log4j:log4j-api:2.24.1 -
https://logging.apache.org/log4j/2.x/log4j/log4j-api/)
* Apache Log4j Core (org.apache.logging.log4j:log4j-core:2.24.1 -
https://logging.apache.org/log4j/2.x/log4j/log4j-core/)
* Apache Log4j Web (org.apache.logging.log4j:log4j-web:2.24.1 -
https://logging.apache.org/log4j/2.x/log4j/log4j-web/)
- * Apache Maven Artifact Transfer
(org.apache.maven.shared:maven-artifact-transfer:0.9.1 -
https://maven.apache.org/shared/maven-artifact-transfer/)
- * Apache Maven Common Artifact Filters
(org.apache.maven.shared:maven-common-artifact-filters:3.0.1 -
https://maven.apache.org/shared/maven-common-artifact-filters/)
- * Apache Maven Dependency Tree
(org.apache.maven.shared:maven-dependency-tree:2.2 -
http://maven.apache.org/shared/maven-dependency-tree/)
- * Apache Maven Shade Plugin
(org.apache.maven.plugins:maven-shade-plugin:3.1.1 -
https://maven.apache.org/plugins/maven-shade-plugin/)
- * Apache Maven Shared Utils
(org.apache.maven.shared:maven-shared-utils:3.1.0 -
https://maven.apache.org/shared/maven-shared-utils/)
+ * Apache Maven Shade Plugin
(org.apache.maven.plugins:maven-shade-plugin:3.6.0 -
https://maven.apache.org/plugins/maven-shade-plugin/)
* Apache Maven Shared Utils
(org.apache.maven.shared:maven-shared-utils:3.2.1 -
https://maven.apache.org/shared/maven-shared-utils/)
* Apache Parquet Hadoop Bundle
(org.apache.parquet:parquet-hadoop-bundle:1.10.0 - https://parquet.apache.org)
* Apache Thrift (org.apache.thrift:libfb303:0.9.3 -
http://thrift.apache.org)
@@ -212,7 +204,6 @@ List of third-party dependencies grouped by their license
type.
* HPPC Collections (com.carrotsearch:hppc:0.7.2 -
http://labs.carrotsearch.com/hppc.html/hppc)
* HPPC Collections (com.carrotsearch:hppc:0.8.1 -
http://labs.carrotsearch.com/hppc.html/hppc)
* j2html (com.j2html:j2html:1.6.0 - http://j2html.com)
- * J2ObjC Annotations (com.google.j2objc:j2objc-annotations:2.8 -
https://github.com/google/j2objc/)
* J2ObjC Annotations (com.google.j2objc:j2objc-annotations:3.0.0 -
https://github.com/google/j2objc/)
* Jackson-annotations
(com.fasterxml.jackson.core:jackson-annotations:2.18.1 -
https://github.com/FasterXML/jackson)
* Jackson-core (com.fasterxml.jackson.core:jackson-core:2.18.1 -
https://github.com/FasterXML/jackson-core)
@@ -239,7 +230,7 @@ List of third-party dependencies grouped by their license
type.
* JBoss Logging 3 (org.jboss.logging:jboss-logging:3.6.0.Final -
http://www.jboss.org)
* JCIP Annotations under Apache License
(com.github.stephenc.jcip:jcip-annotations:1.0-1 -
http://stephenc.github.com/jcip-annotations)
* JCL 1.2 implemented over SLF4J (org.slf4j:jcl-over-slf4j:1.7.36 -
http://www.slf4j.org)
- * jdependency (org.vafer:jdependency:1.2 -
http://github.com/tcurdt/jdependency)
+ * jdependency (org.vafer:jdependency:2.10 -
http://github.com/tcurdt/jdependency)
* JDO API (javax.jdo:jdo-api:3.0.1 - http://db.apache.org/jdo)
* JDO API (org.datanucleus:javax.jdo:3.2.0-m3 -
http://www.datanucleus.org/#/javax.jdo)
* Jettison (org.codehaus.jettison:jettison:1.5.4 -
https://github.com/jettison-json/jettison)
@@ -271,8 +262,6 @@ List of third-party dependencies grouped by their license
type.
* Lucene Spatial 3D (org.apache.lucene:lucene-spatial3d:8.11.1 -
https://lucene.apache.org/lucene-parent/lucene-spatial3d)
* Lucene Suggest (org.apache.lucene:lucene-suggest:8.11.1 -
https://lucene.apache.org/lucene-parent/lucene-suggest)
* LZ4 and xxHash (org.lz4:lz4-java:1.8.0 -
https://github.com/lz4/lz4-java)
- * Maven Aether Provider (org.apache.maven:maven-aether-provider:3.0 -
http://maven.apache.org/maven-aether-provider/)
- * Maven Artifact (org.apache.maven:maven-artifact:3.0 -
http://maven.apache.org/maven-artifact/)
* Maven Artifact (org.apache.maven:maven-artifact:3.6.0 -
https://maven.apache.org/ref/3.6.0/maven-artifact/)
* Maven Artifact (org.apache.maven:maven-artifact:3.8.1 -
https://maven.apache.org/ref/3.8.1/maven-artifact/)
* Maven Artifact Resolver API
(org.apache.maven.resolver:maven-resolver-api:1.3.3 -
https://maven.apache.org/resolver/maven-resolver-api/)
@@ -290,23 +279,16 @@ List of third-party dependencies grouped by their license
type.
* Maven Artifact Resolver Utilities
(org.apache.maven.resolver:maven-resolver-util:1.6.2 -
https://maven.apache.org/resolver/maven-resolver-util/)
* Maven Builder Support (org.apache.maven:maven-builder-support:3.6.0
- https://maven.apache.org/ref/3.6.0/maven-builder-support/)
* Maven Builder Support (org.apache.maven:maven-builder-support:3.8.1
- https://maven.apache.org/ref/3.8.1/maven-builder-support/)
- * Maven Core (org.apache.maven:maven-core:3.0 -
http://maven.apache.org/maven-core/)
* Maven Core (org.apache.maven:maven-core:3.8.1 -
https://maven.apache.org/ref/3.8.1/maven-core/)
- * Maven Model (org.apache.maven:maven-model:3.0 -
http://maven.apache.org/maven-model/)
* Maven Model (org.apache.maven:maven-model:3.6.0 -
https://maven.apache.org/ref/3.6.0/maven-model/)
* Maven Model (org.apache.maven:maven-model:3.8.1 -
https://maven.apache.org/ref/3.8.1/maven-model/)
- * Maven Model Builder (org.apache.maven:maven-model-builder:3.0 -
http://maven.apache.org/maven-model-builder/)
* Maven Model Builder (org.apache.maven:maven-model-builder:3.6.0 -
https://maven.apache.org/ref/3.6.0/maven-model-builder/)
* Maven Model Builder (org.apache.maven:maven-model-builder:3.8.1 -
https://maven.apache.org/ref/3.8.1/maven-model-builder/)
- * Maven Plugin API (org.apache.maven:maven-plugin-api:3.0 -
http://maven.apache.org/maven-plugin-api/)
* Maven Plugin API (org.apache.maven:maven-plugin-api:3.8.1 -
https://maven.apache.org/ref/3.8.1/maven-plugin-api/)
* Maven Plugin Tools Java Annotations
(org.apache.maven.plugin-tools:maven-plugin-annotations:3.8.1 -
https://maven.apache.org/plugin-tools/maven-plugin-annotations)
- * Maven Repository Metadata Model
(org.apache.maven:maven-repository-metadata:3.0 -
http://maven.apache.org/maven-repository-metadata/)
* Maven Repository Metadata Model
(org.apache.maven:maven-repository-metadata:3.6.0 -
https://maven.apache.org/ref/3.6.0/maven-repository-metadata/)
* Maven Repository Metadata Model
(org.apache.maven:maven-repository-metadata:3.8.1 -
https://maven.apache.org/ref/3.8.1/maven-repository-metadata/)
- * Maven Settings (org.apache.maven:maven-settings:3.0 -
http://maven.apache.org/maven-settings/)
* Maven Settings (org.apache.maven:maven-settings:3.8.1 -
https://maven.apache.org/ref/3.8.1/maven-settings/)
- * Maven Settings Builder (org.apache.maven:maven-settings-builder:3.0
- http://maven.apache.org/maven-settings-builder/)
* Maven Settings Builder
(org.apache.maven:maven-settings-builder:3.8.1 -
https://maven.apache.org/ref/3.8.1/maven-settings-builder/)
* Metrics Core (io.dropwizard.metrics:metrics-core:4.2.28 -
https://metrics.dropwizard.io/metrics-core)
* Metrics Health Checks
(io.dropwizard.metrics:metrics-healthchecks:4.2.28 -
https://metrics.dropwizard.io/metrics-healthchecks)
@@ -358,17 +340,14 @@ List of third-party dependencies grouped by their license
type.
* OpenTelemetry Java
(io.opentelemetry:opentelemetry-semconv:1.15.0-alpha -
https://github.com/open-telemetry/opentelemetry-java)
* ORC Core (org.apache.orc:orc-core:1.5.8 -
http://orc.apache.org/orc-core)
* ORC Shims (org.apache.orc:orc-shims:1.5.8 -
http://orc.apache.org/orc-shims)
- * Plexus :: Component Annotations
(org.codehaus.plexus:plexus-component-annotations:1.5.5 -
http://plexus.codehaus.org/plexus-containers/plexus-component-annotations/)
* Plexus :: Component Annotations
(org.codehaus.plexus:plexus-component-annotations:1.7.1 -
http://codehaus-plexus.github.io/plexus-containers/plexus-component-annotations/)
* Plexus :: Component Annotations
(org.codehaus.plexus:plexus-component-annotations:2.1.0 -
http://codehaus-plexus.github.io/plexus-containers/plexus-component-annotations/)
* Plexus Cipher: encryption/decryption Component
(org.sonatype.plexus:plexus-cipher:1.4 -
http://spice.sonatype.org/plexus-cipher)
- * Plexus Classworlds (org.codehaus.plexus:plexus-classworlds:2.2.3 -
http://plexus.codehaus.org/plexus-classworlds/)
* Plexus Classworlds (org.codehaus.plexus:plexus-classworlds:2.6.0 -
http://codehaus-plexus.github.io/plexus-classworlds/)
* Plexus Common Utilities (org.codehaus.plexus:plexus-utils:3.1.0 -
http://codehaus-plexus.github.io/plexus-utils/)
* Plexus Common Utilities (org.codehaus.plexus:plexus-utils:3.2.1 -
http://codehaus-plexus.github.io/plexus-utils/)
- * Plexus Interpolation API
(org.codehaus.plexus:plexus-interpolation:1.14 -
http://plexus.codehaus.org/plexus-components/plexus-interpolation)
+ * Plexus Common Utilities (org.codehaus.plexus:plexus-utils:3.5.1 -
https://codehaus-plexus.github.io/plexus-utils/)
* Plexus Interpolation API
(org.codehaus.plexus:plexus-interpolation:1.25 -
http://codehaus-plexus.github.io/plexus-interpolation/)
- * Plexus Security Dispatcher Component
(org.sonatype.plexus:plexus-sec-dispatcher:1.3 -
http://spice.sonatype.org/plexus-sec-dispatcher)
* Plexus Security Dispatcher Component
(org.sonatype.plexus:plexus-sec-dispatcher:1.4 -
http://spice.sonatype.org/plexus-sec-dispatcher)
* Prometheus Metrics Config
(io.prometheus:prometheus-metrics-config:1.3.3 -
http://github.com/prometheus/client_java/prometheus-metrics-config)
* Prometheus Metrics Core (io.prometheus:prometheus-metrics-core:1.3.3
- http://github.com/prometheus/client_java/prometheus-metrics-core)
@@ -382,9 +361,6 @@ List of third-party dependencies grouped by their license
type.
* Prometheus Metrics Tracer OpenTelemetry Agent
(io.prometheus:prometheus-metrics-tracer-otel-agent:1.3.3 -
http://github.com/prometheus/client_java/prometheus-metrics-tracer/prometheus-metrics-tracer-otel-agent)
* rest (org.elasticsearch.client:elasticsearch-rest-client:7.17.13 -
https://github.com/elastic/elasticsearch.git)
* sigar (org.fusesource:sigar:1.6.4 - http://fusesource.com/sigar/)
- * Sisu - Guice (org.sonatype.sisu:sisu-guice:2.1.7 -
http://forge.sonatype.com/sisu-guice/)
- * Sisu - Inject (JSR330 bean support)
(org.sonatype.sisu:sisu-inject-bean:1.4.2 -
http://sisu.sonatype.org/sisu-inject/guice-bean/sisu-inject-bean/)
- * Sisu - Inject (Plexus bean support)
(org.sonatype.sisu:sisu-inject-plexus:1.4.2 -
http://sisu.sonatype.org/sisu-inject/guice-bean/guice-plexus/sisu-inject-plexus/)
* SLF4J 1 Binding for Log4j API
(org.apache.logging.log4j:log4j-slf4j-impl:2.24.1 -
https://logging.apache.org/log4j/2.x/log4j/log4j-slf4j-impl/)
* SnakeYAML (org.yaml:snakeyaml:2.2 -
https://bitbucket.org/snakeyaml/snakeyaml)
* snappy-java (org.xerial.snappy:snappy-java:1.1.10.4 -
https://github.com/xerial/snappy-java)
@@ -475,10 +451,8 @@ List of third-party dependencies grouped by their license
type.
BSD 3-Clause License
* asm (org.ow2.asm:asm:9.7.1 - http://asm.ow2.io/)
- * asm-analysis (org.ow2.asm:asm-analysis:9.7.1 - http://asm.ow2.io/)
* asm-commons (org.ow2.asm:asm-commons:9.7.1 - http://asm.ow2.io/)
* asm-tree (org.ow2.asm:asm-tree:9.7.1 - http://asm.ow2.io/)
- * asm-util (org.ow2.asm:asm-util:9.7.1 - http://asm.ow2.io/)
* Commons Compiler (org.codehaus.janino:commons-compiler:2.7.6 -
http://docs.codehaus.org/display/JANINO/Home/commons-compiler)
* dnsjava (dnsjava:dnsjava:3.6.1 - https://github.com/dnsjava/dnsjava)
* Janino (org.codehaus.janino:janino:2.7.6 -
http://docs.codehaus.org/display/JANINO/Home/janino)
@@ -546,12 +520,11 @@ List of third-party dependencies grouped by their license
type.
Eclipse Public License, Version 1.0
- * Aether Utilities (org.eclipse.aether:aether-util:0.9.0.M2 -
http://www.eclipse.org/aether/aether-util/)
* clojure (org.clojure:clojure:1.12.0 - http://clojure.org/)
- * core.specs.alpha (org.clojure:core.specs.alpha:0.2.62 -
https://github.com/clojure/build.poms/core.specs.alpha)
+ * core.specs.alpha (org.clojure:core.specs.alpha:0.4.74 -
https://github.com/clojure/build.poms/core.specs.alpha)
* org.eclipse.sisu.inject
(org.eclipse.sisu:org.eclipse.sisu.inject:0.3.4 -
http://www.eclipse.org/sisu/org.eclipse.sisu.inject/)
* org.eclipse.sisu.plexus
(org.eclipse.sisu:org.eclipse.sisu.plexus:0.3.4 -
http://www.eclipse.org/sisu/org.eclipse.sisu.plexus/)
- * spec.alpha (org.clojure:spec.alpha:0.3.218 -
https://github.com/clojure/build.poms/spec.alpha)
+ * spec.alpha (org.clojure:spec.alpha:0.5.238 -
https://github.com/clojure/build.poms/spec.alpha)
* tools.logging (org.clojure:tools.logging:0.2.3 -
http://nexus.sonatype.org/oss-repository-hosting.html/pom.contrib/tools.logging)
Eclipse Public License, Version 2.0
@@ -639,7 +612,7 @@ List of third-party dependencies grouped by their license
type.
Similar to Apache License but with the acknowledgment clause removed
- * JDOM (org.jdom:jdom2:2.0.6 - http://www.jdom.org)
+ * JDOM (org.jdom:jdom2:2.0.6.1 - http://www.jdom.org)
The BSD 2-Clause License
diff --git a/LICENSE-binary b/LICENSE-binary
index 1ac191772..680cb7df7 100644
--- a/LICENSE-binary
+++ b/LICENSE-binary
@@ -801,7 +801,8 @@ The license texts of these dependencies can be found in the
licenses directory.
* Google Guice - Extensions - Servlet
(com.google.inject.extensions:guice-servlet:4.2.3 -
https://github.com/google/guice/extensions-parent/guice-servlet)
* Graphite Integration for Metrics
(io.dropwizard.metrics:metrics-graphite:4.2.28 -
https://metrics.dropwizard.io/metrics-graphite)
* Gson (com.google.code.gson:gson:2.10.1 -
https://github.com/google/gson/gson)
- * Guava: Google Core Libraries for Java
(com.google.guava:guava:33.3.1-jre - https://github.com/google/guava) *
Guava InternalFutureFailureAccess and InternalFutures
(com.google.guava:failureaccess:1.0.2 -
https://github.com/google/guava/failureaccess)
+ * Guava: Google Core Libraries for Java
(com.google.guava:guava:33.3.1-jre - https://github.com/google/guava)
+ * Guava InternalFutureFailureAccess and InternalFutures
(com.google.guava:failureaccess:1.0.2 -
https://github.com/google/guava/failureaccess)
* Guava ListenableFuture only
(com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava -
https://github.com/google/guava/listenablefuture)
* Hadoop Metrics2 Reporter for Dropwizard Metrics
(com.github.joshelser:dropwizard-metrics-hadoop-metrics2-reporter:0.1.2 -
https://github.com/joshelser/dropwizard-hadoop-metrics2)
* Hibernate Validator Engine
(org.hibernate.validator:hibernate-validator:7.0.5.Final -
http://hibernate.org/validator/hibernate-validator)
