skrcode opened a new pull request, #433: URL: https://github.com/apache/qpid-broker-j/pull/433
This is a companion fix for Dependabot PR #426. The HttpClient 5.6.3 upgrade itself compiles and tests successfully, but Qpid's release/license gate intentionally rejects dependency changes until the checked-in assembly reference matches the generated dependency metadata. The reference still described HttpClient 5.6.2. This updates the single generated reference entry (artifact version and upstream documentation URL) to 5.6.3. The artifact and Apache 2.0 license are otherwise unchanged, so no LICENSE or NOTICE update is needed. Verification on Amazon Corretto 17: - Reproduced the exact bot-head failure with the repository's GitHub `Licence Check` command: 42 modules passed before `qpid-perftests` rejected the stale dependency reference. - Confirmed the generated/reference diff contains only the HttpClient 5.6.2 to 5.6.3 entry. - Re-ran the exact clean release/license command successfully across all 52 reactor modules, including RAT, licensing, compilation, test compilation, packaging, and dependency verification. - Ran the affected `qpid-perftests` unit suite plus its test utility dependency: 184 tests passed with zero failures. The change is limited to the dependency-verification reference required by the existing release gate. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
