I just dug through some emails and we did identify this in 3.2.11-RC2. We had a number of other licensing issues on that RC so it is not clear to me if this particular finding got dropped, or was determined to be a non-issue. Regardless, this same issue does affect the 3.2.11 release.
On Wed, Feb 14, 2018 at 10:57 AM, Puja Valiyil <[email protected]> wrote: > I’m confused because that project was in our previous release. Didn’t we > upgrade the version of giraph to fix this or am I misremembering? > > Sent from my iPhone > > > On Feb 14, 2018, at 10:37 AM, Jeff Dasch <[email protected]> wrote: > > > > Again, not sure if this license thing is a blocker. But if it is, I put > up > > PR-274 as a fix: https://github.com/apache/incubator-rya/pull/274 > > > > > >> On Tue, Feb 13, 2018 at 4:37 PM, Jeff Dasch <[email protected]> wrote: > >> > >> I'm not voting yet, but I did run a license check and got a hit on this: > >> (GNU Lesser Public License) FindBugs-Annotations > >> (com.google.code.findbugs:annotations:2.0.2 - > >> http://findbugs.sourceforge.net/) > >> > >> which comes from Apache Giraph > >> [INFO] org.apache.rya:rya.giraph:jar:3.2.12-incubating > >> [INFO] +- org.apache.giraph:giraph-core:jar:1.2.0:compile > >> [INFO] | +- com.google.code.findbugs:annotations:jar:2.0.2:compile > >> > >> I'm pretty sure we ran into this during the last release. Are we still > >> good to go on this RC, or do we need to cut a new one that has a giraph > >> profile? > >> > >> > >> > >>> On Mon, Feb 12, 2018 at 8:51 PM, Adina Crainiceanu <[email protected]> > wrote: > >>> > >>> Rya community, > >>> > >>> I am pleased to be calling this vote for the source release of Apache > Rya > >>> (Incubating), version 3.2.12. > >>> > >>> The source zip, including signatures, digests, etc. can be found at: > >>> https://dist.apache.org/repos/dist/dev/incubator/rya/rya- > >>> incubating-3.2.12-rc1/ > >>> > >>> Ancillary artifacts such as poms, jars, wars, etc. can be found here: > >>> https://repository.apache.org/content/repositories/ > >>> orgapacherya-1009/org/apache/rya/ > >>> > >>> The Git tag is rya-incubating-3.2.12-rc1 > >>> The Git commit ID is e9ecf7fae76e308cfc0d90684ce684493482266c > >>> https://git-wip-us.apache.org/repos/asf?p=incubator-rya.git; > >>> a=commit;h=e9ecf7fae76e308cfc0d90684ce684493482266c > >>> > >>> > >>> Checksums of rya-project-3.2.12-source-release.zip: > >>> SHA512:8059adff3a264cdcc85edb8ab1c820d87d4e2adbdfd4eebfcd7d2 > >>> 7b9a3c8c2af8cd09cb39b91ccb5170fe37159b1360078ef8e61321e7f6ca > >>> e6141442bbf8dda > >>> SHA1: 64296d86923dae11294dcff0719cfcb9522a744d > >>> MD5: 9c55ae7f811afaa147ebb7f652543620 > >>> > >>> Release artifacts are signed with the following key: > >>> https://people.apache.org/keys/committer/adina.asc > >>> > >>> KEYS file available here: > >>> https://dist.apache.org/repos/dist/release/incubator/rya/KEYS > >>> > >>> Issues that were closed/resolved for this release are here: > >>> https://issues.apache.org/jira/secure/ReleaseNote.jspa? > >>> projectId=12319020&version=12341570 > >>> > >>> > >>> The vote will be open for at least 72 hours until end of Thursday, > >>> February > >>> 15, 2018 ET. > >>> Please download the release candidate and evaluate the necessary items > >>> including checking hashes, signatures, build from source, and test. > Then > >>> please vote: > >>> > >>> [ ] +1 Release this package as rya-project-3.2.12 > >>> [ ] +0 no opinion > >>> [ ] -1 Do not release this package because because... > >>> > >>> > >>> Thank you, > >>> Adina > >>> > >>> -- > >>> Dr. Adina Crainiceanu > >>> Associate Professor > >>> Computer Science Department > >>> United States Naval Academy > >>> 410-293-6822 <(410)%20293-6822> > >>> [email protected] > >>> http://www.usna.edu/Users/cs/adina/ > >>> > >> > >> >
