I just dug through some emails and we did identify this in 3.2.11-RC2.  We
had a number of other licensing issues on that RC so it is not clear to me
if this particular finding got dropped, or was determined to be a
non-issue.  Regardless, this same issue does affect the 3.2.11 release.

On Wed, Feb 14, 2018 at 10:57 AM, Puja Valiyil <puja...@gmail.com> wrote:

> I’m confused because that project was in our previous release.  Didn’t we
> upgrade the version of giraph to fix this or am I misremembering?
>
> Sent from my iPhone
>
> > On Feb 14, 2018, at 10:37 AM, Jeff Dasch <hcs...@gmail.com> wrote:
> >
> > Again, not sure if this license thing is a blocker.  But if it is, I put
> up
> > PR-274 as a fix: https://github.com/apache/incubator-rya/pull/274
> >
> >
> >> On Tue, Feb 13, 2018 at 4:37 PM, Jeff Dasch <hcs...@gmail.com> wrote:
> >>
> >> I'm not voting yet, but I did run a license check and got a hit on this:
> >> (GNU Lesser Public License) FindBugs-Annotations
> >> (com.google.code.findbugs:annotations:2.0.2 -
> >> http://findbugs.sourceforge.net/)
> >>
> >> which comes from Apache Giraph
> >> [INFO] org.apache.rya:rya.giraph:jar:3.2.12-incubating
> >> [INFO] +- org.apache.giraph:giraph-core:jar:1.2.0:compile
> >> [INFO] |  +- com.google.code.findbugs:annotations:jar:2.0.2:compile
> >>
> >> I'm pretty sure we ran into this during the last release.  Are we still
> >> good to go on this RC, or do we need to cut a new one that has a giraph
> >> profile?
> >>
> >>
> >>
> >>> On Mon, Feb 12, 2018 at 8:51 PM, Adina Crainiceanu <ad...@usna.edu>
> wrote:
> >>>
> >>> Rya community,
> >>>
> >>> I am pleased to be calling this vote for the source release of Apache
> Rya
> >>> (Incubating), version 3.2.12.
> >>>
> >>> The source zip, including signatures, digests, etc. can be found at:
> >>> https://dist.apache.org/repos/dist/dev/incubator/rya/rya-
> >>> incubating-3.2.12-rc1/
> >>>
> >>> Ancillary artifacts such as poms, jars, wars, etc. can be found here:
> >>> https://repository.apache.org/content/repositories/
> >>> orgapacherya-1009/org/apache/rya/
> >>>
> >>> The Git tag is rya-incubating-3.2.12-rc1
> >>> The Git commit ID is e9ecf7fae76e308cfc0d90684ce684493482266c
> >>> https://git-wip-us.apache.org/repos/asf?p=incubator-rya.git;
> >>> a=commit;h=e9ecf7fae76e308cfc0d90684ce684493482266c
> >>>
> >>>
> >>> Checksums of rya-project-3.2.12-source-release.zip:
> >>> SHA512:8059adff3a264cdcc85edb8ab1c820d87d4e2adbdfd4eebfcd7d2
> >>> 7b9a3c8c2af8cd09cb39b91ccb5170fe37159b1360078ef8e61321e7f6ca
> >>> e6141442bbf8dda
> >>> SHA1: 64296d86923dae11294dcff0719cfcb9522a744d
> >>> MD5: 9c55ae7f811afaa147ebb7f652543620
> >>>
> >>> Release artifacts are signed with the following key:
> >>> https://people.apache.org/keys/committer/adina.asc
> >>>
> >>> KEYS file available here:
> >>> https://dist.apache.org/repos/dist/release/incubator/rya/KEYS
> >>>
> >>> Issues that were closed/resolved for this release are here:
> >>> https://issues.apache.org/jira/secure/ReleaseNote.jspa?
> >>> projectId=12319020&version=12341570
> >>>
> >>>
> >>> The vote will be open for at least 72 hours until end of Thursday,
> >>> February
> >>> 15, 2018 ET.
> >>> Please download the release candidate and evaluate the necessary items
> >>> including checking hashes, signatures, build from source, and test.
> Then
> >>> please vote:
> >>>
> >>> [ ] +1 Release this package as rya-project-3.2.12
> >>> [ ] +0 no opinion
> >>> [ ] -1 Do not release this package because because...
> >>>
> >>>
> >>> Thank you,
> >>> Adina
> >>>
> >>> --
> >>> Dr. Adina Crainiceanu
> >>> Associate Professor
> >>> Computer Science Department
> >>> United States Naval Academy
> >>> 410-293-6822 <(410)%20293-6822>
> >>> ad...@usna.edu
> >>> http://www.usna.edu/Users/cs/adina/
> >>>
> >>
> >>
>

Reply via email to