> On May 18, 2019, at 1:48 AM, Jonathan Gallimore > <[email protected]> wrote: > > Currently reviewing, but compared with M2, we're pulling in some > interesting new deps: > > ant-1.10.5 > ant-launcher-1.10.5 > asm-all-5.0.3 > codemodel-2.3.2 > commons-collections4-4.3 (as well as commons-collections-3.2.2) > ecj4.10 > FastInfoset-1.2.16 > istack-commons-runtime-3.0.8 > istack-commons-tools-3.0.8 > jakarta.xml.bind-api-2.3.2 > jaxb-runtime-2.3.2 > jaxb-xjc-2.3.2 > relaxng-datatype-2.3.2 > stax-ex-1.8.1 > xsom-2.3.2 > > I suspect some of that is Java 11 related, but for things like ant, asm, > codemodel, commons-collections4-4.3, I'd like to understand where these > dependencies have come from, and check we have the right LICENSE/NOTICE > updates.
Thanks for the binary comparison. Looks like we'd need a reroll. We also need to be putting something in place so we can move discussions like this out of release-time and closer to merge-time. Even a shell script ran from Buildbot would get the job done. -David
