MartijnVisser opened a new pull request, #64:
URL: https://github.com/apache/flink-connector-shared-utils/pull/64

   ## Purpose of the change
   
   https://issues.apache.org/jira/browse/FLINK-41232
   
   Publish SBOMs from every connector that inherits the parent.
   
   ## Brief change log
   
   - Enable cyclonedx-maven-plugin 2.9.3, without provided dependencies, and 
skip it in the fast profile
   
   ## Verifying this change
   
   Built flink-connector-jdbc against a local snapshot of this branch: all 11 
modules attach SBOMs without drivers or Flink artifacts, and `-Dfast` writes 
none. On top of FLINK-40630 the rebuild is byte-identical.
   
   ## Impact and documentation
   
   Connectors that keep Flink artifacts at compile scope will list them as 
required. For shaded modules the SBOM shows the Maven dependency graph, not the 
jar's contents.
   
   ---
   
   ##### Was generative AI tooling used to co-author this PR?
   
   - [X] Yes (please specify the tool below)
   
   Generated-by: Claude Code (Claude Opus 5.5)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to