chucheng92 commented on PR #21442: URL: https://github.com/apache/flink/pull/21442#issuecomment-1422222706
> > Is this caused by updating the commons-collections4? > > Yes > > > It add some transitive dependencies? > > No. Like those lines say `These issues are assumed to be false-positives`. > > The issue lies here https://dev.azure.com/apache-flink/apache-flink/_build/results?buildId=45877&view=logs&j=b59e5554-36c7-5512-ab1a-b80b74075fce&t=849d419c-1b8f-52b7-e455-d4bc36ec43ad&l=30273 > > ``` > flink-dist: > These issue are legally problematic and MUST be fixed: > Dependency org.apache.commons:commons-collections4:4.4 is not listed. > These issues are mistakes that aren't legally problematic. They SHOULD be fixed at some point, but we don't have to: > Dependency commons-collections:commons-collections:3.2.2 is not bundled, but listed. > ``` Can i update the commons-collections3 to commons-collections4 in NOTICE file? - commons-collections:commons-collections:3.2.2 -> - org.apache.commons:commons-collections4:4.4 Do I just need to update the NOTICE file of the flink-dist module or do I need to update all the places where it appears? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
