MartijnVisser commented on code in PR #29126:
URL: https://github.com/apache/flink/pull/29126#discussion_r3952602804


##########
flink-runtime-web/src/main/resources/META-INF/NOTICE:
##########
@@ -86,14 +86,14 @@ The Apache Software Foundation (http://www.apache.org/).
 | date-fns | 2.30.0 | MIT |
 | delaunator | 5.1.0 | ISC |
 | detect-browser | 5.3.0 | MIT |
-| dompurify | 3.2.7 | Apache-2.0 |
+| dompurify | 3.4.8 | (MPL-2.0 OR Apache-2.0) |

Review Comment:
   913207b3afa deliberately picked Apache-2.0 for dompurify because it's 
dual-licensed. Please keep that: list it as Apache-2.0 and drop the MPL text.



##########
flink-runtime-web/web-dashboard/package.json:
##########
@@ -39,9 +39,9 @@
     "@angular-eslint/eslint-plugin-template": "21.4.0",
     "@angular-eslint/schematics": "^21.4.0",
     "@angular-eslint/template-parser": "21.4.0",
-    "@angular/build": "^21.2.17",
+    "@angular/build": "^21.2.22",
     "@angular/cli": "^21.2.17",

Review Comment:
   Why not bump this one as well? The lock already resolves it to 21.2.23.



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to