[
https://issues.apache.org/jira/browse/HBASE-26760?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17502095#comment-17502095
]
Sean Busbey commented on HBASE-26760:
-------------------------------------
I think the original problem in HBASE-25792 was hadoop-common adding a
dependency on snappy-java 1.1.8.2. Since then we've pulled in our own
dependency on snappy-java via HBASE-26259. Hadoop 3.3.2 has also added in a
GSON version that has the wrong name for ALv2.
PR #4172 provides an entry for both. I don't think the supplemental-models
changes are needed in branches-2, because we have entries for gson and
snappy-java on those branches.
> LICENSE handling should not allow non-aggregated "apache-2.0"
> -------------------------------------------------------------
>
> Key: HBASE-26760
> URL: https://issues.apache.org/jira/browse/HBASE-26760
> Project: HBase
> Issue Type: Task
> Components: community
> Affects Versions: 2.4.3, 2.4.4, 2.4.5, 2.4.6, 2.4.7, 2.4.8, 2.4.9
> Reporter: Sean Busbey
> Priority: Minor
>
> our non-aggregated license check currently allows the malformed name
> "apache-2.0". All ALv2 licenses should be aggregated.
> - remove "apache-2.0" from the {{non_aggregate_fine}} list
> - figure out what dependencies are referring to this license and correct them
> in {{supplemental-models.xml}}
> nice to have: maybe add a precommit check that complains if the
> {{non_aggregate_fine}} set is changed?
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
