skrcode commented on code in PR #763: URL: https://github.com/apache/hugegraph-toolchain/pull/763#discussion_r3916151458
########## hugegraph-dist/scripts/dependency/known-dependencies.txt: ########## @@ -467,6 +467,7 @@ sketches-core-0.9.0.jar slf4j-api-1.7.25.jar slf4j-api-1.7.28.jar slf4j-api-1.7.30.jar +slf4j-api-1.7.36.jar Review Comment: Updated all three release `LICENSE` coordinates to Log4j 2.25.5 and added the `slf4j-api:1.7.36` MIT entry in b7644fff. The dependency manifest regenerates byte-identically, RAT passes all nine modules, and the built release archive contains an exact copy of the updated LICENSE. ########## hugegraph-dist/scripts/dependency/known-dependencies.txt: ########## @@ -382,9 +382,9 @@ listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar log4j-1.2-api-2.11.2.jar log4j-1.2-api-2.17.1.jar log4j-1.2.17.jar -log4j-api-2.18.0.jar -log4j-core-2.18.0.jar -log4j-slf4j-impl-2.18.0.jar +log4j-api-2.25.5.jar Review Comment: Retargeted this PR to `master` and rebased the combined change onto current master (`451abb1e`). The PR now contains both Log4j 2.25.5 POM updates plus the generated dependency and license metadata, so it no longer depends on the Dependabot branch. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
