aglinxinyuan commented on code in PR #7281:
URL: https://github.com/apache/texera/pull/7281#discussion_r3709902028


##########
amber/build.sbt:
##########
@@ -191,7 +191,7 @@ val hadoopDependencies = Seq(
 // Google Service related
 val googleServiceDependencies = Seq(
   "com.google.oauth-client" % "google-oauth-client-jetty" % "1.34.1" 
exclude("com.google.guava", "guava"),
-  "com.google.api-client" % "google-api-client" % "2.2.0" 
exclude("com.google.guava", "guava"),
+  "com.google.api-client" % "google-api-client" % "2.9.0" 
exclude("com.google.guava", "guava"),
   "com.sun.mail" % "javax.mail" % "1.6.2"

Review Comment:
   Good catch — this is handled in `d767802e`. `amber/LICENSE-binary-java` is 
synced to the 2.9.0 dependency graph:
   - `google-api-client` 2.2.0 → 2.9.0
   - `google-http-client{,-apache-v2,-gson}` → 2.0.0 (transitive)
   - new `com.google.auth:google-auth-library-{credentials,oauth2-http}` 1.30.0 
(BSD-3-Clause) and `com.google.auto.value:auto-value-annotations` 1.11.0 
(Apache-2.0)
   
   `NOTICE-binary` regenerates byte-identical — headings are version-less and 
none of the new/bumped jars change their upstream NOTICE text — so no change 
there. The binary-license drift check and the full amber build are green.
   



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to