Paul Gerver created BEAM-3831: --------------------------------- Summary: Update Google Cloud Core version (which depends on org.json) Key: BEAM-3831 URL: https://issues.apache.org/jira/browse/BEAM-3831 Project: Beam Issue Type: Bug Components: io-java-gcp Affects Versions: 2.3.0 Reporter: Paul Gerver Assignee: Chamikara Jayalath
Looking at dependencies pulled in for my application and saw that org.json jar file was being used. Looked up the dependency tree and saw the following: {noformat} [INFO] | +- org.apache.beam:beam-sdks-java-io-google-cloud-platform:jar:2.3.0:compile ... [INFO] | | +- com.google.cloud:google-cloud-core:jar:1.0.2:compile [INFO] | | | \- org.json:json:jar:20160810:compile{noformat} The Apache Foundation has noted that use of software with the json license should not be used: [https://www.apache.org/legal/resolved.html#json] The earliest version to exclude the dependency is v1.15.0 ([https://mvnrepository.com/artifact/com.google.cloud/google-cloud-core/1.15.0)] -- This message was sent by Atlassian JIRA (v7.6.3#76005)