rmetzger commented on PR #175:
URL: https://github.com/apache/flink-shaded/pull/175#issuecomment-6343198671
My claude tells me:
2. The SnakeYAML pin in flink-shaded-swagger/pom.xml was not bumped. It
stays at 2.4, so swagger bundles
jackson-dataformat-yaml 2.21.8 (built against SnakeYAML 2.5) together
with SnakeYAML 2.4. Both earlier Jackson bumps updated
this pin together with Jackson: c0615cf moved it from 2.1 to 2.4, and
8ea9b5b on master moved it from 2.4 to 2.6. The fix
is to set it to 2.5 and update the org.yaml:snakeyaml line in the
swagger NOTICE. The license check can't catch this,
because the NOTICE correctly lists what is bundled (2.4).
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
