mimaison opened a new pull request, #14812: URL: https://github.com/apache/kafka/pull/14812
- `audience-annotations` seems to come from ZooKeeper. I was surprised I had to downgrade it but I confirmed that [ZK 3.8.3](https://www.apache.org/dyn/closer.lua/zookeeper/zookeeper-3.8.3/apache-zookeeper-3.8.3-bin.tar.gz) ships an earlier version than [ZK 3.6.4](https://archive.apache.org/dist/zookeeper/zookeeper-3.6.4/apache-zookeeper-3.6.4-bin.tar.gz)! - `jsr305` seems to come from reflections 0.10.2 Even though [Maven Central](https://mvnrepository.com/artifact/com.google.code.findbugs/jsr305/3.0.2) says `jsr305` is under the Apache 2.0 license, it seems it's actually under the BSD-3 license according to the original repository: https://code.google.com/archive/p/jsr-305/. It's also a dependency of Pulsar and they count it as [BSD-3](https://github.com/apache/pulsar/blob/master/distribution/server/src/assemble/LICENSE.bin.txt#L512) These changes should have been done in 3.6.0, the dependencies have not changed since then. I confirmed that the license check documented in https://issues.apache.org/jira/browse/KAFKA-12622 fails for 3.6.0. ### Committer Checklist (excluded from commit message) - [ ] Verify design and implementation - [ ] Verify test coverage and CI build status - [ ] Verify documentation (including upgrade notes) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: jira-unsubscr...@kafka.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
