Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -129,7 +129,7 @@
<zookeeper.version>3.6.2</zookeeper.version>
<junit.version>4.12</junit.version>
<mockito.version>2.25.1</mockito.version>
<lombok.version>1.18.8</lombok.version>
<lombok.version>1.18.32</lombok.version>

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Medium: Update release metadata for Lombok 1.18.32

pom.xml:132

Evidence

  • The PR changes <lombok.version> to 1.18.32, but hugegraph-dist/scripts/dependency/known-dependencies.txt:249 still lists lombok-1.18.8.jar, and hugegraph-dist/release-docs/LICENSE:591 still documents org.projectlombok:lombok:1.18.8. The license-checker workflow regenerates current dependencies and diffs them against the checked-in list.

Impact

  • The dependency license check can fail, and release artifacts can ship incorrect third-party dependency/license metadata.

Requested fix

  • Regenerate/update hugegraph-dist/scripts/dependency/known-dependencies.txt and update the Lombok entry in hugegraph-dist/release-docs/LICENSE to 1.18.32, including any related bundled license metadata if it changed.

<commons.io.version>2.8.0</commons.io.version>
<commons.lang3.version>3.9</commons.lang3.version>
<commons.compress.version>1.21</commons.compress.version>
Expand Down
Loading