Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

upgrade the unknown license dependency #614

Merged
merged 1 commit into from
Oct 7, 2023
Merged

upgrade the unknown license dependency #614

merged 1 commit into from
Oct 7, 2023

Conversation

wt-better
Copy link
Contributor

@wt-better wt-better commented Sep 27, 2023

What this PR does:
Fixes issues-613

What this PR change:

Dependency License Version
github.com/ajstarks/svgo Unknown v0.0.0-20180226025133-644b8db467af
github.com/chzyer/logex Unknown v1.1.10
github.com/golang/freetype Unknown v0.0.0-20170609003504-e2365dfdc4a0
github.com/gonum/blas Unknown v0.0.0-20181208220705-f22b278b28ac
github.com/gonum/floats Unknown v0.0.0-20181209220543-c233463c7e82
github.com/gonum/integrate Unknown v0.0.0-20181209220457-a422b5c0fdf2
github.com/gonum/internal Unknown v0.0.0-20181124074243-f884aa714029
github.com/gonum/lapack Unknown v0.0.0-20181123203213-e4cdc5a0bff9
github.com/gonum/matrix Unknown v0.0.0-20181209220409-c518dec07be9
github.com/gonum/stat Unknown v0.0.0-20181125101827-41a0da705a5b
github.com/hudl/fargo Unknown v1.3.0
github.com/kr/logfmt Unknown v0.0.0-20140226030751-b84e30acd515
github.com/lightstep/lightstep-tracer-common/golang/gogo Unknown v0.0.0-20190605223551-bc2310a04743
github.com/pascaldekloe/goe Unknown v0.1.0
github.com/streadway/handy Unknown v0.0.0-20190108123426-d5acb3125c2a
github.com/toolkits/concurrent Unknown v0.0.0-20150624120057-a4371d70e3e3
gonum.org/v1/plot Unknown v0.0.0-20190515093506-e2840ee46a6b
modernc.org/parser Unknown v1.0.2
modernc.org/scanner Unknown v1.0.1

Some License was scanning failure, fllow:

Dependency License Version
github.com/ajstarks/svgo CCPL 4.0 v0.0.0-20180226025133-644b8db467af
github.com/chzyer/logex MIT v1.1.10
github.com/golang/freetype FreeType License v0.0.0-20170609003504-e2365dfdc4a0
github.com/hudl/fargo MIT v1.3.0
github.com/kr/logfmt MIT v0.0.0-20140226030751-b84e30acd515
github.com/lightstep/lightstep-tracer-common/golang/gogo MIT v0.0.0-20190605223551-bc2310a04743
github.com/pascaldekloe/goe CC0-1.0 license v0.1.0
github.com/streadway/handy BSD-2-Clause license v0.0.0-20190108123426-d5acb3125c2a
gonum.org/v1/plot BSD-3-Clause license v0.0.0-20190515093506-e2840ee46a6b
modernc.org/parser BSD-3-Clause license v1.0.2
modernc.org/scanner BSD-3-Clause license v1.0.1

The following dependencies are introduced by github.com/polarismesh/polaris-go in dubbo-go and have not been replaced by new versions. github.com/polarismesh/polaris-go is an alternative to the registration center and is not a strong dependency, so remove this dependency.

Dependency License Version
github.com/gonum/blas Unknown v0.0.0-20181208220705-f22b278b28ac
github.com/gonum/floats Unknown v0.0.0-20181209220543-c233463c7e82
github.com/gonum/integrate Unknown v0.0.0-20181209220457-a422b5c0fdf2
github.com/gonum/internal Unknown v0.0.0-20181124074243-f884aa714029
github.com/gonum/lapack Unknown v0.0.0-20181123203213-e4cdc5a0bff9
github.com/gonum/matrix Unknown v0.0.0-20181209220409-c518dec07be9
github.com/gonum/stat Unknown v0.0.0-20181125101827-41a0da705a5b

This dependency was introduced by nacos-go-sdk in dubbo-go,and in new dubbo-go version not dependency, so upgrade dubbo-go version

github.com/toolkits/concurrent | Unknown | v0.0.0-20150624120057-a4371d70e3e3

more upgrade github.com/gin-gonic/gin version to v1.9.1,old veriosn has some cve.

Copy link
Member

@slievrly slievrly left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@codecov-commenter
Copy link

Codecov Report

All modified lines are covered by tests ✅

Comparison is base (c5fc98a) 37.28% compared to head (1751446) 37.28%.

Additional details and impacted files
@@           Coverage Diff           @@
##           master     #614   +/-   ##
=======================================
  Coverage   37.28%   37.28%           
=======================================
  Files         175      175           
  Lines       11666    11666           
=======================================
  Hits         4350     4350           
  Misses       6952     6952           
  Partials      364      364           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@slievrly slievrly merged commit 7d0617c into apache:master Oct 7, 2023
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

the unknown license dependency need to upgrade
3 participants