[FLINK-24028] NoticeFileChecker complains about dependencies being mentioned in NOTICE file but are not listed in the Maven output

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 1.14.0
• Component/s: Build System / CI, FileSystems
• Assignee: Unassigned
• Reporter: Matthias Pohl
• Created: 27/Aug/21 11:16
• Updated: 27/Aug/21 11:20
• Resolved: 27/Aug/21 11:20

Description

We noticed some warnings by the NoticeFileChecker for the flink-filesystem module (see AzureCI run):

2021-08-26T17:05:14.6553403Z 17:05:14,651 WARN org.apache.flink.tools.ci.licensecheck.NoticeFileChecker [] - Dependency com.fasterxml.jackson.core:jackson-annotations:2.12.1 is mentioned in NOTICE file /__w/1/s/flink-filesystems/flink-azure-fs-hadoop/src/main/resources/META-INF/NOTICE, but is not expected there
2021-08-26T17:05:14.6554851Z 17:05:14,651 WARN org.apache.flink.tools.ci.licensecheck.NoticeFileChecker [] - Dependency com.fasterxml.jackson.core:jackson-databind:2.12.1 is mentioned in NOTICE file /__w/1/s/flink-filesystems/flink-azure-fs-hadoop/src/main/resources/META-INF/NOTICE, but is not expected there
2021-08-26T17:05:14.6556275Z 17:05:14,652 WARN org.apache.flink.tools.ci.licensecheck.NoticeFileChecker [] - Dependency org.apache.hadoop.thirdparty:hadoop-shaded-protobuf_3_7:1.1.1 is mentioned in NOTICE file /__w/1/s/flink-filesystems/flink-s3-fs-presto/src/main/resources/META-INF/NOTICE, but is not expected there
2021-08-26T17:05:14.6557679Z 17:05:14,652 WARN org.apache.flink.tools.ci.licensecheck.NoticeFileChecker [] - Dependency org.apache.hadoop.thirdparty:hadoop-shaded-guava:1.1.1 is mentioned in NOTICE file /__w/1/s/flink-filesystems/flink-s3-fs-presto/src/main/resources/META-INF/NOTICE, but is not expected there
2021-08-26T17:05:14.6559046Z 17:05:14,652 WARN org.apache.flink.tools.ci.licensecheck.NoticeFileChecker [] - Dependency org.wildfly.openssl:wildfly-openssl:1.0.7.Final is mentioned in NOTICE file /__w/1/s/flink-filesystems/flink-s3-fs-presto/src/main/resources/META-INF/NOTICE, but is not expected there
2021-08-26T17:05:14.6560343Z 17:05:14,652 WARN org.apache.flink.tools.ci.licensecheck.NoticeFileChecker [] - Dependency commons-lang:commons-lang:2.6 is mentioned in NOTICE file /__w/1/s/flink-filesystems/flink-s3-fs-presto/src/main/resources/META-INF/NOTICE, but is not expected there
2021-08-26T17:05:14.7427551Z 17:05:14,741 WARN org.apache.flink.tools.ci.licensecheck.NoticeFileChecker [] - Dependency commons-lang:commons-lang:2.6 is mentioned in NOTICE file /__w/1/s/flink-filesystems/flink-fs-hadoop-shaded/src/main/resources/META-INF/NOTICE, but is not expected there
2021-08-26T17:05:14.7442328Z 17:05:14,743 WARN org.apache.flink.tools.ci.licensecheck.NoticeFileChecker [] - Dependency org.apache.hadoop.thirdparty:hadoop-shaded-protobuf_3_7:1.1.1 is mentioned in NOTICE file /__w/1/s/flink-filesystems/flink-s3-fs-hadoop/src/main/resources/META-INF/NOTICE, but is not expected there
2021-08-26T17:05:14.7443982Z 17:05:14,743 WARN org.apache.flink.tools.ci.licensecheck.NoticeFileChecker [] - Dependency org.apache.hadoop.thirdparty:hadoop-shaded-guava:1.1.1 is mentioned in NOTICE file /__w/1/s/flink-filesystems/flink-s3-fs-hadoop/src/main/resources/META-INF/NOTICE, but is not expected there
2021-08-26T17:05:14.7445447Z 17:05:14,743 WARN org.apache.flink.tools.ci.licensecheck.NoticeFileChecker [] - Dependency org.wildfly.openssl:wildfly-openssl:1.0.7.Final is mentioned in NOTICE file /__w/1/s/flink-filesystems/flink-s3-fs-hadoop/src/main/resources/META-INF/NOTICE, but is not expected there
2021-08-26T17:05:14.7446970Z 17:05:14,743 WARN org.apache.flink.tools.ci.licensecheck.NoticeFileChecker [] - Dependency commons-lang:commons-lang:2.6 is mentioned in NOTICE file /__w/1/s/flink-filesystems/flink-s3-fs-hadoop/src/main/resources/META-INF/NOTICE, but is not expected there

 These might be related to some version bumps and need to be investigated.

Issue Links

• duplicates: FLINK-24027 FileSystems list excessive dependencies in NOTICE