[OMID-251] Bump license-maven-plugin to latest version

• Type: Task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.1.1
• Assignee: Nihal Jain
• Reporter: Nihal Jain
• Created: 18/Oct/23 19:23
• Updated: 08/Feb/24 19:38
• Resolved: 20/Oct/23 19:31

Description

In phoenix-omid pom.xml, maven-license-plugin.version is set to 2.11, which was last updated 5 years ago. The plugin com.mycila:license-maven-plugin pulls log4j-1.2.x jar.

See sample from run of mvn license:check with 2.11 is as follows:

Downloading from central: [https://repo.maven.apache.org/maven2/log4j/log4j/1.2.12/log4j-1.2.12.jar]

In my org, when trying to build phoenix-omid, build fails as log4j:logj:1.2.x is strictly banned in interanl artifactory.

The goal of this JIRA is to bump the afore-mentioned plugin to latest version, i.e. 4.3, which does not pull the log4j:log4j jar.

Full run log, for reference, of mvn license:check command after clearning {{~/.m2/reposiitory} with version:

• 2.11: out_v2.11.txt, which pulls log4j-1.2.x jar.
• 4.3: out_v4.3.txt, which does not pull log4j-1.2.x jar.

Issue Links

• is related to: OMID-264 Fix deprecated WARNING in check-license stage
• links to: GitHub Pull Request #142