svn commit: r1834736 - /ofbiz/ofbiz-framework/trunk/build.gradle

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

svn commit: r1834736 - /ofbiz/ofbiz-framework/trunk/build.gradle

jleroux@apache.org
Author: jleroux
Date: Sat Jun 30 14:00:16 2018
New Revision: 1834736

URL: http://svn.apache.org/viewvc?rev=1834736&view=rev
Log:
Fixed: Put back the com.lowagie:itext license from 4.2.0 to 2.1.7
(OFBIZ-10455)

At r1812161 for OFBIZ-9674 we updated com.lowagie:itext license from 2.1.7 to
4.2.0. Scott mentionned at https://s.apache.org/ixHW:

<<I just noticed that the iText maven bundle is a bit tricksy and includes iText
 5.6.6 as a dependency, with the latter being GPL licensed.>>

Actually Scott meant itextpdf (was clear in his message), and it turned out that
not only itextpdf was a problem but the 4.2.0 version in its entirety as
discovered in the thread.

The solution is to get back to the 2.1.7 version which is still MPL licensed.

Thanks: Scott for discovering the issue and others for the discussion

Modified:
    ofbiz/ofbiz-framework/trunk/build.gradle

Modified: ofbiz/ofbiz-framework/trunk/build.gradle
URL: http://svn.apache.org/viewvc/ofbiz/ofbiz-framework/trunk/build.gradle?rev=1834736&r1=1834735&r2=1834736&view=diff
==============================================================================
--- ofbiz/ofbiz-framework/trunk/build.gradle (original)
+++ ofbiz/ofbiz-framework/trunk/build.gradle Sat Jun 30 14:00:16 2018
@@ -107,7 +107,7 @@ dependencies {
     compile 'com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer:20170515.1'
     compile 'com.googlecode.libphonenumber:libphonenumber:8.8.7'
     compile 'com.ibm.icu:icu4j:60.2'
-    compile 'com.lowagie:itext:4.2.0'
+    compile 'com.lowagie:itext:2.1.7' // Don't update due to license change in newer versions, see OFBIZ-10455
     compile 'com.sun.mail:javax.mail:1.6.0'
     compile 'com.sun.syndication:com.springsource.com.sun.syndication:0.9.0'
     compile 'com.thoughtworks.xstream:xstream:1.4.10'