[
Date Prev][
Date Next][
Thread Prev][
Thread Next][
Date Index][
Thread Index]
[
List Home]
[iot-pmc] [CQ 22960] com.fasterxml.jackson.core:jackson-databind:2.11.3
|
http://dev.eclipse.org/ipzilla/show_bug.cgi?id=22960
--- Comment #5 from Dominic Schabel <dominic.schabel@xxxxxxxx> 2021-01-18 09:28:23 ---
Hi Kai,
thanks a lot for pointing me to the Dash Tool. Didn't know that it exists.
Awesome! However since I have quite a long list of updated dependencies to
check, I'd like to sort this out and safe both of us quite some time dealing
with not required CQs :)
I followed the Handbook (cf.
https://www.eclipse.org/projects/handbook/#ip-prereq-versions):
> [...] project teams are required to engage the due diligence process with each separate version of Prerequisite content they require.
> This applies specifically to major and minor versions of prerequisites. [...] If a project team isnt sure whether or not a particular
> release is a service release, they should submit the content for review by the IP Team
I only found CQ21968 for jackson-databind in version 2.10.3, Clearly Defined
score is too low and I'm not 100% sure that 2.11.3 is a service release, hence
I had the impression that filing a CQ is required. Did I missed something?
You're totally right, I run Dash Tool against hawkBit and indeed jackson
databind is not listed as "requires review".
Thanks a lot for your advice!
/Dominic
--
Configure CQmail: http://dev.eclipse.org/ipzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the CQ.