jira-importer

JIRAUSER293173: This is happening in our cluster (2.4.0) due to a Qualys scan. Does anyone have any thoughts on workarounds (aside from blocking Qualys)? It seems related to https://issues.apache.org/jira/browse/STORM-1642?page=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel&focusedCommentId=15467776#comment-15467776 2022-07-20...

antoine.tran: Up. Even in storm 2.4.0, RAS classes are present in storm-server but not storm-client. We would like to avoid storm-server as dependencies for our topology users.

**[Elliotte Rusty Harold](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=elharo)** commented My concern about automated fixes is that dependency mediation is order dependent. Where you add a new dependency element matters.

**[Elliotte Rusty Harold](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=elharo)** commented This is a good idea but hard to implement. I don't think it would be OK to do a clean install first though.

**[Leo Breuss](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=lbreuss)** commented I couldn't agree more with Baptiste. One more thing: dependency:list is an alias to dependency:resolve. Would be nice, if the documentation would reflect that fact. ```java @Mojo(...

**[Oliver Drotbohm](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=oliver.gierke)** commented The lack of a parameter for artifact inclusion also means that you can't filter by version pattern (e.g. `-Dincludes=:::*-SNAPSHOT`).

**[Karl Heinz Marbaise](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=khmarbaise)** commented What about creating a patch / pull request for this ?

**[Elias Lundell](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=JIRAUSER307139)** commented I will be happy to create a PR to add this information. Some decisions must be made on how to represent this in the json format. Here...

**[Michael Osipov](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=michael-o)** commented For now, this is by design. See PR for reasons.

**[Elliotte Rusty Harold](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=elharo)** commented I concur. Let's just not write any colors to the file, full stop.