Arnout Engelen
Arnout Engelen
For #1118
The discussion on whether or not to require Java 11 for building Pekko is at https://lists.apache.org/thread/ro3rz6s8mvj7j9dp39oszf7rnr6hn19d This ticket is meant to collect the tasks/opportunities that are unlocked once we make...
graphviz produces errors during the generation of embedded svgs in the 2.12 scaladocs. you can reproduce this with e.g. `sbt ++2.12 persistence-tck/doc`. diagnosing by adding `-diagrams-debug` to the scaladoc options...
On https://pekko.apache.org/docs/pekko/current/release-notes/index.html, the anchor `#bug-fixes` appears multiple times, so all those headings link to the first one. I tried the markdown syntax `{#custom-id}` but apparently that doesn't work for the...
As that's what we're using to release as well
We currently still use `sun.misc.Unsafe` in a number of places. As long-term these interfaces are supposed to go away, it would be nice to try and stop using them.
When the tool reports a security issue in a dependency, a reasonable question a user may have is: 'where does this dependency come from?' This can typically by easily answered...
Refers to a different 'fuse' product, we should probably #81
Certain CPE vendors (such as `apple` in case of #77 or `redhat`) or full CPEs (in case of `type74:ed`) commonly refer to vendor-specific versions or products. We could selectively exclude...
The package is https://github.com/westes/flex , but the advisory is for https://flex.apache.org/ (cpe `cpe:2.3:a:apache:flex:*:*:*:*:*:*:*:*`) Here, looking at the pname seems insufficient to reliably match the package. Possible solution: #136