geyanggang opened a new issue, #10529: URL: https://github.com/apache/gravitino/issues/10529
### What would you like to be improved? The project uses Jetty 9.4.51, which is outdated. Additionally, hive-metastore3-libs pulls in Jetty 9.3.20 as a transitive dependency from hadoop-common:3.1.0, which is not used at runtime. ### How should we improve? 1. Upgrade the Jetty version in `libs.versions.toml` from 9.4.51.v20230217 to 9.4.58.v20250814. 2. Exclude org.eclipse.jetty from both hadoop2-common and hive3-metastore in `build.gradle.kts`. Both excludes are needed because Gradle resolves hadoop-common to 3.1.0 (overridden by hive3-metastore's transitive dependency), and 3.1.0 directly depends on Jetty. The Gravitino hive catalog uses HiveClientClassLoader with classloader isolation where Hadoop classes are shared from the base classloader (which already excludes Jetty), so these Jetty jars are never loaded at runtime. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
