This is an automated email from the ASF dual-hosted git repository.
jerryshao pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/gravitino.git
The following commit(s) were added to refs/heads/main by this push:
new f6f93b2ebe [#11165] improvement(deps): Force commons-beanutils to
1.11.0 globally for all subprojects (#11271)
f6f93b2ebe is described below
commit f6f93b2ebe5d03b19dbc19cbb1c5ce339bae5fd8
Author: geyanggang <[email protected]>
AuthorDate: Thu May 28 15:51:00 2026 +0800
[#11165] improvement(deps): Force commons-beanutils to 1.11.0 globally for
all subprojects (#11271)
### What changes were proposed in this pull request?
Add a global `resolutionStrategy.force` in the root `build.gradle.kts`
to
upgrade transitive `commons-beanutils` from 1.9.4 (and older) to 1.11.0
across all subprojects.
The previous fix (#11166) only applied `constraints` to
`hive-metastore2-libs`
and `hive-metastore3-libs`. Other modules (catalog-hive,
catalog-fileset,
catalog-lakehouse-paimon, catalog-lakehouse-generic, client-java,
filesystem-hadoop3, flink-connector, maintenance:jobs, etc.) still
resolved
the outdated transitive version.
### Why are the changes needed?
Multiple modules still pulled `commons-beanutils:1.9.4` (or older) as a
transitive dependency from Hadoop, Hive, Spark, and Flink. The
`resolutionStrategy.force` approach ensures all configurations in all
subprojects resolve to 1.11.0, regardless of what version is requested
transitively.
Fix: #11165
### Does this PR introduce _any_ user-facing change?
No.
### How was this patch tested?
- Verified all modules resolve `commons-beanutils` to 1.11.0 via
`./gradlew <module>:dependencies`
- Full compilation: `./gradlew build -x test`
- Unit tests: `./gradlew test -PskipITs`
---
build.gradle.kts | 8 ++++++++
1 file changed, 8 insertions(+)
diff --git a/build.gradle.kts b/build.gradle.kts
index d630488f12..4693b29da3 100644
--- a/build.gradle.kts
+++ b/build.gradle.kts
@@ -313,6 +313,8 @@ fun excludePackagesForSparkConnector(project: Project) {
}
}
+val commonsBeanutilsVersion: String = libs.versions.commons.beanutils.get()
+
subprojects {
// Gravitino Python client project didn't need to apply the java plugin
if (project.name == "client-python") {
@@ -329,6 +331,12 @@ subprojects {
apply(plugin = "maven-publish")
apply(plugin = "java")
+ // Force upgrade commons-beanutils for all subprojects to resolve outdated
transitive versions
+ // pulled by Hadoop, Hive, Spark, Flink, etc.
+ configurations.all {
+
resolutionStrategy.force("commons-beanutils:commons-beanutils:$commonsBeanutilsVersion")
+ }
+
repositories {
mavenCentral()
mavenLocal()
