geyanggang opened a new pull request, #14592: URL: https://github.com/apache/gravitino/pull/14592
**Cherry-pick Information:** - Original commit: a5c13c93435d8afdd108b9b1beca2f69df45e30f (#14532) - Target branch: `branch-1.3` - Status: Conflicts resolved. Backports the Ranger 2.8.0 and ZooKeeper 3.8.8 upgrades and the removal of the outdated Avro shaded in `hadoop-client-runtime`. The conflicts came from test code of the catalog-specific owner role feature, which only exists on `main`: the helper methods in `RangerHiveIT` and `TestRangerHelper` are excluded, and `TestRangerImmutableModelDefaults` uses the branch-1.3 `RangerHelper.updatePolicyOwnerRole(policy, ownerRoleName)` API. `iceberg-rest-server-experiment`, which branch-1.3 does not have, is removed from the Avro strip list. All other files are identical to #14532. Validation: Spotless, `git diff --check` and `./gradlew build -x test` passed. Unit tests of the affected modules (authorization-ranger, catalog-fileset, catalog-lakehouse-iceberg, iceberg-rest-server, catalog-hive, hive-metastore-common, hive-metastore3-libs): 953 tests, all passed. Ranger Docker ITs: 107 tests and authorization-chain ITs, all passed. The built distribution ships `hadoop-client-runtime-3.3.6.jar` without the shaded Avro in all four `libs` directories, Ranger 2.8.0 in `authorizations/ranger/libs`, and ZooKeeper 3.8.8 in both Hive metastore libs; Trivy reports no CRITICAL finding from these components. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
