xiangfu0 commented on code in PR #20112:
URL: https://github.com/apache/pinot/pull/20112#discussion_r4476934245
##########
pinot-tools/pom.xml:
##########
@@ -99,7 +99,7 @@
</dependency>
<dependency>
<groupId>org.apache.pinot</groupId>
- <artifactId>pinot-kafka-3.0</artifactId>
+ <artifactId>pinot-kafka-4.0</artifactId>
Review Comment:
Fixed in 958e1cab6492cdfbadc0408a616a1b79a3295804: jose4j 0.9.6 is now an
explicit Kafka 4 runtime dependency, managed through a root POM property. The
isolated packaged-runtime probe reproduces the missing VerificationKeyResolver
before the fix; with the rebuilt plugin it initializes the real OAuth callback
and validates a synthetic JWT. Only the plugin, its normal packaged Jackson
host dependency, and SLF4J are present—no test-kit or external jose4j JAR. All
31 focused tests and scoped style/license checks pass. The OAuth URL allowlist
remains enforced.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
