+1 for the hadoop-thirdparty 1.6.0 release as it got covered with CVE fixes.
Regards, Uma On Thu, Oct 29, 2026 at 3:14 PM Wei-Chiu Chuang <[email protected]> wrote: > Hi Steve, > > I see that hadoop-thirdparty 1.6.0 was never released. I'd like to pick up > the slack. Reason being there's a new CVE in Guava, and we bumped the Guava > version. Would like to include the updated Guava in hadoop-thirdparty > 1.6.0. > > > > On Tue, Mar 31, 2026 at 1:02 PM Steve Loughran <[email protected]> > wrote: > > > FYI, I'm doing a release of hadoop-thirdparty-1.6.0 targeting 3.4.4 and > > 3.5.1 > > https://issues.apache.org/jira/browse/HADOOP-19840 > > > > I'm trying to get github cli + claude to do all the work with the release > > support module giving it most of what is needed. It's currently making > > change to the create release docker image so I will see how it goes. > > > > I can see it doing a heuristic-driven search process for a solution right > > now because it hasn't read the comments in the docker file about python > > library versions > > >
