[ 
https://issues.apache.org/jira/browse/HBASE-28022?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Duo Zhang resolved HBASE-28022.
-------------------------------
    Fix Version/s: 2.6.0
                   2.4.18
                   2.5.6
                   3.0.0-beta-1
     Hadoop Flags: Reviewed
       Resolution: Fixed

Pushed to all active branches.

Thanks [~sunxin] and [~GeorryHuang] for reviewing!

> Remove netty 3 dependency in the pom file for hbase-endpoint
> ------------------------------------------------------------
>
>                 Key: HBASE-28022
>                 URL: https://issues.apache.org/jira/browse/HBASE-28022
>             Project: HBase
>          Issue Type: Task
>          Components: dependencies, pom, security
>            Reporter: Duo Zhang
>            Assignee: Duo Zhang
>            Priority: Major
>             Fix For: 2.6.0, 2.4.18, 2.5.6, 3.0.0-beta-1
>
>
> We have this in the hadoop-3.0 profile, which is not necessary and will 
> trigger  dependabot warnings about security problem. Hadoop mini cluster will 
> pull in the necessary dependencies.
> {code}
>         <!-- Hadoop needs Netty 3.x at test scope for the minicluster -->
>         <dependency>
>           <groupId>io.netty</groupId>
>           <artifactId>netty</artifactId>
>           <version>3.6.2.Final</version>
>           <scope>test</scope>
>         </dependency>
> {code}



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to