Thanks for Enrico's help, after importing the following dependency, it
works for me now.
```
<dependency>
    <groupId>org.apache.pulsar</groupId>
    <artifactId>pulsar</artifactId>
    <version>${pulsar.version}</version>
    <scope>import</scope>
    <type>pom</type>
</dependency>

```

+1 (binding)

- Build from source code, and run the license check
- Import the published jar into my project, and works for me
- Run pulsar-perf produce and consumer on the standalone cluster
- Run pulsar-io-lakehouse connector on the standalone cluster

Thanks,
Hang

Enrico Olivelli <eolive...@gmail.com> 于2022年6月28日周二 15:55写道:
>
> Hang,
>
> Il giorno lun 27 giu 2022 alle ore 03:55 Hang Chen
> <chenh...@apache.org> ha scritto:
> >
> > Hi Penghui,
> >      Thanks for your great work!
> >
> > I found two problems with this candidate, I'm not sure whether it will
> > block this release.
> >       - There are some CVEs in this candidate. Please refer to:
> > https://github.com/apache/pulsar/runs/6854904384?check_suite_focus=true
> >       - When I import `pulsar-broker` and `managed-ledger` into my
> > project, I found the project build failed with the following
> > exceptions.
>
> This is not a regression of 2.10.1, we should not change it.
> The solution is to import the Pulsar "BOM" (Bills of Materials) like
> we do in Pulsar Adapters
> https://github.com/apache/pulsar-adapters/blob/master/pom.xml#L163
>
> Enrico
>
> >
> > ```
> > [ERROR] Failed to execute goal on project test_pulsar_lib: Could not
> > resolve dependencies for project
> > org.example:test_pulsar_lib:jar:1.0-SNAPSHOT: Failed to collect
> > dependencies for org.example:test_pulsar_lib:jar:1.0-SNAPSHOT: Could
> > not resolve version conflict among
> > [org.apache.pulsar:pulsar-broker:jar:2.10.1 ->
> > org.apache.pulsar:pulsar-zookeeper-utils:jar:2.10.1 ->
> > org.apache.bookkeeper:stream-storage-server:jar:4.14.5 ->
> > org.apache.bookkeeper:stream-storage-java-client:jar:4.14.5 ->
> > io.grpc:grpc-core:jar:1.42.1,
> > org.apache.pulsar:pulsar-broker:jar:2.10.1 ->
> > org.apache.pulsar:pulsar-zookeeper-utils:jar:2.10.1 ->
> > org.apache.bookkeeper:stream-storage-server:jar:4.14.5 ->
> > org.apache.bookkeeper:stream-storage-java-client:jar:4.14.5 ->
> > io.grpc:grpc-testing:jar:1.42.1 ->
> > io.grpc:grpc-core:jar:[1.42.1,1.42.1],
> > org.apache.pulsar:pulsar-broker:jar:2.10.1 ->
> > org.apache.pulsar:pulsar-zookeeper-utils:jar:2.10.1 ->
> > io.grpc:grpc-all:jar:1.45.1 -> io.grpc:grpc-core:jar:[1.45.1,1.45.1],
> > org.apache.pulsar:pulsar-broker:jar:2.10.1 ->
> > org.apache.pulsar:pulsar-zookeeper-utils:jar:2.10.1 ->
> > io.grpc:grpc-all:jar:1.45.1 -> io.grpc:grpc-grpclb:jar:1.45.1 ->
> > io.grpc:grpc-core:jar:[1.45.1,1.45.1],
> > org.apache.pulsar:pulsar-broker:jar:2.10.1 ->
> > org.apache.pulsar:pulsar-zookeeper-utils:jar:2.10.1 ->
> > io.grpc:grpc-all:jar:1.45.1 -> io.grpc:grpc-netty:jar:1.45.1 ->
> > io.grpc:grpc-core:jar:[1.45.1,1.45.1],
> > org.apache.pulsar:pulsar-broker:jar:2.10.1 ->
> > org.apache.pulsar:pulsar-zookeeper-utils:jar:2.10.1 ->
> > io.grpc:grpc-all:jar:1.45.1 -> io.grpc:grpc-rls:jar:1.45.1 ->
> > io.grpc:grpc-core:jar:[1.45.1,1.45.1],
> > org.apache.pulsar:pulsar-broker:jar:2.10.1 ->
> > org.apache.pulsar:pulsar-zookeeper-utils:jar:2.10.1 ->
> > io.grpc:grpc-all:jar:1.45.1 -> io.grpc:grpc-services:jar:1.45.1 ->
> > io.grpc:grpc-core:jar:[1.45.1,1.45.1],
> > org.apache.pulsar:pulsar-broker:jar:2.10.1 ->
> > org.apache.pulsar:pulsar-zookeeper-utils:jar:2.10.1 ->
> > io.grpc:grpc-all:jar:1.45.1 -> io.grpc:grpc-xds:jar:1.45.1 ->
> > io.grpc:grpc-core:jar:1.45.1,
> > org.apache.pulsar:pulsar-broker:jar:2.10.1 ->
> > org.apache.pulsar:pulsar-zookeeper-utils:jar:2.10.1 ->
> > io.grpc:grpc-all:jar:1.45.1 -> io.grpc:grpc-xds:jar:1.45.1 ->
> > io.grpc:grpc-netty-shaded:jar:[1.45.1,1.45.1] ->
> > io.grpc:grpc-core:jar:[1.45.1,1.45.1],
> > org.apache.pulsar:managed-ledger:jar:2.10.1 ->
> > org.apache.pulsar:pulsar-metadata:jar:2.10.1 ->
> > io.etcd:jetcd-core:jar:0.5.11 -> io.etcd:jetcd-common:jar:0.5.11 ->
> > io.grpc:grpc-core:jar:1.41.0,
> > org.apache.pulsar:managed-ledger:jar:2.10.1 ->
> > org.apache.pulsar:pulsar-metadata:jar:2.10.1 ->
> > io.etcd:jetcd-core:jar:0.5.11 -> io.grpc:grpc-core:jar:1.41.0] ->
> > [Help 1]
> >
> > ```
> >
> > Thanks,
> > Hang
> >
> > PengHui Li <peng...@apache.org> 于2022年6月27日周一 08:51写道:
> > >
> > > Hi all,
> > >
> > > Thanks for all your verification for 2.10.1
> > >
> > > We currently have 2 (+1) bindings and 5 (+1) non-bindings.
> > > We need one more (+1) binding to unblock the 2.10.1 release.
> > > Please help validate.
> > >
> > > Thanks,
> > > Penghui
> > >
> > > On Thu, Jun 16, 2022 at 12:43 PM Shusuke Tsuda <shust...@yahoo-corp.jp>
> > > wrote:
> > >
> > > > +1 (non-binding)
> > > >
> > > > - verified checksums and signatures
> > > > - build from source
> > > > - verified pub/sub and java functions
> > > > - verified stateful functions
> > > >
> > > > Thanks,
> > > > Shusuke Tsuda
> > > >
> > > > -----Original Message-----
> > > > From: PengHui Li <peng...@apache.org>
> > > > Sent: Monday, June 13, 2022 8:43 PM
> > > > To: Dev <dev@pulsar.apache.org>
> > > > Subject: [VOTE] Pulsar Release 2.10.1 Candidate 1
> > > >
> > > > This is the first release candidate for Apache Pulsar 2.10.1
> > > >
> > > > It fixes the following issues:
> > > >
> > > > https://github.com/apache/pulsar/pulls?q=is%3Amerged+is%3Apr+label%3Arelease%2F2.10.1+
> > > >
> > > > *** Please download, test and vote on this release. This vote will stay
> > > > open for at least 72 hours ***
> > > >
> > > > Note that we are voting upon the source (tag), binaries are provided for
> > > > convenience.
> > > >
> > > > Source and binary files:
> > > >
> > > > https://jpn01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdist.apache.org%2Frepos%2Fdist%2Fdev%2Fpulsar%2Fpulsar-2.10.1-candidate-1%2F&amp;data=05%7C01%7Cshustsud%40yahoo-corp.jp%7C5ddcaa29fc224b6f09e608da4d31e6a8%7Ca208d369cd4e4f87b11998eaf31df2c3%7C1%7C0%7C637907173959452192%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=MlMhzU4P7GzFXx%2BNQ9DYh09Z4%2BJWzqWe%2BXbhO5pOGBo%3D&amp;reserved=0
> > > >
> > > > SHA-512 checksums:
> > > >
> > > >
> > > > 87045067cf123574b2b7d578f020efd177b0d9ff12a75d9f738e135cde35a034000c03e21cc8a264a6ef9e2b1df2c4493ffa3b9170b0f368d7424f1160df38cb
> > > >  ./apache-pulsar-2.10.1-bin.tar.gz
> > > >
> > > >
> > > > 19c078f65b9105728adda3926a9a1527d6498f0e2337d37497a6d965a38acf94e217e58939bc5b0a8b8166511ae9ee176ee3d0c764d4777e285b7bcaeb2731e1
> > > >  ./apache-pulsar-2.10.1-src.tar.gz
> > > >
> > > > Maven staging repo:
> > > >
> > > > https://jpn01.safelinks.protection.outlook.com/?url=https%3A%2F%2Frepository.apache.org%2Fcontent%2Frepositories%2Forgapachepulsar-1156%2F&amp;data=05%7C01%7Cshustsud%40yahoo-corp.jp%7C5ddcaa29fc224b6f09e608da4d31e6a8%7Ca208d369cd4e4f87b11998eaf31df2c3%7C1%7C0%7C637907173959452192%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=7881wtcvkkKTYpcJUDaaP1kD7L25hmJyWYnAsa7H1iw%3D&amp;reserved=0
> > > >
> > > > The tag to be voted upon:
> > > > v2.10.1-candidate-1 (0702b51ce09cc99044f4110e6bf98e82a0e86283)
> > > > https://github.com/apache/pulsar/releases/tag/v2.10.1-candidate-1
> > > >
> > > > Pulsar's KEYS file containing PGP keys we use to sign the release:
> > > >
> > > > https://jpn01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdist.apache.org%2Frepos%2Fdist%2Fdev%2Fpulsar%2FKEYS&amp;data=05%7C01%7Cshustsud%40yahoo-corp.jp%7C5ddcaa29fc224b6f09e608da4d31e6a8%7Ca208d369cd4e4f87b11998eaf31df2c3%7C1%7C0%7C637907173959452192%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=PTTqkrOKzXpW9I14aQRcSHl1swE8tCua%2Bo%2BTIkP%2F8jM%3D&amp;reserved=0
> > > >
> > > > Docker images:
> > > >
> > > >
> > > > https://jpn01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fhub.docker.com%2Flayers%2F233293315%2Flph890127%2Fpulsar%2F2.10.1-rc1%2Fimages%2Fsha256-4a952b3c662b94247ffc4ff17be16ef176c293baaf346db13a095970f43adfd6%3Fcontext%3Drepo&amp;data=05%7C01%7Cshustsud%40yahoo-corp.jp%7C5ddcaa29fc224b6f09e608da4d31e6a8%7Ca208d369cd4e4f87b11998eaf31df2c3%7C1%7C0%7C637907173959452192%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=Td0nWB8YQIgPrC0252vtyyEqokUQLCTZ9MYJbIxuhQU%3D&amp;reserved=0
> > > >
> > > >
> > > > https://jpn01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fhub.docker.com%2Flayers%2F233303469%2Flph890127%2Fpulsar-all%2F2.10.1-rc1%2Fimages%2Fsha256-ac8180f4ba796291e961581821a1318437e49b0fa684597f5b67265a502822ee%3Fcontext%3Drepo&amp;data=05%7C01%7Cshustsud%40yahoo-corp.jp%7C5ddcaa29fc224b6f09e608da4d31e6a8%7Ca208d369cd4e4f87b11998eaf31df2c3%7C1%7C0%7C637907173959452192%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=7kiKT%2BK7T%2BkJSTSAER%2BF8aFyLTXHKrjEMa%2BP0AOxiSk%3D&amp;reserved=0
> > > >
> > > > Please download the source package, and follow the Release Candidate
> > > > Validation[1] to validate the release
> > > >
> > > > [1] https://github.com/apache/pulsar/wiki/Release-Candidate-Validation
> > > >
> > > > Thanks,
> > > > Penghui
> > > >

Reply via email to