yuqi1129 commented on code in PR #10585:
URL: https://github.com/apache/gravitino/pull/10585#discussion_r3022193977


##########
catalogs/hive-metastore3-libs/build.gradle.kts:
##########
@@ -27,6 +27,18 @@ plugins {
 
 // Note: exclusion lists here are intentionally kept in sync with 
hive-metastore2-libs/build.gradle.kts.
 // Guava and Logback are excluded because they are provided by the Gravitino 
runtime classpath.
+
+// Force jackson-databind to the project-wide version to replace the outdated 
transitive version
+// pulled in via hive-metastore → hive-serde → hive-common.
+val jacksonVersion = libs.versions.jackson.get()
+configurations.all {
+  resolutionStrategy.force(
+    "com.fasterxml.jackson.core:jackson-databind:$jacksonVersion",
+    "com.fasterxml.jackson.core:jackson-core:$jacksonVersion",
+    "com.fasterxml.jackson.core:jackson-annotations:$jacksonVersion"

Review Comment:
   @geyanggang 
   What's the version of Jackson used globally and Hive3? We need to judge 
these two versions to decide if it's safe.



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to