geyanggang commented on code in PR #10789:
URL: https://github.com/apache/gravitino/pull/10789#discussion_r3152495194
##########
trino-connector/integration-test/build.gradle.kts:
##########
@@ -41,13 +41,19 @@ dependencies {
testImplementation(libs.bundles.jetty)
testImplementation(libs.bundles.log4j)
testImplementation(libs.commons.cli)
- testImplementation(libs.hadoop2.common) {
+ testImplementation(libs.hadoop3.common) {
exclude("*")
Review Comment:
I tried selective excludes but `hadoop-common`'s CVE deps (Jersey 1.x,
jettison, reload4j, etc.) also come in through deep transitive chains
(hadoop-auth → zookeeper → ...), which Gradle's per-dependency exclude can't
fully block. Reverted to `exclude("*")` + explicit add-back for a clean
classpath. This is consistent with all other modules (`catalog-hive`, `hudi,`
`flink`, `hive-metastore-common`).
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
