[ 
https://issues.apache.org/jira/browse/HADOOP-19680?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18018725#comment-18018725
 ] 

ASF GitHub Bot commented on HADOOP-19680:
-----------------------------------------

stoty opened a new pull request, #7940:
URL: https://github.com/apache/hadoop/pull/7940

   same as the current thirdparty Guava version
   
   ### Description of PR
   
   Guava has been already updated to 32.0.1 in hadoop-thirdparty.
   However, Hadoop also dependency manages the non-thirdparty guava version 
(coming from dependencies), which is still at 27.0-jre , showing up on static 
scanners.
   
   Sync the non-thirdparty Guava version to the thirdparty one.
   
   ### How was this patch tested?
   
   Test suite in CI (on this PR)
   
   ### For code changes:
   
   - [X] Does the title or this PR starts with the corresponding JIRA issue id 
(e.g. 'HADOOP-17799. Your PR title ...')?
   - [ ] Object storage: have the integration tests been executed and the 
endpoint declared according to the connector-specific documentation?
   - [ ] If adding new dependencies to the code, are these dependencies 
licensed in a way that is compatible for inclusion under [ASF 
2.0](http://www.apache.org/legal/resolved.html#category-a)?
   - [ ] If applicable, have you updated the `LICENSE`, `LICENSE-binary`, 
`NOTICE-binary` files?
   
   




> Update non-thirdparty Guava version to 32.0.1
> ---------------------------------------------
>
>                 Key: HADOOP-19680
>                 URL: https://issues.apache.org/jira/browse/HADOOP-19680
>             Project: Hadoop Common
>          Issue Type: Improvement
>    Affects Versions: 3.5.0, 3.4.2
>            Reporter: Istvan Toth
>            Assignee: Istvan Toth
>            Priority: Major
>
> Guava has been already updated to 32.0.1 in hadoop-thirdparty.
> However, Hadoop also dependency manages the non-thirdparty guava version 
> (coming from dependencies), which is still at 27.0-jre , showing up on static 
> scanners.
> Sync the non-thirdparty Guava version to the thirdparty one.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to