[ 
https://issues.apache.org/jira/browse/HBASE-28433?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Nihal Jain updated HBASE-28433:
-------------------------------
    Hadoop Flags: Reviewed
    Release Note: With this change we have stopped bundling all hbase/hadoop 
test dependencies from lib directory of hbase assembly tarball.
      Resolution: Fixed
          Status: Resolved  (was: Patch Available)

> Modify the assembly to not include test jars and their transitive dependencies
> ------------------------------------------------------------------------------
>
>                 Key: HBASE-28433
>                 URL: https://issues.apache.org/jira/browse/HBASE-28433
>             Project: HBase
>          Issue Type: Sub-task
>            Reporter: Nihal Jain
>            Assignee: Nihal Jain
>            Priority: Major
>              Labels: pull-request-available
>
> This task aims to modify the HBase assembly to exclude test jars and their 
> transitive dependencies.
> Currently, our assembly includes test jars and test dependencies, which adds 
> unnecessary bloat to the assembly and classpath. This not only increases the 
> distribution size but also potentially introduces CVE-prone JARs into the 
> binary assemblies.
> The objective of this task is to modify the build and assembly process to 
> exclude these test jars and their dependencies. This will result in a leaner, 
> more secure assembly with a faster startup time.
> CC:  [~stoty], [~zhangduo], [~ndimiduk], [~bbeaudreault]



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to