Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[APPCLD-30615] Various library upgrades for snyk scan #7

Open
wants to merge 40 commits into
base: branch-2.3.9
Choose a base branch
from

Conversation

MasterDDT
Copy link
Collaborator

@MasterDDT MasterDDT commented Mar 20, 2025

Library upgrades from snyk_aiq_repos_critical_only.xlsx:

  • postgressql driver
  • avro (now matches the one we use in Flame)
  • jacksonxml (almost matches Flame)
  • hadoop (same major 2, higher minor...but we should match Flame's Hadoop 3 at some point)
  • log4j 2.x
  • log4j 1.x -> reload4j 1.x
  • slf4j

Test Notes

$> jenv use <any java 8>

$> mvn versions:set -DgenerateBackupPoms=false // update version+1
$> mvn clean install -DskipTests

// rm -rf ~/.m2/repository if having build problems

$> mvn test

// rerun single module with -pl <projName> or resume with -rf <projName>
// rerun single test with -pl <projName> -Dtest=TestBlahSuite

Deploy Notes

$> mvn deploy -DskipTests -Pdist

@MasterDDT MasterDDT changed the title [APPCLD-0000] Various library upgrades for snyk scan [APPCLD-30615] Various library upgrades for snyk scan Mar 24, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant