[
https://issues.apache.org/jira/browse/CASSANDRA-17750?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17584430#comment-17584430
]
David Capwell commented on CASSANDRA-17750:
-------------------------------------------
build was fine, but it now conflicts, [~aratnofsky] can you resolve?
Also see that build.xml includes version info and this wasn't ported to the pom
{code}
<!-- https://www.eclemma.org/jacoco/ -->
<property name="jacoco.export.dir" value="${build.dir}/jacoco/" />
<property name="jacoco.partials.dir" value="${jacoco.export.dir}/partials"
/>
<property name="jacoco.partialexecfile"
value="${jacoco.partials.dir}/partial.exec" />
<property name="jacoco.finalexecfile"
value="${jacoco.export.dir}/jacoco.exec" />
<property name="jacoco.version" value="0.8.6"/>
<property name="byteman.version" value="4.0.6"/>
<property name="jamm.version" value="0.3.2"/>
<property name="ecj.version" value="4.6.1"/>
<property name="ohc.version" value="0.5.1"/>
<property name="asm.version" value="9.1"/>
<property name="allocation-instrumenter.version" value="3.1.0"/>
<property name="bytebuddy.version" value="1.10.10"/>
<property name="jflex.version" value="1.8.2"/>
<!-- https://mvnrepository.com/artifact/net.openhft/chronicle-bom/1.16.23
-->
<property name="chronicle-queue.version" value="5.20.123" />
<property name="chronicle-core.version" value="2.20.126" />
<property name="chronicle-bytes.version" value="2.20.111" />
<property name="chronicle-wire.version" value="2.20.117" />
<property name="chronicle-threads.version" value="2.20.111" />
<property name="dtest-api.version" value="0.0.13" />
{code}
> Remove dependency on Maven Ant Tasks
> ------------------------------------
>
> Key: CASSANDRA-17750
> URL: https://issues.apache.org/jira/browse/CASSANDRA-17750
> Project: Cassandra
> Issue Type: Improvement
> Components: Build, Dependencies, Packaging
> Reporter: Abe Ratnofsky
> Assignee: Abe Ratnofsky
> Priority: Normal
> Fix For: 4.x
>
> Time Spent: 10h 10m
> Remaining Estimate: 0h
>
> Apache Cassandra depends on Maven Ant Tasks (MAT) during build, for declaring
> dependencies and generating POM files from within build.xml. MAT has long
> been retired (no commits since maintenance in 2015), has registered CVEs in
> dependencies (CVE-2017-1000487), and encourages migration to its successor,
> Maven Artifact Resolver Ant Tasks (MARAT).
> As part of CASSANDRA-16391
> <https://issues.apache.org/jira/browse/CASSANDRA-16391>, mck migrated
> dependency resolution to MARAT, but MAT is still included in our build for
> generating POMs since MARAT does not have an alternative to the writepom task
> provided by MAT. I have a patch ready that removes MAT completely, with a
> workaround for POM generation.
> I am not advocating for any kind of migration away from Ant to an alternative
> like Gradle or Maven, just to be extra clear.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
