[ https://issues.apache.org/jira/browse/CASSANDRA-18743?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17755246#comment-17755246 ]
Abe Ratnofsky commented on CASSANDRA-18743: ------------------------------------------- Just posted to the list for consensus on a 5.1 removal; let's wait on merging the removal on trunk til that consensus is reached. [~e.dimitrova] I don't see any usage for commons-codec - I'm supportive of removing the dependency, but is there any requirement to do so as part of this ticket? I was thinking it would be good to have a separate ticket to audit dependencies before 5.0, so we can do any deprecations necessary as part of upgrades / workarounds. > Remove dependency on archived project metrics-reporter-config > ------------------------------------------------------------- > > Key: CASSANDRA-18743 > URL: https://issues.apache.org/jira/browse/CASSANDRA-18743 > Project: Cassandra > Issue Type: Improvement > Components: Local/Config > Reporter: Abe Ratnofsky > Assignee: Maxim Muzafarov > Priority: Normal > Fix For: 5.0, 5.x > > Time Spent: 20m > Remaining Estimate: 0h > > metrics-reporter-config has been archived for over 3 years, and has received > no updates in nearly 6 years: > https://github.com/addthis/metrics-reporter-config > metrics-reporter-config processes YAML unsafely: > https://github.com/addthis/metrics-reporter-config/blob/master/reporter-config-base/src/main/java/com/addthis/metrics/reporter/config/AbstractReporterConfig.java#L39C34-L39C45 > This is related to CASSANDRA-18614, which is focused on migrating to safe > YAML processing for the main configuration files. -- This message was sent by Atlassian Jira (v8.20.10#820010) --------------------------------------------------------------------- To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org For additional commands, e-mail: commits-h...@cassandra.apache.org