[
https://issues.apache.org/jira/browse/CASSANDRA-17750?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17784234#comment-17784234
]
Ekaterina Dimitrova edited comment on CASSANDRA-17750 at 11/8/23 11:53 PM:
---------------------------------------------------------------------------
I squashed the commits
[here|https://github.com/apache/cassandra-website/commit/190b21414a66456d90a333d6c4cf2b12ea55c6e9],
green CI
[here|https://github.com/ekaterinadimitrova2/cassandra-website/actions/runs/6805338674]
[~mck] I noticed a staged change but asf-staging is not merged yet in asf-site,
despite that the ticket CASSANDRA-18899 is already closed, so I did not push
anything on top of it as I did not know its exact status.
Please feel free to push this one with the other one when ready, thank you.
was (Author: e.dimitrova):
I squashed the commits
[here|https://github.com/apache/cassandra-website/commit/190b21414a66456d90a333d6c4cf2b12ea55c6e9],
green CI
[here|https://github.com/ekaterinadimitrova2/cassandra-website/actions/runs/6805338674]
[~mck] I noticed a staged change that but asf-staging is not merged yet in
asf-site, despite that the ticket CASSANDRA-18899 is already closed, so I did
not push anything on top of it as I did not know its exact status.
Please feel free to push this one with the other one when ready, thank you.
> Remove dependency on Maven Ant Tasks
> ------------------------------------
>
> Key: CASSANDRA-17750
> URL: https://issues.apache.org/jira/browse/CASSANDRA-17750
> Project: Cassandra
> Issue Type: Improvement
> Components: Build, Dependencies, Packaging
> Reporter: Abe Ratnofsky
> Assignee: Abe Ratnofsky
> Priority: Normal
> Labels: pull-request-available
> Fix For: 5.0, 5.0-alpha1
>
> Time Spent: 10h 50m
> Remaining Estimate: 0h
>
> Apache Cassandra depends on Maven Ant Tasks (MAT) during build, for declaring
> dependencies and generating POM files from within build.xml. MAT has long
> been retired (no commits since maintenance in 2015), has registered CVEs in
> dependencies (CVE-2017-1000487), and encourages migration to its successor,
> Maven Artifact Resolver Ant Tasks (MARAT).
> As part of CASSANDRA-16391
> <https://issues.apache.org/jira/browse/CASSANDRA-16391>, mck migrated
> dependency resolution to MARAT, but MAT is still included in our build for
> generating POMs since MARAT does not have an alternative to the writepom task
> provided by MAT. I have a patch ready that removes MAT completely, with a
> workaround for POM generation.
> I am not advocating for any kind of migration away from Ant to an alternative
> like Gradle or Maven, just to be extra clear.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
