[
https://issues.apache.org/jira/browse/CASSJAVA-52?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Bret McGuire updated CASSJAVA-52:
---------------------------------
Description:
[java-driver-shaded-guava|https://github.com/datastax/java-driver-shaded-guava]
is a separate repo (previously maintained by DataStax) which created a separate
artifact containing the shaded version of Guava used by cassandra-java-driver.
This artifact should be brought into the driver proper as a submodule.
Note that this will require some modifications to the build process to build
and reference new versions of the shaded JAR.
Also note that the objective of this ticket is to bring in something like
java-driver-shaded-guava which provides the current version of Guava (25.1).
There are known security issues with this Guava version and we'll address that
via an upgrade process but we need to get the lib into the repo first. Guava
upgrades have historically been fairly complicated so let's get the lib in
first and _then_ look at upgrading it.
was:
[java-driver-shaded-guava|https://github.com/datastax/java-driver-shaded-guava]
is a separate repo (previously maintained by DataStax) which created a separate
artifact containing the shaded version of Guava used by cassandra-java-driver.
This artifact should be brought into the driver proper as a submodule.
Note that this will require some modifications to the build process to build
and reference new versions of the shaded JAR.
> Bring java-driver-shaded-guava into the repo as a submodule
> -----------------------------------------------------------
>
> Key: CASSJAVA-52
> URL: https://issues.apache.org/jira/browse/CASSJAVA-52
> Project: Apache Cassandra Java driver
> Issue Type: Task
> Reporter: Bret McGuire
> Priority: Normal
>
> [java-driver-shaded-guava|https://github.com/datastax/java-driver-shaded-guava]
> is a separate repo (previously maintained by DataStax) which created a
> separate artifact containing the shaded version of Guava used by
> cassandra-java-driver. This artifact should be brought into the driver
> proper as a submodule.
>
> Note that this will require some modifications to the build process to build
> and reference new versions of the shaded JAR.
>
> Also note that the objective of this ticket is to bring in something like
> java-driver-shaded-guava which provides the current version of Guava (25.1).
> There are known security issues with this Guava version and we'll address
> that via an upgrade process but we need to get the lib into the repo first.
> Guava upgrades have historically been fairly complicated so let's get the lib
> in first and _then_ look at upgrading it.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
