FrankChen021 commented on PR #15924: URL: https://github.com/apache/druid/pull/15924#issuecomment-1958537246
Actually we don't expect such large change over such dependency upgrade. From testng 7.6.0, [the minimum JDK 11 is required](https://groups.google.com/g/testng-users/c/BAFB1vk-kok), but druid still runs tests on JDK 8 to make sure it's compatible with JDK8. From the [maven repository](https://mvnrepository.com/artifact/org.testng/testng) we can see that 7.5.1 is the latest version that supports JDK8 while it has no vulnerabilty problem, so we can upgrade the dependency to this version and pin it to this specific version, here's an example: https://github.com/apache/druid/pull/11453/files -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
