This is an automated email from the ASF dual-hosted git repository.
luoyuxia pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/fluss.git
The following commit(s) were added to refs/heads/main by this push:
new 800f0dcf1 [fs] Add jetty exclusion to fluss-fs-azure (#3508)
800f0dcf1 is described below
commit 800f0dcf148fdbfc59d714cf9c9f51b8af860b63
Author: Muhammet Orazov <[email protected]>
AuthorDate: Wed Jun 24 05:54:28 2026 +0200
[fs] Add jetty exclusion to fluss-fs-azure (#3508)
---
fluss-filesystems/fluss-fs-azure/pom.xml | 12 ++++++++++++
.../fluss-fs-azure/src/main/resources/META-INF/NOTICE | 9 +--------
2 files changed, 13 insertions(+), 8 deletions(-)
diff --git a/fluss-filesystems/fluss-fs-azure/pom.xml
b/fluss-filesystems/fluss-fs-azure/pom.xml
index f6de978c1..7b1030312 100644
--- a/fluss-filesystems/fluss-fs-azure/pom.xml
+++ b/fluss-filesystems/fluss-fs-azure/pom.xml
@@ -80,6 +80,18 @@
<groupId>org.slf4j</groupId>
<artifactId>slf4j-reload4j</artifactId>
</exclusion>
+ <!-- jetty-util(-ajax) is pulled in transitively by
hadoop-azure but is only
+ used by Hadoop's web UI server and the unused WASB native
store; Fluss uses
+ ABFS. Excluded to keep them off the bundled FS jar (also
drops jetty 9.x
+ CVEs as a side benefit). -->
+ <exclusion>
+ <groupId>org.eclipse.jetty</groupId>
+ <artifactId>jetty-util</artifactId>
+ </exclusion>
+ <exclusion>
+ <groupId>org.eclipse.jetty</groupId>
+ <artifactId>jetty-util-ajax</artifactId>
+ </exclusion>
</exclusions>
</dependency>
<dependency>
diff --git
a/fluss-filesystems/fluss-fs-azure/src/main/resources/META-INF/NOTICE
b/fluss-filesystems/fluss-fs-azure/src/main/resources/META-INF/NOTICE
index c9c9f44f6..90833076c 100644
--- a/fluss-filesystems/fluss-fs-azure/src/main/resources/META-INF/NOTICE
+++ b/fluss-filesystems/fluss-fs-azure/src/main/resources/META-INF/NOTICE
@@ -72,11 +72,4 @@ This project bundles the following dependencies under the
MIT License (https://o
- org.checkerframework:checker-qual:2.5.2
- org.codehaus.mojo:animal-sniffer-annotations:1.17
-- org.bouncycastle:bcprov-jdk15on:1.70
-
-This project bundles the following dependencies under the Eclipse Public
License 2.0 and Apache License 2.0 (dual license). See bundled license files
for details.
-- EPL-2.0: https://www.eclipse.org/legal/epl-2.0/
-- Apache-2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
-
-- org.eclipse.jetty:jetty-util-ajax:9.4.43.v20210629
-- org.eclipse.jetty:jetty-util:9.4.43.v20210629
\ No newline at end of file
+- org.bouncycastle:bcprov-jdk15on:1.70
\ No newline at end of file
