(gravitino) branch main updated: [#11055] improvement(deps): Upgrade libthrift from 0.9.3 to 0.12.0 in hive-metastore-libs (#11056)

[diqiu50]

This is an automated email from the ASF dual-hosted git repository.

diqiu50 pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/gravitino.git


The following commit(s) were added to refs/heads/main by this push:
     new c3a24b5470 [#11055] improvement(deps): Upgrade libthrift from 0.9.3 to 
0.12.0 in hive-metastore-libs (#11056)
c3a24b5470 is described below

commit c3a24b5470a99e806ad2543d4bebc25482290ca4
Author: geyanggang <geyangg...@qq.com>
AuthorDate: Wed May 13 11:20:48 2026 +0800

    [#11055] improvement(deps): Upgrade libthrift from 0.9.3 to 0.12.0 in 
hive-metastore-libs (#11056)
    
    ### What changes were proposed in this pull request?
    
    Add `constraints { implementation(libs.thrift) }` in
    `hive-metastore2-libs` and `hive-metastore3-libs` to upgrade the
    transitive libthrift from 0.9.3 to 0.12.0.
    
    
    ### Why are the changes needed?
    
    libthrift 0.9.3 is pulled transitively by Hive Metastore and has known
    issues in SASL negotiation and large message handling. Version 0.12.0
    fixes these while maintaining binary compatibility with Hive 2.x/3.x.
    
    Versions >= 0.14.0 relocate `TFramedTransport` to a different package,
    breaking Hive compatibility, so 0.12.0 is the highest safe version.
    
    Fix: #11055
    
    ### Does this PR introduce _any_ user-facing change?
    
    No. The Thrift wire protocol is backward-compatible.
    
    ### How was this patch tested?
    
    - `CatalogHive2IT` integration test — passes
    - `CatalogHive3IT` integration test — passes
    - `IcebergRESTHiveCatalogIT` integration test — passes
---
 catalogs/hive-metastore2-libs/build.gradle.kts | 5 +++++
 catalogs/hive-metastore3-libs/build.gradle.kts | 5 +++++
 2 files changed, 10 insertions(+)

diff --git a/catalogs/hive-metastore2-libs/build.gradle.kts 
b/catalogs/hive-metastore2-libs/build.gradle.kts
index 1325711fe7..57214e8148 100644
--- a/catalogs/hive-metastore2-libs/build.gradle.kts
+++ b/catalogs/hive-metastore2-libs/build.gradle.kts
@@ -29,6 +29,11 @@ plugins {
 // Guava and Logback are excluded because they are provided by the Gravitino 
runtime classpath.
 
 dependencies {
+  // Force libthrift upgrade from the outdated 0.9.3 pulled by Hive Metastore 
transitive deps
+  constraints {
+    implementation(libs.thrift)
+  }
+
   implementation(libs.hadoop3.common) {
     exclude(group = "ch.qos.logback")
     exclude(group = "ch.qos.reload4j")
diff --git a/catalogs/hive-metastore3-libs/build.gradle.kts 
b/catalogs/hive-metastore3-libs/build.gradle.kts
index 21d756190d..212f435986 100644
--- a/catalogs/hive-metastore3-libs/build.gradle.kts
+++ b/catalogs/hive-metastore3-libs/build.gradle.kts
@@ -29,6 +29,11 @@ plugins {
 // Guava and Logback are excluded because they are provided by the Gravitino 
runtime classpath.
 
 dependencies {
+  // Force libthrift upgrade from the outdated 0.9.3 pulled by Hive Metastore 
transitive deps
+  constraints {
+    implementation(libs.thrift)
+  }
+
   implementation(libs.hadoop3.common) {
     exclude(group = "ch.qos.logback")
     exclude(group = "ch.qos.reload4j")