michaeljmarshall commented on pull request #12119: URL: https://github.com/apache/pulsar/pull/12119#issuecomment-926096050
@eolivelli - makes sense to me. I am fine merging this before we cut branch-2.9. Regarding the comment in the pom.xml, which I removed in my most recent commit, I want to make sure that adding the bouncy castle dependency to the server pom.xml is the correct solution. The discovery service was the dependency forcing our version of bouncy castle to 1.69. Without the discovery service module as a dependency, the `grpc-xds` dependency determined out bouncy castle version, which would have been 1.61. Since we need the `grpc-xds` dependency, and we want version 1.69 for security reasons, I added the dependency to the server's pom.xml. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
