I'm going to make a new third party jar. Is there anything we need to do in it other than the avro update? https://github.com/apache/hadoop-thirdparty/pull/43
1. I don't want to rush to do a parquet or guava update unless there are CVEs. we had problems with parquet and java 8 last time. 2. what to number it? 1.3.1 or 1.4.0?