On Wed, 5 Mar 2025 at 20:20, PJ Fanning <fannin...@apache.org> wrote:
> Due to the jar name change for protobuf that is merged but unreleased, > I think that 1.4.0 is better. > https://github.com/apache/hadoop-thirdparty/pull/38 OK > > > Is there a reason to not use the pre-existing Avro PR which seems to > have the same changes? > https://github.com/apache/hadoop-thirdparty/pull/40 That's easy -I didn't know about it. will merge. > > > I don't know what is causing the PR43 build issue. I've seen issues > with dependency check tooling in a few places recently. > no idea what is causing the failure -it's failing locally too. The file being downloaded is present - Musk hasn't deleted it yet. https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json I'm doing a java11 dependency check with the latest version of the plugin. Let's see what happens. Maybe we will need to do dependency checks on java11 and releases on java8 Whatever the outcome, I will put up the RC tonight. Hadoop does build with it... I've not tested it though > On Wed, 5 Mar 2025 at 20:41, Steve Loughran <ste...@cloudera.com.invalid> > wrote: > > > > I'm going to make a new third party jar. > > > > Is there anything we need to do in it other than the avro update? > > https://github.com/apache/hadoop-thirdparty/pull/43 > > > > > > 1. I don't want to rush to do a parquet or guava update unless there > are > > CVEs. we had problems with parquet and java 8 last time. > > 2. what to number it? 1.3.1 or 1.4.0? >
