steveloughran commented on PR #21: URL: https://github.com/apache/hadoop-thirdparty/pull/21#issuecomment-1235381597
I'd prefer retaining jackson unshaded just to avoid the need to do another release of this *every time there's a jackson CVE emergency* leaving out slf4j is good and flexible; though the dependencies of the shaded jar should declare that and compress as either provided or required. now, the parquet lib includes the version. I'm not sure that is the right thing to do (as it complicates that update), but it would allow someone brave to have the different versions coexisting. thoughts? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
