pan3793 opened a new pull request, #8479:
URL: https://github.com/apache/hadoop/pull/8479
<!--
Thanks for sending a pull request!
1. If this is your first time, please read our contributor guidelines:
https://cwiki.apache.org/confluence/display/HADOOP/How+To+Contribute
2. Make sure your PR title starts with JIRA issue id, e.g.,
'HADOOP-17799. Your PR title ...'.
-->
### Description of PR
A regular toolchain upgrading, contains bug and CVE fixes.
Notable Changes in Maven 3.9.11 => 3.9.15
Maven 3.9.12
- Remove usage of terminally deprecated methods in Guice (eliminates
warnings on JDK 25+)
- Simplify plugin prefix resolution — avoids unnecessary lookups when prefix
is already mapped
- Verify Java version requirements for plugins before execution — clear
error if not met
- Resolver 1.9.25: refined locking (increased lock-name selectivity for
parallel builds), lock timeouts increased from 30s → 15min
Maven 3.9.13
- Plugin prerequisites check now properly supports ranges for Java 8 (or 1.8)
- Fixed Plexus Security Dispatcher warnings on Java 26+
- Updated plugin versions in default bindings
- Resolver 1.9.27: reverted parallel PUT change, HTTP 410 treated as 404,
Apache HTTP transport proxy fixes, fixed locally cached artifacts escaping RRF
Maven 3.9.14
- Quickfix: removed testing libraries accidentally included in 3.9.13
distribution (GH-11762)
Maven 3.9.15
- Upgraded plexus-utils to 3.6.1 (addresses CVE)
- Upgraded jansi to 2.4.3 (color console output works on Java 26+)
Contains content generated by: deepseek-v4-pro
### How was this patch tested?
Pass CI.
### For code changes:
- [x] Does the title or this PR starts with the corresponding JIRA issue id
(HADOOP-19883)?
- [ ] Object storage: have the integration tests been executed and the
endpoint declared according to the connector-specific documentation?
- [ ] If adding new dependencies to the code, are these dependencies
licensed in a way that is compatible for inclusion under [ASF
2.0](http://www.apache.org/legal/resolved.html#category-a)?
- [ ] If applicable, have you updated the `LICENSE`, `LICENSE-binary`,
`NOTICE-binary` files?
### AI Tooling
If an AI tool was used:
- [x] The PR includes the phrase "Contains content generated by <tool>"
where <tool> is the name of the AI tool used.
- [x] My use of AI contributions follows the ASF legal policy
https://www.apache.org/legal/generative-tooling.html
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
