JiaLiangC opened a new pull request, #4189: URL: https://github.com/apache/ambari/pull/4189
Issue: [AMBARI-26642](https://issues.apache.org/jira/browse/AMBARI-26642) ## What changes were proposed in this pull request? Modernize Ambari's JDK 17 dependency and build baseline while retaining compatibility boundaries that require dedicated migrations. - Align shared framework BOMs and Maven plugin management, and enforce Maven 3.9 with JDK 17. - Migrate Commons Lang 2 usage to Commons Lang 3 and Javax JAXB/Mail usage to Jakarta APIs. - Standardize server logging on SLF4J 2 with Logback and remove Reload4j from the server runtime graph. - Refresh maintained security, database-driver, test, and utility dependencies with focused compatibility changes. - Add CycloneDX SBOM generation, monthly grouped Dependabot updates, and dependency maintenance guidance. Swagger/OpenAPI, PowerMock removal, HttpClient 5, and H2 2.x remain deferred because they require separate API, testability, or persistence-contract changes. ## How was this patch tested? All validation was executed in the ambari-26642-build container with JDK 17.0.20.1 and Maven 3.9.11. - Maven validation passed for all 17 reactor modules. - The 43 affected Server test classes passed: 708 tests run, 0 failures, 0 errors, and 15 skipped. - Ambari Server and Funtest main/test compilation passed, including Server Checkstyle with 0 violations. - Root packaging and aggregate CycloneDX SBOM generation passed. - Apache RAT remains blocked by 200 pre-existing files on trunk; neither new governance file appears in that failure set. ```shell mvn -B -DskipTests -DskipPythonTests -DskipAdminWebTests=true -DskipUiBuild=true validate mvn -B -f ambari-server/pom.xml -Dtest="<43 affected test classes>" -DskipPythonTests -DskipAdminWebTests=true -DskipUiBuild=true -Drat.skip -Dcheckstyle.skip test mvn -B -am -pl ambari-server,ambari-funtest -DskipTests -DskipPythonTests -DskipFunctionalTests=true -DskipAdminWebTests=true -DskipUiBuild=true -Drat.skip test -rf :ambari-server mvn -B -Psbom -DskipTests -DskipPythonTests -DskipAdminWebTests=true -DskipUiBuild=true -Drat.skip org.cyclonedx:cyclonedx-maven-plugin:2.9.1:makeAggregateBom mvn -B -N -DskipTests -DskipPythonTests -Dcheckstyle.skip -Drat.skip package ``` The CycloneDX 1.6 aggregate SBOM contains 419 components. The server runtime dependency tree contains SLF4J 2.0.18 and Logback 1.5.38 without Reload4j. Please review [Ambari Contributing Guide](https://cwiki.apache.org/confluence/display/AMBARI/How+to+Contribute) before opening a pull request. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
