JiaLiangC commented on PR #4206: URL: https://github.com/apache/ambari/pull/4206#issuecomment-5578480469
Closing this generated aggregate because it regresses the current baseline: ambari-project/pom.xml downgrades Spring 6.2.19 to 4.3.30.RELEASE and SLF4J 2.0.18 to 1.7.36. The server c3p0 change also produces an invalid version expression, while the H2 update stops at the obsolete 1.4.200 line. Valid remaining upgrades need coherent, independently tested dependency changes. A subset of the security work is proposed in #4208 under AMBARI-26653; that PR does not replace all 112 updates in this aggregate. Reviewed against trunk [474f6711c1](https://github.com/apache/ambari/commit/474f6711c18663c29c0fc674053d21e7adcc2295). <!-- ambari-dependency-triage-2026-09-08 --> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
