Hello Kylin community, As you know, Kylin 4.0 supports both Spark 2.4 and Spark 3.1 at the very begining; Recently when we try to fix some security vulnerabilities (e.g, CVE-2022-22978 <https://github.com/advisories/GHSA-hh32-7344-cg2f>), we found that Spark 2 is hard to be compitable with recommended version of Spring-core and Spring security.
Besides, we noticed that the latest Spark 2 release v2.4.8 was released on May 17, 2021, which is almost 15 months ago. Which means it is not actively maintained anymore. So, I propose Kylin 4 move to Spark 3 totally, and will not release package for Spark 2 anymore. For the legacy users, please upgrade your Spark. Your comments are welcomed. Best regards, Shaofeng Shi 史少锋 Apache Kylin PMC, Apache Incubator PMC, Email: shaofeng...@apache.org Apache Kylin FAQ: https://kylin.apache.org/docs/gettingstarted/faq.html Join Kylin user mail group: user-subscr...@kylin.apache.org Join Kylin dev mail group: dev-subscr...@kylin.apache.org
