Hi, community,

I’d like to start the release of Kyuubi Shaded[1] 0.3.0.

The major topic of this release is security. Basically, we have done the 
following things in this release:

- Upgrade Thrift from 0.9.3 to 0.16.0 to address 4 CVEs
- Upgrade JLine 0.9 to 2.x for shaded Zookeeper 3.4 
- Cut out the thrift 0.9 deps by creating a lightweight HMS client for Kyuubi 
server to refresh the delegation token

You can also review the detailed changelogs[2].

Please let me know if you have any concerns by replying to this thread or the 
coming RC VOTE thread.

[1] https://github.com/apache/kyuubi-shaded
[2] 
https://github.com/apache/kyuubi-shaded/compare/6742e5f41acb10aa5d37b012a2241d857e4fe5f0...b8cfda7586f75680b23e6c8df011fe21077ff146

Thanks,
Cheng Pan


Reply via email to