Hi, community, I’d like to start the release of Kyuubi Shaded[1] 0.3.0.
The major topic of this release is security. Basically, we have done the following things in this release: - Upgrade Thrift from 0.9.3 to 0.16.0 to address 4 CVEs - Upgrade JLine 0.9 to 2.x for shaded Zookeeper 3.4 - Cut out the thrift 0.9 deps by creating a lightweight HMS client for Kyuubi server to refresh the delegation token You can also review the detailed changelogs[2]. Please let me know if you have any concerns by replying to this thread or the coming RC VOTE thread. [1] https://github.com/apache/kyuubi-shaded [2] https://github.com/apache/kyuubi-shaded/compare/6742e5f41acb10aa5d37b012a2241d857e4fe5f0...b8cfda7586f75680b23e6c8df011fe21077ff146 Thanks, Cheng Pan