Team, We have made massive strides going from thousands of out of date libraries to dozens in the 2.x line vs any prior releases. And we can/should stay on top of these better going forward. A few key bits that are outstanding with no obvious immediate work underway are as follows. If anyone is working on these, willing to work on these, please volunteer and let us know. For components that we cannot find active engagement on we should consider removal though these aren't great examples as they're indeed common usage components.
[1] https://issues.apache.org/jira/browse/NIFI-13173 Hive 4 recently came out but Hive also gives us some of the most complicated POM/library mangling and oldest dependencies to override/etc.. Putting serious detailed focus here is very valuable from a maintenance point of view. While existing usage of Hive 3 likely remains for some time, those users are like NiFi 1.x users anyway. In any case if there are motivated developers interested to see our Hive components be healthy please do dive in on this. [2] https://issues.apache.org/jira/browse/NIFI-13169 The NiFI registry is a major release behind Flyway DB. We need to stay current given the importance of this component. [3] https://issues.apache.org/jira/browse/NIFI-13168 We are a few incrementals behind and a minor release behind QuestDB. I tried bumping the incremental but it broke tests. [4] https://issues.apache.org/jira/browse/NIFI-11686 We are a full major release behind and several incremental/minors as well. Apparently there is some concern related to the community changes in Elastic vs OpenSearch/etc.. but regardless we need to stay active in maintaining this component. We really should get to the latest main. Thanks to anyone who can help tackle these and make progress both in terms of doing the upgrade/update work, validating tests, fixing licenses, but also reviews. Thanks Joe
