[
https://issues.apache.org/jira/browse/VFS-828?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17757230#comment-17757230
]
Arkadiusz Biczewski commented on VFS-828:
-----------------------------------------
[~ggregory] , there was no release of commons-vfs for over 2 *years* already.
Are there any plans to make changes from 2.10.0 publicly avialable? It can be
seen in the git repository, that 2.10 has many CVEs from dependencies fixed,
but still newer availble on central is
[2.9.0|https://mvnrepository.com/artifact/org.apache.commons/commons-vfs2/2.9.0]
Jul 20, 2021 !
> Dependency hadoop-hdfs-client should be optional
> ------------------------------------------------
>
> Key: VFS-828
> URL: https://issues.apache.org/jira/browse/VFS-828
> Project: Commons VFS
> Issue Type: Improvement
> Affects Versions: 2.9.0
> Reporter: Michael Gorovoy
> Priority: Minor
> Fix For: 2.10.0
>
>
> Hadoop HDFS Client library dependency needs to be marked as optional to avoid
> creating a transitive dependency if HDFS is not being used.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
