[
https://issues.apache.org/jira/browse/FLINK-36035?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
ASF GitHub Bot updated FLINK-36035:
-----------------------------------
Labels: pull-request-available (was: )
> Remove zipped dependency files from flink-python
> ------------------------------------------------
>
> Key: FLINK-36035
> URL: https://issues.apache.org/jira/browse/FLINK-36035
> Project: Flink
> Issue Type: Technical Debt
> Components: API / Python
> Reporter: Grace Grimwood
> Priority: Major
> Labels: pull-request-available
>
> There are zipped versions of Py4J and Cloudpickle stored in version control
> for use with PyFlink (as part of the build and also to use with the shell).
> It looks like they were put there because of issues with them not being
> auto-added to the PYTHONPATH, but this issue can be fixed without needing
> zipped copies of the libraries to be present locally.
> It would be ideal to avoid storing these zip files in version control because
> git cannot parse them (they're treated as binaries) and they can also pose a
> security risk. I believe this can be done without altering anything
> user-facing in flink-python.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)