xx789633 commented on code in PR #2674: URL: https://github.com/apache/fluss/pull/2674#discussion_r2836006840
########## fluss-filesystems/fluss-fs-gs/src/main/resources/META-INF/NOTICE: ########## @@ -75,21 +85,25 @@ This project bundles the following dependencies under the Apache Software Licens - io.opencensus:opencensus-impl-core:0.31.0 - io.opencensus:opencensus-proto:0.2.0 - io.perfmark:perfmark-api:0.26.0 -- org.apache.commons:commons-compress:1.21 -- org.apache.commons:commons-configuration2:2.1.1 +- org.apache.commons:commons-compress:1.26.1 +- org.apache.commons:commons-configuration2:2.10.1 - org.apache.commons:commons-lang3:3.18.0 -- org.apache.commons:commons-text:1.4 -- org.apache.hadoop.thirdparty:hadoop-shaded-guava:1.1.1 -- org.apache.hadoop.thirdparty:hadoop-shaded-protobuf_3_7:1.1.1 -- org.apache.hadoop:hadoop-annotations:3.3.4 -- org.apache.hadoop:hadoop-auth:3.3.4 -- org.apache.hadoop:hadoop-common:3.3.4 +- org.apache.commons:commons-text:1.10.0 +- org.apache.hadoop.thirdparty:hadoop-shaded-guava:1.3.0 +- org.apache.hadoop.thirdparty:hadoop-shaded-protobuf_3_25:1.3.0 +- org.apache.hadoop:hadoop-annotations:3.4.1 +- org.apache.hadoop:hadoop-auth:3.4.1 +- org.apache.hadoop:hadoop-common:3.4.1 - org.apache.httpcomponents:httpclient:4.5.13 - org.apache.httpcomponents:httpcore:4.4.13 -- org.apache.kerby:kerb-core:1.0.1 -- org.apache.kerby:kerby-asn1:1.0.1 -- org.apache.kerby:kerby-pkix:1.0.1 -- org.apache.kerby:kerby-util:1.0.1 +- org.apache.kerby:kerb-core:2.0.3 +- org.apache.kerby:kerb-crypto:2.0.3 +- org.apache.kerby:kerb-util:2.0.3 +- org.apache.kerby:kerby-asn1:2.0.3 +- org.apache.kerby:kerby-config:2.0.3 +- org.apache.kerby:kerby-pkix:2.0.3 +- org.apache.kerby:kerby-util:2.0.3 +- org.codehaus.jettison:jettison:1.5.4 Review Comment: After investigating the transitive dependency tree, here's where each of the new dependencies comes from: - netty: new in hadoop 3.4. Hadoop's netty usage is for internal RPC/transport, not needed for filesystem operations. - io.dropwizard.metrics: new in hadoop 3.4. Hadoop metrics framework, not needed for filesystem operations. - org.codehaus.jettison: new in hadoop 3.4. Not needed. - org.reactivestream: from AWS SDK v2 http-client-spi. It is core part of AWS SDK v2's async model, cannot be exclude. By the way, the size of the fluss-fs-s3 jar is only ~40MB. Not too much difference. @wuchong -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
