[
https://issues.apache.org/jira/browse/HBASE-22130?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16805231#comment-16805231
]
stack commented on HBASE-22130:
-------------------------------
The last release was a year ago. Could we get a release of hbase-thirdparty
done for 2.2.0? ([~zghaobac] -- what you think?)
Could update some of these mvn plugins in the poms.
No harm in pb update. Seems to be just bug fixes... not much done in java.
Yeah on netty... from 4.1.17 to 4.1.34....
Let me put up a patch....
> [hbase-thirdparty] Upgrade thirdparty dependencies
> --------------------------------------------------
>
> Key: HBASE-22130
> URL: https://issues.apache.org/jira/browse/HBASE-22130
> Project: HBase
> Issue Type: Task
> Components: thirdparty
> Reporter: Duo Zhang
> Assignee: kevin su
> Priority: Major
>
> First guava has a CVE so we need to upgrade to at least 26.0, better to the
> newest 27.1.
> And we can also upgrade the other dependencies to the newest version at the
> same time.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)