Github user MikeThomsen commented on the issue:
https://github.com/apache/nifi/pull/2977
Saw @bbende's jira comment:
> We should only update Guava dependencies that we directly use in our own
code, but not transitive dependencies used by client libraries (i.e. do not
change the Guava version for things like Hadoop processors, or HBase
processors, etc.).
I saw Kudu, Kite and Ignite get updated, but according to `mvn
dependency:tree` they're not transitive. So I'm putting this here for
documentation purposes. Overall LGTM but will take another look tomorrow.
---