Github user srowen commented on the issue:
https://github.com/apache/spark/pull/22796
Yeah, maybe the better question is, what brings in this dependency? I took
out the declaration and all exclusions for `io.netty:netty` and checked
dependencies and it's basically Zookeeper (3.7.0) and Hadoop (3.6.9).
Looks like we managed it up to make sure to pick up a security fix,
actually.
OK, so yes that's a good reason not to let it go back down @dongjoon-hyun .
I think we have to leave this in as even Hadoop 3.x needs netty 3.x apparently.
However we can try updating to the latest 3.x, if desired here.
or just close it.
---
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
