Skip to content

Conversation

@shigarg1
Copy link
Contributor

@shigarg1 shigarg1 commented Oct 3, 2024

In latest version of commons-io IOException is replaced with UncheckedIOException
apache/commons-io@166dea3

dependabot bot and others added 2 commits September 19, 2024 23:52
Bumps commons-io:commons-io from 2.11.0 to 2.17.0.

---
updated-dependencies:
- dependency-name: commons-io:commons-io
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Comment on lines -38 to 39
<properties>
<commons-io.version>2.11.0</commons-io.version>
<commons-io.version>2.17.0</commons-io.version>
<okio.version>3.6.0</okio.version>
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

note: setting the version in this submodule have not much meaning - as its configured with dependencyManagement at the top level pom; this and the version for the package can be removed..

this okio thing seems to be an interesting thing as well

it seems we have 3 versions of that lib loaded; so it might be

$ rebuild -Pdist -Pbundle-contrib-exts
$ tar tzf ./distribution/target/apache-druid-32.0.0-SNAPSHOT-bin.tar.gz |grep okio
apache-druid-32.0.0-SNAPSHOT/extensions/druid-iceberg-extensions/okio-2.8.0.jar
apache-druid-32.0.0-SNAPSHOT/extensions/druid-kubernetes-extensions/okio-jvm-3.6.0.jar
apache-druid-32.0.0-SNAPSHOT/extensions/druid-kubernetes-extensions/okio-3.6.0.jar
apache-druid-32.0.0-SNAPSHOT/extensions/druid-kubernetes-overlord-extensions/okio-1.15.0.jar

might worth a try to remove the version for that too and possibly declare its version via dependencyManagement in the root pom.xml in a separate pr

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

you want me to remove commons io from submodule as part of this pr only or that too as another pr ?

@kgyrtkirk
Copy link
Member

@shigarg1: thank you for picking this up!

if you are interested - it seems like protobuf upgrade also has some minor issue:
#17121
#17115
we could stay on 3.x line if the upgrade to 4.x is not that simple :)

@shigarg1
Copy link
Contributor Author

shigarg1 commented Oct 4, 2024

@kgyrtkirk Sure! Let me look at protobuf upgrade issue.

@kgyrtkirk kgyrtkirk changed the title Commons io Upgrade commons-io to 2.17.0 Oct 4, 2024
@kgyrtkirk kgyrtkirk merged commit 93b5a83 into apache:master Oct 4, 2024
airlock-confluentinc bot pushed a commit to confluentinc/druid that referenced this pull request Oct 9, 2024
Co-authored-by: Shivam Garg <shigarg@visa.com>
@cryptoe cryptoe added this to the 31.0.0 milestone Oct 9, 2024
cryptoe pushed a commit to cryptoe/druid that referenced this pull request Oct 9, 2024
abhishekagarwal87 pushed a commit that referenced this pull request Oct 9, 2024
(cherry picked from commit 93b5a83)

Co-authored-by: Shivam Garg <shigarg@visa.com>
pagrawal10 added a commit to confluentinc/druid that referenced this pull request Oct 10, 2024
* Upgraded Protobuf to 3.25.5 (apache#17249) (#85)

* Bump com.google.protobuf:protobuf-java from 3.24.0 to 3.25.5

Bumps [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf) from 3.24.0 to 3.25.5.
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl)
- [Commits](protocolbuffers/protobuf@v3.24.0...v3.25.5)

---
updated-dependencies:
- dependency-name: com.google.protobuf:protobuf-java
  dependency-type: direct:production
...



* Updated the license

* Updated licenses.yaml

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Shivam Garg <shigarg@visa.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Upgrade commons-io to 2.17.0 (apache#17227) (#89)

Co-authored-by: Shivam Garg <shigarg@visa.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Shivam Garg <shigarg@visa.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants