You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@phoenix.apache.org by "Istvan Toth (Jira)" <ji...@apache.org> on 2024/07/11 07:57:00 UTC

[jira] [Assigned] (PHOENIX-7356) Centralize and update versions for exclude-only dependencies

     [ https://issues.apache.org/jira/browse/PHOENIX-7356?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Istvan Toth reassigned PHOENIX-7356:
------------------------------------

    Assignee: Istvan Toth

> Centralize and update versions for exclude-only dependencies
> ------------------------------------------------------------
>
>                 Key: PHOENIX-7356
>                 URL: https://issues.apache.org/jira/browse/PHOENIX-7356
>             Project: Phoenix
>          Issue Type: Improvement
>          Components: core
>            Reporter: Istvan Toth
>            Assignee: Istvan Toth
>            Priority: Minor
>
> In some cases we are excluding dependencies from shaded artifacts by adding them as dependencies with provided scope.
> This requires specifying a version, but the version is totally irrelevant.
> However, static checkers do not realize this, and keep flagging them as security issues.
> Centralize and update these version to appease static checkers.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)