You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@hbase.apache.org by bu...@apache.org on 2021/02/07 05:33:33 UTC
svn commit: r45864 - in /dev/hbase/hbase-thirdparty-3.5.0RC0: ./ CHANGES.md
RELEASENOTES.md hbase-thirdparty-3.5.0-src.tar.gz
hbase-thirdparty-3.5.0-src.tar.gz.asc
hbase-thirdparty-3.5.0-src.tar.gz.sha512
Author: busbey
Date: Sun Feb 7 05:33:33 2021
New Revision: 45864
Log:
Apache hbase-thirdparty 3.5.0RC0
Added:
dev/hbase/hbase-thirdparty-3.5.0RC0/
dev/hbase/hbase-thirdparty-3.5.0RC0/CHANGES.md
dev/hbase/hbase-thirdparty-3.5.0RC0/RELEASENOTES.md
dev/hbase/hbase-thirdparty-3.5.0RC0/hbase-thirdparty-3.5.0-src.tar.gz (with props)
dev/hbase/hbase-thirdparty-3.5.0RC0/hbase-thirdparty-3.5.0-src.tar.gz.asc
dev/hbase/hbase-thirdparty-3.5.0RC0/hbase-thirdparty-3.5.0-src.tar.gz.sha512
Added: dev/hbase/hbase-thirdparty-3.5.0RC0/CHANGES.md
==============================================================================
--- dev/hbase/hbase-thirdparty-3.5.0RC0/CHANGES.md (added)
+++ dev/hbase/hbase-thirdparty-3.5.0RC0/CHANGES.md Sun Feb 7 05:33:33 2021
@@ -0,0 +1,190 @@
+# HBASE Changelog
+<!---
+ Licensed to the Apache Software Foundation (ASF) under one
+ or more contributor license agreements. See the NOTICE file
+ distributed with this work for additional information
+ regarding copyright ownership. The ASF licenses this file
+ to you under the Apache License, Version 2.0 (the
+ "License"); you may not use this file except in compliance
+ with the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+
+
+
+CHANGES.md and RELEASENOTES.md were generated using yetus releasedocmaker.
+
+First make sure what is in JIRA agrees with what is in git and vice-versa.
+Thirdparty version numbers are of the form thirdparty-x.y.z.
+
+Then run the hbase script that updates CHANGES and RELEASENOTES. For
+example:
+
+ $ source ../hbase.git/dev-support/create-release/release-util.sh; update_releasenotes `pwd` thirdparty-2.2.0
+
+The 'pwd' argument says where the thirdparty files to edit are and the
+last argument is the version to search JIRA with.
+
+DO NOT REMOVE THIS MARKER; FOR INTERPOLATING CHANGES!-->
+## Release hbase-thirdparty-3.5.0 - Unreleased (as of 2021-02-07)
+
+
+
+### BUG FIXES:
+
+| JIRA | Summary | Priority | Component |
+|:---- |:---- | :--- |:---- |
+| [HBASE-25552](https://issues.apache.org/jira/browse/HBASE-25552) | [hbase-thirdparty] Update jetty version to fix CVE-2020-27218 | Major | dependencies, hbase-thirdparty |
+| [HBASE-24802](https://issues.apache.org/jira/browse/HBASE-24802) | make a drop-in compatible impl of htrace APIs that does not do anything | Critical | Client, dependencies, thirdparty |
+
+
+
+## Release thirdparty-3.4.1 - Unreleased (as of 2020-11-13)
+
+
+
+### IMPROVEMENTS:
+
+| JIRA | Summary | Priority | Component |
+|:---- |:---- | :--- |:---- |
+| [HBASE-25262](https://issues.apache.org/jira/browse/HBASE-25262) | [hbase-thirdparty] Update jetty version in hbase-thirdparty | Major | dependencies, hbase-thirdparty |
+
+
+### BUG FIXES:
+
+| JIRA | Summary | Priority | Component |
+|:---- |:---- | :--- |:---- |
+| [HBASE-25319](https://issues.apache.org/jira/browse/HBASE-25319) | [hbase-thirdparty] Add JerseyFlowSubscriber to ignoreClass in maven enforcer plugin | Blocker | build, hbase-thirdparty |
+
+
+### SUB-TASKS:
+
+| JIRA | Summary | Priority | Component |
+|:---- |:---- | :--- |:---- |
+| [HBASE-25270](https://issues.apache.org/jira/browse/HBASE-25270) | [hbase-thirdparty] Generate CHANGES.md and RELEASENOTES.md for 3.4.1 | Major | thirdparty |
+| [HBASE-25269](https://issues.apache.org/jira/browse/HBASE-25269) | [hbase-thirdparty] Set version as 3.4.1 in prep for first RC | Major | thirdparty |
+
+
+### OTHER:
+
+| JIRA | Summary | Priority | Component |
+|:---- |:---- | :--- |:---- |
+| [HBASE-25265](https://issues.apache.org/jira/browse/HBASE-25265) | [hbase-thirdparty] Bump dependencis in hbase-thirdparty | Major | dependencies, hbase-thirdparty |
+| [HBASE-25264](https://issues.apache.org/jira/browse/HBASE-25264) | [hbase-thirdparty] Update jersey version in hbase-thirdparty | Major | dependencies, hbase-thirdparty |
+
+
+## Release thirdparty-3.4.0 - Unreleased (as of 2020-08-17)
+
+
+
+### BUG FIXES:
+
+| JIRA | Summary | Priority | Component |
+|:---- |:---- | :--- |:---- |
+| [HBASE-24858](https://issues.apache.org/jira/browse/HBASE-24858) | [hbase-thirdparty] Builds without a \`clean\` phase fail on hbase-shaded-jetty | Minor | thirdparty |
+| [HBASE-24798](https://issues.apache.org/jira/browse/HBASE-24798) | [hbase-thirdparty] Ignore module-info and SubmissionPublisher in enforceBytecodeVersion rule | Major | build, thirdparty |
+
+
+### SUB-TASKS:
+
+| JIRA | Summary | Priority | Component |
+|:---- |:---- | :--- |:---- |
+| [HBASE-24785](https://issues.apache.org/jira/browse/HBASE-24785) | [hbase-thirdparty] Generate CHANGES.md and RELEASENOTES.md for 3.4.0 | Major | thirdparty |
+| [HBASE-24784](https://issues.apache.org/jira/browse/HBASE-24784) | [hbase-thirdparty] Set version as 3.4.0 in prep for first RC | Major | thirdparty |
+
+
+### OTHER:
+
+| JIRA | Summary | Priority | Component |
+|:---- |:---- | :--- |:---- |
+| [HBASE-24860](https://issues.apache.org/jira/browse/HBASE-24860) | [hbase-thirdparty] Bump copyright year in NOTICE | Trivial | thirdparty |
+| [HBASE-24820](https://issues.apache.org/jira/browse/HBASE-24820) | [hbase-thirdparty] Add jersey-hk2 when shading jersey and bump jetty to 9.4.31 | Major | dependencies, hbase-thirdparty |
+| [HBASE-24801](https://issues.apache.org/jira/browse/HBASE-24801) | [hbase-thirdparty] Remove assembly plugin for generating src tarballs | Major | thirdparty |
+| [HBASE-24782](https://issues.apache.org/jira/browse/HBASE-24782) | [hbase-thirdparty] Bump dependencis in hbase-thirdparty | Major | dependencies, thirdparty |
+| [HBASE-19256](https://issues.apache.org/jira/browse/HBASE-19256) | [hbase-thirdparty] shade jetty | Major | dependencies, thirdparty |
+
+
+## Release thirdparty-3.3.0 - Unreleased (as of 2020-04-28)
+
+
+
+### IMPROVEMENTS:
+
+| JIRA | Summary | Priority | Component |
+|:---- |:---- | :--- |:---- |
+| [HBASE-24149](https://issues.apache.org/jira/browse/HBASE-24149) | Bump netty version to 4.1.48.Final | Major | thirdparty |
+| [HBASE-23790](https://issues.apache.org/jira/browse/HBASE-23790) | Bump netty version to 4.1.45.Final in hbase-thirdparty | Major | hbase-thirdparty |
+
+
+### BUG FIXES:
+
+| JIRA | Summary | Priority | Component |
+|:---- |:---- | :--- |:---- |
+| [HBASE-24279](https://issues.apache.org/jira/browse/HBASE-24279) | Fix thirdparty-3.2.0 release notes | Trivial | thirdparty |
+
+
+### SUB-TASKS:
+
+| JIRA | Summary | Priority | Component |
+|:---- |:---- | :--- |:---- |
+| [HBASE-23750](https://issues.apache.org/jira/browse/HBASE-23750) | [hbase-thirdparty] Add nexus-staging-maven-plugin to apache-release profile | Major | . |
+
+
+### OTHER:
+
+| JIRA | Summary | Priority | Component |
+|:---- |:---- | :--- |:---- |
+| [HBASE-24259](https://issues.apache.org/jira/browse/HBASE-24259) | [thirdparty] Update Protobuf to 3.11.4 | Major | thirdparty |
+| [HBASE-24216](https://issues.apache.org/jira/browse/HBASE-24216) | Add .idea directory to Gitignore in hbase-thirdparty | Trivial | thirdparty |
+| [HBASE-24241](https://issues.apache.org/jira/browse/HBASE-24241) | [hbase-thirdparty] Bump the dependencies for hbase-thirdparty | Major | hbase-thirdparty |
+| [HBASE-24214](https://issues.apache.org/jira/browse/HBASE-24214) | Update Apache POM to version 23 for hbase-thirdparty | Minor | thirdparty |
+
+
+## Release hbase-thirdparty-3.2.0 - Unreleased (as of 2020-01-22)
+
+
+
+### SUB-TASKS:
+
+| JIRA | Summary | Priority | Component |
+|:---- |:---- | :--- |:---- |
+| [HBASE-23718](https://issues.apache.org/jira/browse/HBASE-23718) | [hbase-thirdparty] Update libs; pb from 3.9 to 3.11, etc. | Major | . |
+| [HBASE-23717](https://issues.apache.org/jira/browse/HBASE-23717) | [hbase-thirdparty] Change pom version from 3.1.2-SNAPSHOT to 3.2.0-SNAPSHOT | Major | thirdparty |
+
+
+## Release hbase-thirdparty-3.1.1 - Unreleased (as of 2019-10-08)
+
+
+
+### BUG FIXES:
+
+| JIRA | Summary | Priority | Component |
+|:---- |:---- | :--- |:---- |
+| [HBASE-23132](https://issues.apache.org/jira/browse/HBASE-23132) | Squash hbase-thirdparty-3.1.0; was compiled w/ jdk10 so "NoSuchMethodError: java.nio.ByteBuffer.\*" | Major | . |
+
+
+## Release hbase-thirdparty-3.1.0 - Unreleased (as of 2019-10-04)
+
+
+
+### SUB-TASKS:
+
+| JIRA | Summary | Priority | Component |
+|:---- |:---- | :--- |:---- |
+| [HBASE-23088](https://issues.apache.org/jira/browse/HBASE-23088) | [hbase-thirdparty] Upgrade the dependencies for hbase-thirdparty | Major | hbase-thirdparty |
+
+
+## Release thirdparty-3.0.0 - Unreleased (as of 2019-09-22)
+
+### IMPROVEMENTS:
+
+| JIRA | Summary | Priority | Component |
+|:---- |:---- | :--- |:---- |
+| [HBASE-23052](https://issues.apache.org/jira/browse/HBASE-23052) | hbase-thirdparty version of GSON that works for branch-1 | Blocker | dependencies |
+
Added: dev/hbase/hbase-thirdparty-3.5.0RC0/RELEASENOTES.md
==============================================================================
--- dev/hbase/hbase-thirdparty-3.5.0RC0/RELEASENOTES.md (added)
+++ dev/hbase/hbase-thirdparty-3.5.0RC0/RELEASENOTES.md Sun Feb 7 05:33:33 2021
@@ -0,0 +1,219 @@
+# RELEASENOTES
+
+<!---
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements. See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership. The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# Be careful doing manual edits in this file. Do not change format
+# of release header or remove the below marker. This file is generated.
+# DO NOT REMOVE THIS MARKER; FOR INTERPOLATING CHANGES!-->
+# HBASE hbase-thirdparty-3.5.0 Release Notes
+
+These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.
+
+
+---
+
+* [HBASE-24802](https://issues.apache.org/jira/browse/HBASE-24802) | *Critical* | **make a drop-in compatible impl of htrace APIs that does not do anything**
+
+<!-- markdown -->
+
+The HBase Thirdparty project now produces an artifact that is a drop in replacement for the defunct HTrace project's library. This artifact is binary and source compatible with the artifact produced by the HTrace incubating 4.2.0 release with the exception of APIs that expressly referred to the relocated version of Jackson it included.
+
+
+To use this library you should remove the `htrace-core4` jar file from your runtime classpath and add the `hbase-noop-htrace` jar in its place.
+
+For use in maven, add an exclusion to any dependencies that have a transitive dependency on HTrace:
+
+```
+<exclusions>
+ <exclusion>
+ <groupId>org.apache.htrace</groupId>
+ <artifactId>htrace-core4</artifactId>
+ </exclusion>
+</exclusions>
+```
+
+Once the HTrace library has been excluded you should add a dependency on the replacement implementation at an appropriate scope. e.g. for the first release that includes this artifact at the default (compile) scope:
+
+```
+<dependency>
+ <groupId>org.apache.hbase.thirdparty</groupId>
+ <artifactId>hbase-noop-htrace</artifactId>
+ <version>3.5.0</version>
+</dependency>
+```
+
+For a detailed compatibility report between the libraries please see the attachments on jira for HBASE-24802.
+
+
+
+# HBASE thirdparty-3.4.1 Release Notes
+
+These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.
+
+
+---
+
+* [HBASE-25265](https://issues.apache.org/jira/browse/HBASE-25265) | *Major* | **[hbase-thirdparty] Bump dependencis in hbase-thirdparty**
+
+netty 4.1.51.Final -\> 4.1.53.Final
+protobuf 3.12.2 -\> 3.13.0
+guava 29.0-jre -\> 30.0-jre
+
+
+---
+
+* [HBASE-25264](https://issues.apache.org/jira/browse/HBASE-25264) | *Major* | **[hbase-thirdparty] Update jersey version in hbase-thirdparty**
+
+Update jersey version 2.31 -\> 2.32
+
+
+
+# HBASE thirdparty-3.4.0 Release Notes
+
+These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.
+
+
+---
+
+* [HBASE-24820](https://issues.apache.org/jira/browse/HBASE-24820) | *Major* | **[hbase-thirdparty] Add jersey-hk2 when shading jersey and bump jetty to 9.4.31**
+
+Jetty 9.4.30 -\> 9.4.31
+Shade jersey-hk2 in hbase-shaded-jersey.
+
+
+---
+
+* [HBASE-24798](https://issues.apache.org/jira/browse/HBASE-24798) | *Major* | **[hbase-thirdparty] Ignore module-info and SubmissionPublisher in enforceBytecodeVersion rule**
+
+Ignore module-info in enforceBytecodeVersion rule as it is for supporting for JDK9+ and will not break JDK8 support.
+Ignore SubmissionPublisher in enforceBytecodeVersion rule as it is used by jersey-common for supporting JDK11 and will not break JDK8 support.
+Jersey 2.x promises to support JDK8.
+
+
+---
+
+* [HBASE-24801](https://issues.apache.org/jira/browse/HBASE-24801) | *Major* | **[hbase-thirdparty] Remove assembly plugin for generating src tarballs**
+
+Remove the maven-assembly-plugin for generating src tarballs. We will generate it with 'git archive' command in release scripts.
+
+
+---
+
+* [HBASE-24782](https://issues.apache.org/jira/browse/HBASE-24782) | *Major* | **[hbase-thirdparty] Bump dependencis in hbase-thirdparty**
+
+netty 4.1.18.Final \> 4.1.51.Final
+protobuf 3.11.4 -\> 3.12.2
+
+
+---
+
+* [HBASE-19256](https://issues.apache.org/jira/browse/HBASE-19256) | *Major* | **[hbase-thirdparty] shade jetty**
+
+Introduce two new modules for hbase-thirdparty, one is hbase-shaded-jetty, for shading jetty related jars, and the other is hbase-shaded-jersey, for shading jersey related jars.
+
+
+
+# HBASE thirdparty-3.3.0 Release Notes
+
+These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.
+
+
+---
+
+* [HBASE-24279](https://issues.apache.org/jira/browse/HBASE-24279) | *Trivial* | **Fix thirdparty-3.2.0 release notes**
+
+The hbase-thirdparty 3.2.0 release incorrectly listed gson upgrade. The gson version in 3.2.0 and 3.3.0 stayed on 2.8.5.
+
+
+---
+
+* [HBASE-24259](https://issues.apache.org/jira/browse/HBASE-24259) | *Major* | **[thirdparty] Update Protobuf to 3.11.4**
+
+The version of Protobuf provided is now 3.11.4.
+
+
+---
+
+* [HBASE-24241](https://issues.apache.org/jira/browse/HBASE-24241) | *Major* | **[hbase-thirdparty] Bump the dependencies for hbase-thirdparty**
+
+guava 28.2-jre =\> 29.0-jre
+
+
+---
+
+* [HBASE-24149](https://issues.apache.org/jira/browse/HBASE-24149) | *Major* | **Bump netty version to 4.1.48.Final**
+
+The version of Netty provided is now 4.1.48.Final. This is expected to be a compatible change from version 4.1.45.Final provided in the previous release.
+
+
+
+# HBASE hbase-thirdparty-3.2.0 Release Notes
+
+These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.
+
+
+---
+
+* [HBASE-23718](https://issues.apache.org/jira/browse/HBASE-23718) | *Major* | **[hbase-thirdparty] Update libs; pb from 3.9 to 3.11, etc.**
+
+guava: 28.1-jre =\> 28.2-jre
+error\_prone: 2.3.3 =\> 2.3.4
+netty: 4.1.42.Final =\> 4.1.44.Final
+protobuf: 3.9.2 =\> 3.11.1
+maven-assembly-plugin: 3.1.1 =\> 3.2.0
+
+
+
+# HBASE hbase-thirdparty-3.1.1 Release Notes
+
+These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.
+
+
+
+# HBASE hbase-thirdparty-3.1.0 Release Notes
+
+These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.
+
+
+---
+
+* [HBASE-23088](https://issues.apache.org/jira/browse/HBASE-23088) | *Major* | **[hbase-thirdparty] Upgrade the dependencies for hbase-thirdparty**
+
+ netty-all: 4.1.34.Final =\> 4.1.42.Final
+ guava: 27.1-jre =\> 28.1-jre
+ commons-collections4: 4.3 =\> 4.4
+ protobuf: 3.7.1 =\> 3.9.2
+
+
+
+# HBASE hbase-thirdparty-3.0.0 Release Notes
+
+These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.
+
+
+---
+
+* [HBASE-23052](https://issues.apache.org/jira/browse/HBASE-23052) | *Blocker* | **hbase-thirdparty version of GSON that works for branch-1**
+
+<!-- markdown -->
+HBase's internal use of GSON is now done in a stand alone module named `hbase-shaded-gson` rather than as a part of the `hbase-shaded-miscellaneous` module. The relocated fully qualified class names are still the same.
+
+This internal artifact is also set to maintain JDK bytecode compatibility as appropriate for use with branches-1 based releases in addition to the existing use in later release lines.
+
+
+
Added: dev/hbase/hbase-thirdparty-3.5.0RC0/hbase-thirdparty-3.5.0-src.tar.gz
==============================================================================
Binary file - no diff available.
Propchange: dev/hbase/hbase-thirdparty-3.5.0RC0/hbase-thirdparty-3.5.0-src.tar.gz
------------------------------------------------------------------------------
svn:mime-type = application/octet-stream
Added: dev/hbase/hbase-thirdparty-3.5.0RC0/hbase-thirdparty-3.5.0-src.tar.gz.asc
==============================================================================
--- dev/hbase/hbase-thirdparty-3.5.0RC0/hbase-thirdparty-3.5.0-src.tar.gz.asc (added)
+++ dev/hbase/hbase-thirdparty-3.5.0RC0/hbase-thirdparty-3.5.0-src.tar.gz.asc Sun Feb 7 05:33:33 2021
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=5WjN
+-----END PGP SIGNATURE-----
Added: dev/hbase/hbase-thirdparty-3.5.0RC0/hbase-thirdparty-3.5.0-src.tar.gz.sha512
==============================================================================
--- dev/hbase/hbase-thirdparty-3.5.0RC0/hbase-thirdparty-3.5.0-src.tar.gz.sha512 (added)
+++ dev/hbase/hbase-thirdparty-3.5.0RC0/hbase-thirdparty-3.5.0-src.tar.gz.sha512 Sun Feb 7 05:33:33 2021
@@ -0,0 +1,4 @@
+hbase-thirdparty-3.5.0-src.tar.gz: 20A23E03 9290B067 0451EC97 EED5DF54 B7901C8A
+ 142D5A56 AAB8566B 5C4D5318 0A425175 5CADF35E
+ E73867A1 95295397 0F029329 C5ABE7F5 C9EC6EF7
+ 10654ADE