You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@phoenix.apache.org by "Istvan Toth (Jira)" <ji...@apache.org> on 2024/07/11 07:33:00 UTC

[jira] [Created] (PHOENIX-7356) Centralize and update versions for exclude-only dependencies

Istvan Toth created PHOENIX-7356:
------------------------------------

             Summary: Centralize and update versions for exclude-only dependencies
                 Key: PHOENIX-7356
                 URL: https://issues.apache.org/jira/browse/PHOENIX-7356
             Project: Phoenix
          Issue Type: Improvement
          Components: core
            Reporter: Istvan Toth


In some cases we are excluding dependencies from shaded artifacts by adding them as dependencies with provided scope.
This requires specifying a version, but the version is totally irrelevant.

However, static checkers do not realize this, and keep flagging them as security issues.

Centralize and update these version to appease static checkers.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)