You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by "mneethiraj (via GitHub)" <gi...@apache.org> on 2026/01/24 21:59:34 UTC

[PR] RANGER-5460: updated jetty version to 9.4.57.v20241219 [ranger]

mneethiraj opened a new pull request, #821:
URL: https://github.com/apache/ranger/pull/821

   ## What changes were proposed in this pull request?
   
   - updated jetty version in hbase-agent/pom.xml
   - removed jetty library references in knox-agent/pom.xml
   
   ## How was this patch tested?
   
   - verified that unit tests complete successfully
   - verified that HBase and Knox plugins successfully enforce Ranger policies and generate audit logs


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@ranger.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [PR] RANGER-5460: updated jetty version to 9.4.57.v20241219 [ranger]

Posted by "mneethiraj (via GitHub)" <gi...@apache.org>.
mneethiraj commented on code in PR #821:
URL: https://github.com/apache/ranger/pull/821#discussion_r2724656490


##########
knox-agent/pom.xml:
##########
@@ -115,10 +114,6 @@
                     <groupId>org.apache.zookeeper</groupId>
                     <artifactId>zookeeper</artifactId>
                 </exclusion>
-                <exclusion>
-                    <groupId>org.eclipse.jetty</groupId>
-                    <artifactId>jetty-util</artifactId>
-                </exclusion>
                 <exclusion>
                     <groupId>org.slf4j</groupId>
                     <artifactId>*</artifactId>

Review Comment:
   `org.apache.knox:gateway-spi` doesn't bring `jetty-util` anymore; hence the exclusion is removed from here. Here is the dependency tree:
   
   ```
   [INFO] +- org.apache.knox:gateway-spi:jar:2.0.0:compile
   [INFO] |  +- org.apache.knox:gateway-i18n:jar:2.0.0:compile
   [INFO] |  +- org.apache.knox:gateway-service-definitions:jar:2.0.0:compile
   [INFO] |  +- org.apache.knox:gateway-util-configinjector:jar:2.0.0:compile
   [INFO] |  +- org.apache.knox:gateway-provider-rewrite-common:jar:2.0.0:compile
   [INFO] |  +- org.apache.knox:gateway-util-urltemplate:jar:2.0.0:compile
   [INFO] |  +- org.jboss.shrinkwrap:shrinkwrap-api:jar:1.2.6:compile
   [INFO] |  +- org.jboss.shrinkwrap:shrinkwrap-impl-base:jar:1.2.6:compile
   [INFO] |  |  \- org.jboss.shrinkwrap:shrinkwrap-spi:jar:1.2.6:compile
   [INFO] |  +- org.jboss.shrinkwrap.descriptors:shrinkwrap-descriptors-api-javaee:jar:2.0.0:compile
   [INFO] |  +- org.jboss.shrinkwrap.descriptors:shrinkwrap-descriptors-impl-javaee:jar:2.0.0:compile
   [INFO] |  |  \- org.jboss.shrinkwrap.descriptors:shrinkwrap-descriptors-impl-base:jar:2.0.0:compile
   [INFO] |  |     \- org.jboss.shrinkwrap.descriptors:shrinkwrap-descriptors-spi:jar:2.0.0:compile
   [INFO] |  +- com.nimbusds:nimbus-jose-jwt:jar:8.14.1:compile
   [INFO] |  |  \- com.github.stephenc.jcip:jcip-annotations:jar:1.0-1:compile
   [INFO] |  +- commons-net:commons-net:jar:3.9.0:compile
   [INFO] |  +- org.apache.commons:commons-lang3:jar:3.11:compile
   [INFO] |  +- org.apache.httpcomponents:httpclient:jar:4.5.13:compile
   [INFO] |  +- com.jayway.jsonpath:json-path:jar:2.5.0:compile
   [INFO] |  +- joda-time:joda-time:jar:2.10.8:compile
   [INFO] |  +- io.dropwizard.metrics:metrics-core:jar:4.1.16:compile
   [INFO] |  +- io.dropwizard.metrics:metrics-httpclient:jar:4.1.16:compile
   [INFO] |  +- com.sun.activation:javax.activation:jar:1.2.0:compile
   [INFO] |  +- org.apache.logging.log4j:log4j-api:jar:2.17.1:compile
   [INFO] |  +- de.thetaphi:forbiddenapis:jar:3.1:compile
   [INFO] |  \- org.apache.hadoop:hadoop-common:jar:3.3.6:compile
   [INFO] |     +- org.apache.hadoop.thirdparty:hadoop-shaded-protobuf_3_7:jar:1.1.1:compile
   [INFO] |     +- org.apache.commons:commons-math3:jar:3.1.1:compile
   [INFO] |     +- jakarta.activation:jakarta.activation-api:jar:1.2.1:compile
   [INFO] |     +- javax.servlet.jsp:jsp-api:jar:2.1:runtime
   [INFO] |     +- com.sun.jersey:jersey-servlet:jar:1.19.4:compile
   [INFO] |     +- com.github.pjfanning:jersey-json:jar:1.20:compile
   [INFO] |     |  \- org.codehaus.jettison:jettison:jar:1.1:compile
   [INFO] |     +- com.google.re2j:re2j:jar:1.1:compile
   [INFO] |     +- com.jcraft:jsch:jar:0.1.55:compile
   [INFO] |     +- org.apache.curator:curator-recipes:jar:5.2.0:compile
   [INFO] |     +- com.google.code.findbugs:jsr305:jar:3.0.2:compile
   [INFO] |     +- org.apache.commons:commons-compress:jar:1.21:compile
   [INFO] |     +- org.apache.kerby:kerb-core:jar:1.0.1:compile
   [INFO] |     |  \- org.apache.kerby:kerby-pkix:jar:1.0.1:compile
   [INFO] |     |     +- org.apache.kerby:kerby-asn1:jar:1.0.1:compile
   [INFO] |     |     \- org.apache.kerby:kerby-util:jar:1.0.1:compile
   [INFO] |     +- org.codehaus.woodstox:stax2-api:jar:4.2.1:compile
   [INFO] |     +- com.fasterxml.woodstox:woodstox-core:jar:5.4.0:compile
   [INFO] |     \- org.xerial.snappy:snappy-java:jar:1.1.8.2:compile
   [INFO] +- org.apache.ranger:ranger-audit-dest-hdfs:jar:3.0.0-SNAPSHOT:compile
   ```



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@ranger.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [PR] RANGER-5460: updated jetty version to 9.4.57.v20241219 [ranger]

Posted by "Copilot (via GitHub)" <gi...@apache.org>.
Copilot commented on code in PR #821:
URL: https://github.com/apache/ranger/pull/821#discussion_r2724649302


##########
knox-agent/pom.xml:
##########
@@ -115,10 +114,6 @@
                     <groupId>org.apache.zookeeper</groupId>
                     <artifactId>zookeeper</artifactId>
                 </exclusion>
-                <exclusion>
-                    <groupId>org.eclipse.jetty</groupId>
-                    <artifactId>jetty-util</artifactId>
-                </exclusion>
                 <exclusion>
                     <groupId>org.slf4j</groupId>
                     <artifactId>*</artifactId>

Review Comment:
   With the removal of the jetty-util exclusion, verify that no transitive Jetty dependencies are being pulled in through other dependencies that could conflict with the intended removal of Knox's Jetty dependency. Consider adding dependency analysis to confirm the expected dependency tree.



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@ranger.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [PR] RANGER-5460: updated jetty version to 9.4.57.v20241219 [ranger]

Posted by "mneethiraj (via GitHub)" <gi...@apache.org>.
mneethiraj merged PR #821:
URL: https://github.com/apache/ranger/pull/821


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@ranger.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org