[GitHub] [spark] srowen opened a new pull request #25544: [SPARK-17875][CORE][BUILD] Remove dependency on Netty 3

[GitBox <gi...@apache.org>]

srowen opened a new pull request #25544: [SPARK-17875][CORE][BUILD] Remove dependency on Netty 3
URL: https://github.com/apache/spark/pull/25544
 
 
   ### What changes were proposed in this pull request?
   
   Spark uses Netty 4 directly, but also includes Netty 3 only because transitive dependencies do. The dependencies (Hadoop HDFS, Zookeeper, Avro) don't seem to need this dependency as used in Spark. I think we can forcibly remove it to slim down the dependencies.
   
   Previous attempts were blocked by its usage in Flume, but that dependency has gone away.
   https://github.com/apache/spark/pull/15436
   
   ### Why are the changes needed?
   
   Mostly to reduce the transitive dependency size and complexity a little bit and avoid triggering spurious security alerts on Netty 3.x usage.
   
   ### Does this PR introduce any user-facing change?
   
   No
   
   ### How was this patch tested?
   
   Existing tests
   

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services

---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org