Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SNOW-936900 Use upgraded version of snappy-java #605

Merged
merged 2 commits into from
Oct 19, 2023

Conversation

sfc-gh-lsembera
Copy link
Contributor

@sfc-gh-lsembera sfc-gh-lsembera commented Oct 18, 2023

The SDK is exporting an old version of its transitive dependency snappy-java. This is visible in the new e2e-jar-test project, which is pulling in snappy-java version defined in hadoop-common and not the version we define in dependencyManagement. This PR makes snappy-java a direct runtime dependency, so we can control the version.

The SDK is exporting an old version of its transitive dependency
snappy-java . This is visible in the new e2e jar project, which is
pulling in the snappy-java defined in hadoop-common and
not the version we define in dependencyManagement. This PR makes
snappy-java a direct dependency, so we can control the version.
@sfc-gh-lsembera sfc-gh-lsembera requested review from sfc-gh-tzhang and a team as code owners October 18, 2023 16:35
<dependency>
<groupId>org.xerial.snappy</groupId>
<artifactId>snappy-java</artifactId>
<scope>runtime</scope>
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

should we make it test only since this is only for testing?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It is not testing only, this is transitive dependency of hadoop-common

@sfc-gh-lsembera sfc-gh-lsembera merged commit 7dd6784 into master Oct 19, 2023
10 checks passed
@sfc-gh-lsembera sfc-gh-lsembera deleted the lsembera/snyk-e2e-snappy-java branch October 19, 2023 09:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants