dolphinscheduler icon indicating copy to clipboard operation
dolphinscheduler copied to clipboard

[DSIP-36][Dependency] Upgrading dependent component versions

Open ruanwenjun opened this issue 2 months ago • 0 comments

Search before asking

  • [X] I had searched in the DSIP and found no similar DSIP.

Motivation

There are a lot of dependencies in DS that have CVE, we need to upgrade these versions, otherwise there will be security issues

Design Detail

We need to find safe versions, preferably a compatible one, and upgrade.

Compatibility, Deprecation, and Migration Plan

Should ve Compatibility.

Test Plan

Test by UT/E2E.

Code of Conduct

ruanwenjun avatar Apr 29 '24 13:04 ruanwenjun