Abe Ratnofsky

Thanks @michaelsembwever - all changes requested are now addressed. Do you want me to merge in trunk and resolve conflicts, squash, or anything else to make this easier to commit?

Should be all good now - did I do it right @michaelsembwever?

Just rebased, looks like the Paxos state issue impacting test clean-up across the board. > Unexpected error found in node logs (see stdout for full details). Errors: [[node1] 'ERROR [main]...

Another CircleCI run: https://app.circleci.com/pipelines/github/aratno/cassandra?status=none&status=running&branch=CASSANDRA-17753-nodetool-version-gitsha

@michaelsembwever - thanks for taking a look. > Furthermore, I'm not sure how we define or pin the plexus dependency that is the source of the CVE here The plexus-utils2...

> Can you explain how one takes advantage of this CVE here? (surface and vector) From what I can tell, Maven Ant Tasks doesn't directly use the vulnerable components of...

> is there another format that we would rather declare and write our dependencies in Do you have any criteria for comparing formats, besides personal preference? I went with Maven...

> manual and CI. our full transitive dependency tree should always be easy to inspect. How did you do this before? build.xml did not include transitive dependencies, so I presume...

> > this is adding test dependencies, so adding test dependencies with test scope to the single pom would let us get rid of this file; that leaves us with...

Mailing list discussion here: https://lists.apache.org/thread/57b2whys3ddt0fx81j47ofo5mr5qbt5n