snowflake-ingest-java icon indicating copy to clipboard operation
snowflake-ingest-java copied to clipboard

No-SNOW Update fasterxml

Open sfc-gh-xhuang opened this issue 10 months ago • 2 comments

Update to a newer version of fasterxml

sfc-gh-xhuang avatar Apr 17 '24 15:04 sfc-gh-xhuang

I "fixed" the merge gates by adding an ignoreclass. Is that the right way to do this?

cc: @sfc-gh-tzhang @sfc-gh-japatel

sfc-gh-xhuang avatar Apr 17 '24 23:04 sfc-gh-xhuang

Also @sfc-gh-lsembera @sfc-gh-tzhang Do you know where snyk is complaining about commons-configuration2? I can't find where we define usage of that

sfc-gh-xhuang avatar Apr 18 '24 05:04 sfc-gh-xhuang

Also @sfc-gh-lsembera @sfc-gh-tzhang Do you know where snyk is complaining about commons-configuration2? I can't find where we define usage of that

Please check with @sfc-gh-lsembera , @sfc-gh-alhuang might also know more on this

sfc-gh-tzhang avatar Apr 24 '24 17:04 sfc-gh-tzhang

@sfc-gh-xhuang commons-configuration 2.8.0 is being pulled in transitively via hadoop-common. You can run mvn dependency:tree and then check target/dependency-list.txt.

sfc-gh-lsembera avatar Apr 24 '24 19:04 sfc-gh-lsembera