CalvinKirs opened a new pull request, #69334: URL: https://github.com/apache/doris/pull/69334
Upgrade vulnerable FE dependencies and remove unused transitive libraries. The unsuppressed OWASP Dependency-Check scan drops from 91 to 54 flagged dependencies; remaining matches include vendor-shaded libraries. Validation: FE package build and targeted Hive UDF, Avro, HTTP, and COS unit tests passed. Release note: None. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
