apache/dolphinscheduler
在 GitHub 查看[DSIP-36][Dependency] Upgrading dependent component versions
Open
#15,940 建立於 2024年4月29日
DSIPhelp wantedpriority:high
倉庫指標
- Star
- (11,659 star)
- PR 合併指標
- (平均合併 2天 21小時) (30 天內合併 22 個 PR)
描述
Search before asking
- I had searched in the DSIP and found no similar DSIP.
Motivation
There are a lot of dependencies in DS that have CVE, we need to upgrade these versions, otherwise there will be security issues
Design Detail
We need to find safe versions, preferably a compatible one, and upgrade.
Compatibility, Deprecation, and Migration Plan
Should ve Compatibility.
Test Plan
Test by UT/E2E.
Code of Conduct
- I agree to follow this project's Code of Conduct