apache/dolphinscheduler
在 GitHub 查看[DSIP-36][Dependency] Upgrading dependent component versions
Open
#15,940 创建于 2024年4月29日
DSIPhelp wantedpriority:high
仓库指标
- Star
- (11,659 star)
- PR 合并指标
- (平均合并 2天 21小时) (30 天内合并 22 个 PR)
描述
Search before asking
- I had searched in the DSIP and found no similar DSIP.
Motivation
There are a lot of dependencies in DS that have CVE, we need to upgrade these versions, otherwise there will be security issues
Design Detail
We need to find safe versions, preferably a compatible one, and upgrade.
Compatibility, Deprecation, and Migration Plan
Should ve Compatibility.
Test Plan
Test by UT/E2E.
Code of Conduct
- I agree to follow this project's Code of Conduct