apache/dolphinscheduler
[DSIP-36][Dependency] Upgrading dependent component versions
开放
#15,940 创建于 2024年4月29日
DSIPhelp wantedpriority:high
仓库指标
- 星标
- (11,659 个星标)
- PR 合并指标
- (PR 指标待抓取)
描述
Search before asking
- I had searched in the DSIP and found no similar DSIP.
Motivation
There are a lot of dependencies in DS that have CVE, we need to upgrade these versions, otherwise there will be security issues
Design Detail
We need to find safe versions, preferably a compatible one, and upgrade.
Compatibility, Deprecation, and Migration Plan
Should ve Compatibility.
Test Plan
Test by UT/E2E.
Code of Conduct
- I agree to follow this project's Code of Conduct