Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

RANGER-4038: Upgrading to spring 6 #419

Draft
wants to merge 38 commits into
base: master
Choose a base branch
from
Draft

RANGER-4038: Upgrading to spring 6 #419

wants to merge 38 commits into from

Conversation

avperillo
Copy link

What changes were proposed in this pull request?

Fix vulnerabilities regarding Spring Web 5. Those vulnerabilities are solved in Spring version 6, which requires Java 17 as minimum supported version and migration to Jakarta, updating the following core libraries:

  • Java 11 -> 17
  • Javax -> Jakarta
  • Spring framework 5.7.12 -> 6.0.0
  • Jersey 1.19 -> 3.0.16
  • Tomcat embed 8.5.94 -> 10.1.31
  • EclipseLink 2.7.12 -> 3.0.4

How was this patch tested?

Existing unit test and manual test. Currently there are some modules don´t pass all Unit Tests

alexander.vazquez added 30 commits October 8, 2024 14:28
add support for java17
0c1333f
replace direct javax dependencies to jakarta
5f0dbcb
adapt script with fer changes
76844af 
NO MERGE
wip: blocked by hadoop transitive dependency
9aa23f2 
change to hadoop project for migrate to jakarta
remove wrapper of hadoop classes for jakarta migration
16ab0ba
added shaded for hadoop-common and hadoop-auth. compile ranger-kms an…
6ffcd32 
…d security-admin-web 🚀
migrating jersey
6855da2
change ClientResponse for jakarta.Response
1ba04a3
migrating jersey. profile security-admin COMPILE 🚀 🎉
789f1c9
install hadoop shaded libs in m2 local repository
5232d4e
update all xx-applicationContext to spring 6
8b77af8 
the reason of spring-webmvc exclusion is to avoid spring 5 transient dependencies
migrating jersey. web.xml changes
5dc854c
fix: both log4j-over-slf4j and bound slf4j-reload4j on classpath
28827a7
update Tomcat EmbeddedServer from 8.5 to 10.1.31
f029b78 
Tomcat 8 and 9 are not fully Jakarta compatible
change persistence from javax to jakarta
c98c654
enable multiPartFeature for file requests
33f4df4
configure Jasper compile variables
fc22305 
NOW load login JSP 🚀
fix usersync distro. Solve ClassNotFoundExceptions
46bd592
disable bad constructed endpoints to avoid Jersey validation errors
e73f64e
add transactionTemplate to fix store session in db.
26231ef
disable security context explicit save
dc3e2dc
javax -> jakarta upgrade
c60e734
add jackson integration 🎉
b9dc444
move hadoop shaded scripts to download-archives.sh
cbe57be
exclude some spring dependencies
5e3e38d
fix unit test in ranger-plugins-common
1f80bf6
revert custom scripts commit: 365ee980de785b535e7d1759013d7b23e0f94e23
5c9b433
kms: fix distro dependencies
fbd0c78
kms: fix util Base64 old version
43bba87
tagsync: add dependencies. service working 🎉
9974728
@avperillo avperillo changed the title DRAFT | Upgrading to spring 6 RANGER-4038 | DRAFT | Upgrading to spring 6 Dec 10, 2024
@avperillo avperillo changed the title RANGER-4038 | DRAFT | Upgrading to spring 6 RANGER-4038: Upgrading to spring 6 Dec 12, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@avperillo