Skip to content

Latest commit

 

History

History
621 lines (317 loc) · 19.3 KB

RELEASENOTES.md

File metadata and controls

621 lines (317 loc) · 19.3 KB
Raw

RELEASENOTES

HBASE thirdparty-4.1.9 Release Notes

These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.

  • HBASE-28869 | Major | [hbase-thirdparty] Bump protobuf java to 4.27.5+

Bump protobuf version from 4.27.3 to 4.28.2.

  • HBASE-28871 | Major | [hbase-thirdparty] Bump dependency versions before releasing

Bump versions for these dependencies

netty 4.1.112.Final -> 4.1.113.Final netty-tcnative 2.0.61.Final -> 2.0.66.Final guava 33.2.1-jre -> 33.3.0-jre commons-cli 1.8.0 -> 1.9.0 error_prone_annotations 2.28.0 -> 2.32.0 jetty 9.4.55.v20240627 -> 9.4.56.v20240826 jersey.version 2.43 -> 2.45

HBASE thirdparty-4.1.8 Release Notes

These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.

  • HBASE-28746 | Major | [hbase-thirdparty] Bump netty to latest 4.1.112.Final version

Upgraded netty to 4.1.112.Final .

  • HBASE-28763 | Major | [hbase-thirdparty] Bump dependencies for hbase-thirdparty-4.1.8 release

Bump versions for following dependencies,

guava 33.1.0-jre -\> 33.2.1-jre
commons-cli 1.6.0 -\> 1.8.0
error\_prone\_annotations 2.26.1 -\> 2.28.0
gson 2.10.1 -\> 2.11.0
jetty 9.4.54.v20240208 -\> 9.4.55.v20240627
jersey 2.42 -\> 2.43
jackson-jaxrs-json-provider 2.17.0 -\> 2.17.2
  • HBASE-28764 | Major | [hbase-thirdparty] Bump protobuf version from 4.26.1 to 4.27.3

Bump protobuf-java version from 4.26.1 to 4.27.3.

HBASE thirdparty-4.1.7 Release Notes

These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.

  • HBASE-28495 | Major | [hbase-thirdparty] Fix pre commit build

Upgrade pre commit build to use docker image maven:3.9-eclipse-temurin-8.

  • HBASE-28491 | Major | [hbase-thirdparty] Bump netty to 4.1.108.Final for addressing CVE-2024-29025

Upgrade netty to 4.1.108.Final for addressing CVE-2024-29025

  • HBASE-28492 | Major | [hbase-thirdparty] Bump dependency versions before releasing

Bump versions for these dependencies

guava 33.0.0-jre -> 33.1.0-jre error_prone_annotations 2.21.1 -> 2.26.1 jersey.version 2.41 -> 2.42 jackson-jaxrs-json-provider 2.16.1 -> 2.17.0

  • HBASE-28493 | Major | [hbase-thirdparty] Bump protobuf version

Bump protobuf-java from 3.25.2 to 4.26.1.

HBASE thirdparty-4.1.6 Release Notes

These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.

HBASE thirdparty-4.1.5 Release Notes

These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.

  • HBASE-27808 | Major | Change flatten mode for oss in our pom file

Changed the flatten mode from default to oss. It will include these extra section in the published pom files:

name, description, url, developers, scm, inceptionYear, organization, mailingLists, issueManagement, distributionManagement.

  • HBASE-28095 | Major | [hbase-thirdparty] Bump maven plugin versions

apache parent pom 23 -> 30 maven-release-plugin ? -> 3.0.1 maven-clean-plugin ? -> 3.3.1 build-helper-maven-plugin 3.2.0 -> 3.4.0 buildnumber-maven-plugin 1.4 -> 3.1.0 maven-shade-plugin 3.2.4 -> 3.5.0 maven-compiler-plugin 3.8.1 -> 3.11.0 maven-dependency-plugin 3.2.0 -> 3.6.0 maven-source-plugin 3.2.0 -> 3.3.0 maven-antrun-plugin 3.0.0 -> 3.1.0 maven-enforcer-plugin 3.0.0 -> 3.4.1 extra-enforcer-rules 1.4 -> 1.7.0 flatten-maven-plugin 1.3.0 -> 1.5.0 nexus-staging-maven-plugin 1.6.8 -> 1.6.13

  • HBASE-28075 | Major | [hbase-thirdparty] Add shaded netty tcnative module

Add a hbase-shaded-netty-tcnative module for shading netty-tcnative-boringssl-static.

HBASE thirdparty-4.1.4 Release Notes

These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.

  • HBASE-27573 | Major | [hbase-thirdparty] Bump dependency versions

protobuf 3.21.9 -> 3.21.12 netty 4.1.86.Final -> 4.1.87.Final error prone 2.16 -> 2.18.0 gson 2.10 -> 2.10.1 jetty 9.4.49.v20220914 -> 9.4.50.v20221201 jersey 2,37 -> 2.38 jackson 2.14.0 ->2.14.1

HBASE thirdparty-4.1.3 Release Notes

These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.

  • HBASE-27467 | Major | [hbase-thirdparty] Bump thirdparty dependencies

protobuf 3.21.7 -> 3.21.9 netty 4.1.82.Final ->4.1.84.Final error prone 2.15.0 -> 2.16 gson 2.9.1 ->2.10 jackson 2.13.4 -> 2.14.0

  • HBASE-27468 | Major | [hbase-thirdparty] Use $revision as placeholder for maven version

Use ${revision} as placeholder for maven version in pom, so later you can use 'mvn install -Drevision=xxx' to specify the version at build time. After this change, you can not use mvn versions:set to bump the version, instead. you should just modify the parent pom to change the value of the 'revision' property in the properties section.

  • HBASE-27478 | Major | [hbase-thirdparty] Use maven flatten plugin to generate final pom

Use flatten maven plugin to resolve all the profiles and properties in the poms which are deployed.

HBASE thirdparty-4.1.2 Release Notes

These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.

  • HBASE-27412 | Major | [hbase-thirdparty] Bump dependency versions in hbase-thirdparty

protobuf 3.21.1 -> 3.21.7 netty 4.1.78.Final -> 4.1.82.Final error prone annotation 2.14.0 > 2.15.0 gson 2.9.0 -> 2.9.1 jetty 9.4.46.v20220331 -> 9.4.49.v20220914 jersey 2.36 -> 2.37 jackson 2.13.3 -> 2.13.4

HBASE thirdparty-4.1.1 Release Notes

These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.

  • HBASE-27130 | Major | [hbase-thirdparty] Bump dependency versions

protobuf 3.19.4 -> 3.21.1 netty 4.1.73.Final -> 4.1.78.Final guava 31.0.1-jre -> 31.1-jre error_prone_annotations 2.7.1 -> 2.14.0 gson 2.8.9 -> 2.9.0 jetty 9.4.44.v20210927 -> 9.4.46.v20220331 jersey.version 2.35 ->2.36

HBASE thirdparty-4.1.0 Release Notes

These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.

  • HBASE-26773 | Major | [hbase-thirdparty] Introduce a hbase-unsafe module in hbase-thirdparty to remove the direct references of Unsafe in our main code base

Introduced a new hbase-unsafe module in hbase-thirdparty.

  • HBASE-26733 | Major | [hbase-thirdparty] Upgrade Netty to 4.1.73.Final

Upgrade netty to 4.1.73.Final for addressing CVE-2021-43797.

  • HBASE-26732 | Major | [hbase-thirdparty] Update jackson (databind) to 2.13.1

Upgrade jackson databind from 2.10.1 -> 2.13.1.

For addressing a possible Dos attack described in FasterXML/jackson-databind#3328.

HBASE thirdparty-4.0.1 Release Notes

These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.

  • HBASE-26592 | Blocker | Fix the broken shaded protobuf module

Remove protobuf-java dependency from hbase-shaded-protobuf module, as we will unpack its source and patch it and then recompile from source. Also add a resources section to make sure that we include the proto files in the final jar.

HBASE thirdparty-4.0.0 Release Notes

These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.

  • HBASE-26506 | Major | [hbase-thirdparty] Bump jersey version to 2.35

Upgrade jersey version

2.32 -> 2.35

Add jersey-media-jaxb dependency.

  • HBASE-26505 | Major | [hbase-thirdparty] Bump commons-cli version to 1.5.0

Upgrade commons-cli version

1.4 -> 1.5.0

  • HBASE-26504 | Major | [hbase-thirdparty] Bump maven plugin versions

Upgrade versions of some maven plugins:

maven-dependency-plugin: 3.1.1 -> 3.2.0 build-helper-maven-plugin: 3.0.1-SNAPSHOT ->3.2.0 maven-compiler-plugi: ->3.8.1 maven-source-plugin: -> 3.2.0 maven-enforcer-plugin: 1.4.1 -> 3.0.0 extra-enforcer-rules: 1.3 -> 1.4

  • HBASE-26503 | Major | [hbase-thirdparty] Bump guava version to 31.0.1-jre

Upgrade guava version

30.1.1-jre -> 31.0.1-jre

  • HBASE-26502 | Major | [hbase-thirdparty] Bump gson version to 2.8.9

Upgrade gson version

2.8.5 ->2.8.9

  • HBASE-26501 | Major | [hbase-thirdparty] Bump jetty version to 9.4.44.v20210927

Upgrade jetty version

9.4.41.v20210516 -> 9.4.44.v20210927

  • HBASE-26499 | Major | [hbase-thirdparty] Bump netty version to 4.1.70.Final

Upgrade netty version

4.1.65.Final -> 4.1.70.Final

  • HBASE-26509 | Major | [hbase-thirdparty] Bump version to 4.0.0-SNAPSHOT on master branch

Bump version to 4.0.0-SNAPSHOT, drop JDK7 support.

  • HBASE-26500 | Major | [hbase-thirdparty] Bump protobuf version to 3.19.1

Upgrade protobuf version

3.17.1 -> 3.19.1

HBASE thirdparty-3.5.1 Release Notes

These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.

  • HBASE-25943 | Major | [hbase-thirdparty] Bump dependencis in hbase-thirdparty

protobuf 3.13.0 => 3.17.1 netty 4.1.63.Final => 4.1.65.Final guava 30.0-jre => 30.1.1-jre error_prone_annotations 2.3.4 => 2.7.1 jetty 9.4.39.v20210325 => 9.4.41.v20210516

  • HBASE-25855 | Minor | [hbase-thirdparty] Fix typo in jersey relocation path

We have a typo in our jersey relocation path, where we use 'jersery' instead of 'jersey'.

This is a minor change, but indeed an incompatible change. But since hbase-thirdparty is only used by hbase, it is not a big problem for end users. We will update the thridparty dependency for all active branches.

  • HBASE-25728 | Major | [hbase-thirdparty] Upgrade Netty library to >= 4.1.60 due to security vulnerability CVE-2021-21295

Netty is upgrade to 4.1.63.Final due to security vulnerability CVE-2021-21295.

HBASE hbase-thirdparty-3.5.0 Release Notes

These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.

  • HBASE-24802 | Critical | make a drop-in compatible impl of htrace APIs that does not do anything

The HBase Thirdparty project now produces an artifact that is a drop in replacement for the defunct HTrace project's library. This artifact is binary and source compatible with the artifact produced by the HTrace incubating 4.2.0 release with the exception of APIs that expressly referred to the relocated version of Jackson it included.

To use this library you should remove the htrace-core4 jar file from your runtime classpath and add the hbase-noop-htrace jar in its place.

For use in maven, add an exclusion to any dependencies that have a transitive dependency on HTrace:

<exclusions>
  <exclusion>
    <groupId>org.apache.htrace</groupId>
    <artifactId>htrace-core4</artifactId>
  </exclusion>
</exclusions>

Once the HTrace library has been excluded you should add a dependency on the replacement implementation at an appropriate scope. e.g. for the first release that includes this artifact at the default (compile) scope:

<dependency>
  <groupId>org.apache.hbase.thirdparty</groupId>
  <artifactId>hbase-noop-htrace</artifactId>
  <version>3.5.0</version>
</dependency>

For a detailed compatibility report between the libraries please see the attachments on jira for HBASE-24802.

HBASE thirdparty-3.4.1 Release Notes

These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.

  • HBASE-25265 | Major | [hbase-thirdparty] Bump dependencis in hbase-thirdparty

netty 4.1.51.Final -> 4.1.53.Final protobuf 3.12.2 -> 3.13.0 guava 29.0-jre -> 30.0-jre

  • HBASE-25264 | Major | [hbase-thirdparty] Update jersey version in hbase-thirdparty

Update jersey version 2.31 -> 2.32

HBASE thirdparty-3.4.0 Release Notes

These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.

  • HBASE-24820 | Major | [hbase-thirdparty] Add jersey-hk2 when shading jersey and bump jetty to 9.4.31

Jetty 9.4.30 -> 9.4.31 Shade jersey-hk2 in hbase-shaded-jersey.

  • HBASE-24798 | Major | [hbase-thirdparty] Ignore module-info and SubmissionPublisher in enforceBytecodeVersion rule

Ignore module-info in enforceBytecodeVersion rule as it is for supporting for JDK9+ and will not break JDK8 support. Ignore SubmissionPublisher in enforceBytecodeVersion rule as it is used by jersey-common for supporting JDK11 and will not break JDK8 support. Jersey 2.x promises to support JDK8.

  • HBASE-24801 | Major | [hbase-thirdparty] Remove assembly plugin for generating src tarballs

Remove the maven-assembly-plugin for generating src tarballs. We will generate it with 'git archive' command in release scripts.

  • HBASE-24782 | Major | [hbase-thirdparty] Bump dependencis in hbase-thirdparty

netty 4.1.18.Final > 4.1.51.Final protobuf 3.11.4 -> 3.12.2

Introduce two new modules for hbase-thirdparty, one is hbase-shaded-jetty, for shading jetty related jars, and the other is hbase-shaded-jersey, for shading jersey related jars.

HBASE thirdparty-3.3.0 Release Notes

These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.

  • HBASE-24279 | Trivial | Fix thirdparty-3.2.0 release notes

The hbase-thirdparty 3.2.0 release incorrectly listed gson upgrade. The gson version in 3.2.0 and 3.3.0 stayed on 2.8.5.

  • HBASE-24259 | Major | [thirdparty] Update Protobuf to 3.11.4

The version of Protobuf provided is now 3.11.4.

  • HBASE-24241 | Major | [hbase-thirdparty] Bump the dependencies for hbase-thirdparty

guava 28.2-jre => 29.0-jre

  • HBASE-24149 | Major | Bump netty version to 4.1.48.Final

The version of Netty provided is now 4.1.48.Final. This is expected to be a compatible change from version 4.1.45.Final provided in the previous release.

HBASE hbase-thirdparty-3.2.0 Release Notes

These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.

  • HBASE-23718 | Major | [hbase-thirdparty] Update libs; pb from 3.9 to 3.11, etc.

guava: 28.1-jre => 28.2-jre error_prone: 2.3.3 => 2.3.4 netty: 4.1.42.Final => 4.1.44.Final protobuf: 3.9.2 => 3.11.1 maven-assembly-plugin: 3.1.1 => 3.2.0

HBASE hbase-thirdparty-3.1.1 Release Notes

These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.

HBASE hbase-thirdparty-3.1.0 Release Notes

These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.

  • HBASE-23088 | Major | [hbase-thirdparty] Upgrade the dependencies for hbase-thirdparty

    netty-all: 4.1.34.Final => 4.1.42.Final guava: 27.1-jre => 28.1-jre commons-collections4: 4.3 => 4.4 protobuf: 3.7.1 => 3.9.2

HBASE hbase-thirdparty-3.0.0 Release Notes

These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.

  • HBASE-23052 | Blocker | hbase-thirdparty version of GSON that works for branch-1

HBase's internal use of GSON is now done in a stand alone module named hbase-shaded-gson rather than as a part of the hbase-shaded-miscellaneous module. The relocated fully qualified class names are still the same.

This internal artifact is also set to maintain JDK bytecode compatibility as appropriate for use with branches-1 based releases in addition to the existing use in later release lines.