These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.
Bump protobuf version from 4.27.3 to 4.28.2.
Bump versions for these dependencies
netty 4.1.112.Final -> 4.1.113.Final netty-tcnative 2.0.61.Final -> 2.0.66.Final guava 33.2.1-jre -> 33.3.0-jre commons-cli 1.8.0 -> 1.9.0 error_prone_annotations 2.28.0 -> 2.32.0 jetty 9.4.55.v20240627 -> 9.4.56.v20240826 jersey.version 2.43 -> 2.45
These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.
Upgraded netty to 4.1.112.Final .
Bump versions for following dependencies,
guava 33.1.0-jre -\> 33.2.1-jre commons-cli 1.6.0 -\> 1.8.0 error\_prone\_annotations 2.26.1 -\> 2.28.0 gson 2.10.1 -\> 2.11.0 jetty 9.4.54.v20240208 -\> 9.4.55.v20240627 jersey 2.42 -\> 2.43 jackson-jaxrs-json-provider 2.17.0 -\> 2.17.2
Bump protobuf-java version from 4.26.1 to 4.27.3.
These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.
Upgrade pre commit build to use docker image maven:3.9-eclipse-temurin-8.
Upgrade netty to 4.1.108.Final for addressing CVE-2024-29025
Bump versions for these dependencies
guava 33.0.0-jre -> 33.1.0-jre error_prone_annotations 2.21.1 -> 2.26.1 jersey.version 2.41 -> 2.42 jackson-jaxrs-json-provider 2.16.1 -> 2.17.0
Bump protobuf-java from 3.25.2 to 4.26.1.
These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.
These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.
Changed the flatten mode from default to oss. It will include these extra section in the published pom files:
name, description, url, developers, scm, inceptionYear, organization, mailingLists, issueManagement, distributionManagement.
apache parent pom 23 -> 30 maven-release-plugin ? -> 3.0.1 maven-clean-plugin ? -> 3.3.1 build-helper-maven-plugin 3.2.0 -> 3.4.0 buildnumber-maven-plugin 1.4 -> 3.1.0 maven-shade-plugin 3.2.4 -> 3.5.0 maven-compiler-plugin 3.8.1 -> 3.11.0 maven-dependency-plugin 3.2.0 -> 3.6.0 maven-source-plugin 3.2.0 -> 3.3.0 maven-antrun-plugin 3.0.0 -> 3.1.0 maven-enforcer-plugin 3.0.0 -> 3.4.1 extra-enforcer-rules 1.4 -> 1.7.0 flatten-maven-plugin 1.3.0 -> 1.5.0 nexus-staging-maven-plugin 1.6.8 -> 1.6.13
Add a hbase-shaded-netty-tcnative module for shading netty-tcnative-boringssl-static.
These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.
protobuf 3.21.9 -> 3.21.12 netty 4.1.86.Final -> 4.1.87.Final error prone 2.16 -> 2.18.0 gson 2.10 -> 2.10.1 jetty 9.4.49.v20220914 -> 9.4.50.v20221201 jersey 2,37 -> 2.38 jackson 2.14.0 ->2.14.1
These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.
protobuf 3.21.7 -> 3.21.9 netty 4.1.82.Final ->4.1.84.Final error prone 2.15.0 -> 2.16 gson 2.9.1 ->2.10 jackson 2.13.4 -> 2.14.0
Use ${revision} as placeholder for maven version in pom, so later you can use ‘mvn install -Drevision=xxx’ to specify the version at build time. After this change, you can not use mvn versions:set to bump the version, instead. you should just modify the parent pom to change the value of the ‘revision’ property in the properties section.
Use flatten maven plugin to resolve all the profiles and properties in the poms which are deployed.
These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.
protobuf 3.21.1 -> 3.21.7 netty 4.1.78.Final -> 4.1.82.Final error prone annotation 2.14.0 > 2.15.0 gson 2.9.0 -> 2.9.1 jetty 9.4.46.v20220331 -> 9.4.49.v20220914 jersey 2.36 -> 2.37 jackson 2.13.3 -> 2.13.4
These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.
protobuf 3.19.4 -> 3.21.1 netty 4.1.73.Final -> 4.1.78.Final guava 31.0.1-jre -> 31.1-jre error_prone_annotations 2.7.1 -> 2.14.0 gson 2.8.9 -> 2.9.0 jetty 9.4.44.v20210927 -> 9.4.46.v20220331 jersey.version 2.35 ->2.36
These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.
Introduced a new hbase-unsafe module in hbase-thirdparty.
Upgrade netty to 4.1.73.Final for addressing CVE-2021-43797.
Upgrade jackson databind from 2.10.1 -> 2.13.1.
For addressing a possible Dos attack described in https://github.com/FasterXML/jackson-databind/issues/3328.
These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.
Remove protobuf-java dependency from hbase-shaded-protobuf module, as we will unpack its source and patch it and then recompile from source. Also add a resources section to make sure that we include the proto files in the final jar.
These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.
Upgrade jersey version
2.32 -> 2.35
Add jersey-media-jaxb dependency.
Upgrade commons-cli version
1.4 -> 1.5.0
Upgrade versions of some maven plugins:
maven-dependency-plugin: 3.1.1 -> 3.2.0 build-helper-maven-plugin: 3.0.1-SNAPSHOT ->3.2.0 maven-compiler-plugi: ->3.8.1 maven-source-plugin: -> 3.2.0 maven-enforcer-plugin: 1.4.1 -> 3.0.0 extra-enforcer-rules: 1.3 -> 1.4
Upgrade guava version
30.1.1-jre -> 31.0.1-jre
Upgrade gson version
2.8.5 ->2.8.9
Upgrade jetty version
9.4.41.v20210516 -> 9.4.44.v20210927
Upgrade netty version
4.1.65.Final -> 4.1.70.Final
Bump version to 4.0.0-SNAPSHOT, drop JDK7 support.
Upgrade protobuf version
3.17.1 -> 3.19.1
These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.
protobuf 3.13.0 => 3.17.1 netty 4.1.63.Final => 4.1.65.Final guava 30.0-jre => 30.1.1-jre error_prone_annotations 2.3.4 => 2.7.1 jetty 9.4.39.v20210325 => 9.4.41.v20210516
We have a typo in our jersey relocation path, where we use ‘jersery’ instead of ‘jersey’.
This is a minor change, but indeed an incompatible change. But since hbase-thirdparty is only used by hbase, it is not a big problem for end users. We will update the thridparty dependency for all active branches.
Netty is upgrade to 4.1.63.Final due to security vulnerability CVE-2021-21295.
These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.
The HBase Thirdparty project now produces an artifact that is a drop in replacement for the defunct HTrace project's library. This artifact is binary and source compatible with the artifact produced by the HTrace incubating 4.2.0 release with the exception of APIs that expressly referred to the relocated version of Jackson it included.
To use this library you should remove the htrace-core4
jar file from your runtime classpath and add the hbase-noop-htrace
jar in its place.
For use in maven, add an exclusion to any dependencies that have a transitive dependency on HTrace:
<exclusions> <exclusion> <groupId>org.apache.htrace</groupId> <artifactId>htrace-core4</artifactId> </exclusion> </exclusions>
Once the HTrace library has been excluded you should add a dependency on the replacement implementation at an appropriate scope. e.g. for the first release that includes this artifact at the default (compile) scope:
<dependency> <groupId>org.apache.hbase.thirdparty</groupId> <artifactId>hbase-noop-htrace</artifactId> <version>3.5.0</version> </dependency>
For a detailed compatibility report between the libraries please see the attachments on jira for HBASE-24802.
These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.
netty 4.1.51.Final -> 4.1.53.Final protobuf 3.12.2 -> 3.13.0 guava 29.0-jre -> 30.0-jre
Update jersey version 2.31 -> 2.32
These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.
Jetty 9.4.30 -> 9.4.31 Shade jersey-hk2 in hbase-shaded-jersey.
Ignore module-info in enforceBytecodeVersion rule as it is for supporting for JDK9+ and will not break JDK8 support. Ignore SubmissionPublisher in enforceBytecodeVersion rule as it is used by jersey-common for supporting JDK11 and will not break JDK8 support. Jersey 2.x promises to support JDK8.
Remove the maven-assembly-plugin for generating src tarballs. We will generate it with ‘git archive’ command in release scripts.
netty 4.1.18.Final > 4.1.51.Final protobuf 3.11.4 -> 3.12.2
Introduce two new modules for hbase-thirdparty, one is hbase-shaded-jetty, for shading jetty related jars, and the other is hbase-shaded-jersey, for shading jersey related jars.
These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.
The hbase-thirdparty 3.2.0 release incorrectly listed gson upgrade. The gson version in 3.2.0 and 3.3.0 stayed on 2.8.5.
The version of Protobuf provided is now 3.11.4.
guava 28.2-jre => 29.0-jre
The version of Netty provided is now 4.1.48.Final. This is expected to be a compatible change from version 4.1.45.Final provided in the previous release.
These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.
guava: 28.1-jre => 28.2-jre error_prone: 2.3.3 => 2.3.4 netty: 4.1.42.Final => 4.1.44.Final protobuf: 3.9.2 => 3.11.1 maven-assembly-plugin: 3.1.1 => 3.2.0
These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.
These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.
HBASE-23088 | Major | [hbase-thirdparty] Upgrade the dependencies for hbase-thirdparty
netty-all: 4.1.34.Final => 4.1.42.Final guava: 27.1-jre => 28.1-jre commons-collections4: 4.3 => 4.4 protobuf: 3.7.1 => 3.9.2
These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.
HBase's internal use of GSON is now done in a stand alone module named hbase-shaded-gson
rather than as a part of the hbase-shaded-miscellaneous
module. The relocated fully qualified class names are still the same.
This internal artifact is also set to maintain JDK bytecode compatibility as appropriate for use with branches-1 based releases in addition to the existing use in later release lines.