JanusGraph / JanusGraph/janusgraph
EOL version components update
- Dominant language
- Java
- Stars
- 5.8k
- Forks
- 1.2k
- Avg merge
- 13h 53m
- Merged PRs (30d)
- 6
Description
**Describe the feature:**
With Janus 0.5.3 there are some components which are either old or else EOL.
Old version used:
hppc-0.7.1.jar
jcabi-log-0.14.jar
noggit-0.6.jar
EOL version used:
commons-collections-3.2.2.jar
commons-configuration-1.10.jar
commons-lang-2.6.jar
javapoet-1.8.0.jar
Following up on janusgraph-users got an update that the incoming 0.6.0 release contains following updates:
hppc: 0.8.0
noggit: 0.8
commons-configuration2: 2.7
commons-lang3: 3.11
However there exists following components which needs an update and hence this request:
commons-collections-3.2.2.jar
javapoet-1.8.0.jar
jcabi-log-0.14.jar
**Describe a specific use case for the feature:**
From product security and vulnerability aspects this is one of the requirement to not use EOL component versions being used in JanusGraph.
Contributor guide
Research direction
Locate the dependency declarations for commons-collections, javapoet, and jcabi-log, then review the versions already updated in the 0.6.0 release. Determine compatible non-EOL versions and check the project’s dependency or build tests. Done means the remaining outdated components are updated without breaking the build or related tests.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- databases, distributed-systems
- Issue type
- Refactor
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100