JanusGraph / JanusGraph/janusgraph

EOL version components update

Open
#2,677 1 comment 1 reaction 0 assignees View on GitHub
Dominant language
Java
Stars
5.8k
Forks
1.2k
Avg merge
13h 53m
Merged PRs (30d)
6

Description

**Describe the feature:**
With Janus 0.5.3 there are some components which are either old or else EOL.

Old version used:
hppc-0.7.1.jar
jcabi-log-0.14.jar
noggit-0.6.jar

EOL version used:
commons-collections-3.2.2.jar
commons-configuration-1.10.jar
commons-lang-2.6.jar
javapoet-1.8.0.jar

Following up on janusgraph-users got an update that the incoming 0.6.0 release contains following updates:
hppc: 0.8.0
noggit: 0.8
commons-configuration2: 2.7
commons-lang3: 3.11

However there exists following components which needs an update and hence this request:
commons-collections-3.2.2.jar
javapoet-1.8.0.jar
jcabi-log-0.14.jar

**Describe a specific use case for the feature:**
From product security and vulnerability aspects this is one of the requirement to not use EOL component versions being used in JanusGraph.

Contributor guide

Open the contributing guide

Research direction

Locate the dependency declarations for commons-collections, javapoet, and jcabi-log, then review the versions already updated in the 0.6.0 release. Determine compatible non-EOL versions and check the project’s dependency or build tests. Done means the remaining outdated components are updated without breaking the build or related tests.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
databases, distributed-systems
Issue type
Refactor
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.