opensearch-project / opensearch-project/sql
[FEATURE] Upgrade druid version to > 1.2.4
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 176
- Forks
- 229
- Avg merge
- 2d 21h
- Merged PRs (30d)
- 43
Description
Is your feature request related to a problem?
The version of druid used in legacy code path is outdated leading to certain issues with respect to security.
What solution would you like?
Druid version to be upgraded to >1.2.4
What alternatives have you considered?
Other alternatives are to override the version externally, however it is not compatible with some of the code in legacy path of sql plugin.
Do you have any additional context?
Additional context has been sent in an email to the security team of opensearch.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the Druid dependency used by the legacy code path of the SQL plugin and review how its current version is constrained. Check compatibility with a version greater than 1.2.4, especially around the reported security issue and legacy-path behavior. Done means the dependency is upgraded without breaking that code path, with validation from the plugin's existing checks.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- databases
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100