File tree Expand file tree Collapse file tree 6 files changed +113
-0
lines changed
hive-metastore-opa-authorizer Expand file tree Collapse file tree 6 files changed +113
-0
lines changed Original file line number Diff line number Diff line change @@ -59,3 +59,20 @@ aws-java-sdk-bundle-version = "2.29.52"
5959azure-storage-version = " 7.0.1"
6060# Keep consistent with the dependency from azure-storage: https://mvnrepository.com/artifact/com.microsoft.azure/azure-storage/7.0.1
6161azure-keyvault-core-version = " 1.0.0"
62+
63+ [versions ."4 .2 .0" .local-images ]
64+ # Hive 4.2 requires Java 21 (according to GitHub README)
65+ java-base = " 21"
66+ java-devel = " 21"
67+ "hadoop/hadoop" = " 3.4.2"
68+ # hive-metastore-opa-authorizer from: https://github.com/boschglobal/hive-metastore-opa-authorizer
69+ "hive/hive-metastore-opa-authorizer" = " v1.0.0-hive-4.2.0-hadoop-3.4.2"
70+
71+ [versions ."4 .2 .0" .build-arguments ]
72+ jmx-exporter-version = " 1.3.0"
73+ # Keep consistent with the dependency from hadoop-aws: https://mvnrepository.com/artifact/org.apache.hadoop/hadoop-aws/3.4.2 TODO: CHECK!
74+ aws-java-sdk-bundle-version = " 2.29.52"
75+ # Keep consistent with the dependency from hadoop-azure: https://mvnrepository.com/artifact/org.apache.hadoop/hadoop-azure/3.4.2 TODO: CHECK!
76+ azure-storage-version = " 7.0.1"
77+ # Keep consistent with the dependency from azure-storage: https://mvnrepository.com/artifact/com.microsoft.azure/azure-storage/7.0.1 TODO: CHECK!
78+ azure-keyvault-core-version = " 1.0.0"
Original file line number Diff line number Diff line change @@ -33,3 +33,12 @@ delete-caches = "true"
3333authorizer-version = " v1.0.0"
3434hive-version = " 4.1.0"
3535delete-caches = " true"
36+
37+ [versions ."v1 .0 .0-hive-4 .2 .0-hadoop-3 .4 .2" .local-images ]
38+ "java-devel" = " 21"
39+ "hadoop/hadoop" = " 3.4.2"
40+
41+ [versions ."v1 .0 .0-hive-4 .2 .0-hadoop-3 .4 .2" .build-arguments ]
42+ authorizer-version = " v1.0.0"
43+ hive-version = " 4.2.0"
44+ delete-caches = " true"
Original file line number Diff line number Diff line change 1+ From f7913f5ee840dc277301fcb0f18e04be7849ab5c Mon Sep 17 00:00:00 2001
2+ From: Malte Sander <malte.sander.it@gmail.com>
3+ Date: Tue, 25 Nov 2025 11:29:03 +0100
4+ Subject: Include Postgres driver
5+
6+ ---
7+ standalone-metastore/metastore-server/pom.xml | 1 -
8+ standalone-metastore/pom.xml | 1 -
9+ 2 files changed, 2 deletions(-)
10+
11+ diff --git a/standalone-metastore/metastore-server/pom.xml b/standalone-metastore/metastore-server/pom.xml
12+ index fa2418f205..0e24b3ebc9 100644
13+ --- a/standalone-metastore/metastore-server/pom.xml
14+ +++ b/standalone-metastore/metastore-server/pom.xml
15+ @@ -338,7 +338,6 @@
16+ <dependency>
17+ <groupId>org.postgresql</groupId>
18+ <artifactId>postgresql</artifactId>
19+ - <optional>true</optional>
20+ </dependency>
21+ <dependency>
22+ <groupId>org.eclipse.jetty</groupId>
23+ diff --git a/standalone-metastore/pom.xml b/standalone-metastore/pom.xml
24+ index bd6f2227b6..0bf9d09c0b 100644
25+ --- a/standalone-metastore/pom.xml
26+ +++ b/standalone-metastore/pom.xml
27+ @@ -435,7 +435,6 @@
28+ <groupId>org.postgresql</groupId>
29+ <artifactId>postgresql</artifactId>
30+ <version>${postgres.version}</version>
31+ - <scope>runtime</scope>
32+ </dependency>
33+ <dependency>
34+ <groupId>org.apache.httpcomponents</groupId>
Original file line number Diff line number Diff line change 1+ From 8a74bc78eb3ed664e698dd41be25107a495a018e Mon Sep 17 00:00:00 2001
2+ From: Malte Sander <malte.sander.it@gmail.com>
3+ Date: Tue, 25 Nov 2025 11:30:24 +0100
4+ Subject: Include logging dependencies
5+
6+ ---
7+ standalone-metastore/pom.xml | 5 +++++
8+ 1 file changed, 5 insertions(+)
9+
10+ diff --git a/standalone-metastore/pom.xml b/standalone-metastore/pom.xml
11+ index 0bf9d09c0b..40bd4fcd83 100644
12+ --- a/standalone-metastore/pom.xml
13+ +++ b/standalone-metastore/pom.xml
14+ @@ -582,6 +582,11 @@
15+ <groupId>com.fasterxml.jackson.core</groupId>
16+ <artifactId>jackson-databind</artifactId>
17+ </dependency>
18+ + <dependency>
19+ + <!-- Optional log4j dependency to be able to use the XmlLayout -->
20+ + <groupId>com.fasterxml.jackson.dataformat</groupId>
21+ + <artifactId>jackson-dataformat-xml</artifactId>
22+ + </dependency>
23+ </dependencies>
24+ <build>
25+ <pluginManagement>
Original file line number Diff line number Diff line change 1+ From 4095defdcf9e049dfa5a7c9b279760ea30615465 Mon Sep 17 00:00:00 2001
2+ From: Malte Sander <malte.sander.it@gmail.com>
3+ Date: Tue, 25 Nov 2025 11:31:34 +0100
4+ Subject: Fix CVE-2024-36114
5+
6+ ---
7+ standalone-metastore/pom.xml | 6 ++++++
8+ 1 file changed, 6 insertions(+)
9+
10+ diff --git a/standalone-metastore/pom.xml b/standalone-metastore/pom.xml
11+ index 40bd4fcd83..34eb45fb96 100644
12+ --- a/standalone-metastore/pom.xml
13+ +++ b/standalone-metastore/pom.xml
14+ @@ -157,6 +157,12 @@
15+ <version>${netty.version}</version>
16+ <classifier>linux-x86_64</classifier>
17+ </dependency>
18+ + <!-- Mitigate CVE-2024-36114: See https://github.com/stackabletech/vulnerabilities/issues/834 -->
19+ + <dependency>
20+ + <groupId>io.airlift</groupId>
21+ + <artifactId>aircompressor</artifactId>
22+ + <version>0.27</version>
23+ + </dependency>
24+ <dependency>
25+ <groupId>org.apache.orc</groupId>
26+ <artifactId>orc-core</artifactId>
Original file line number Diff line number Diff line change 1+ mirror = " https://github.com/stackabletech/hive.git"
2+ base = " cb06ad72d609e51b6a3a38ccb120e34b4281067c"
You can’t perform that action at this time.
0 commit comments