Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[SPARK-50678][BUILD] Clean up outdated style check rules related to Guava #49302

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

LuciferYang
Copy link
Contributor

@LuciferYang LuciferYang commented Dec 26, 2024

What changes were proposed in this pull request?

The version of Guava being used by Spark is 33.3.1 now, so this pr cleans up the outdated check rules from dev/checkstyle.xml and scalastyle-config.xml

  • The current version of Guava no longer has the Objects.toStringHelper method, so this check rule is no longer needed
  • CVE-2020-8908 has been fixed after version 32.0.0, so the related check is no longer needed
  • CVE-2023-2976 has been fixed after version 32.0.0, so the related check is no longer needed
  • CVE-2018-10237 has been fixed after version 24.1.1, so the related check is no longer needed

Why are the changes needed?

Clean up outdated style check rules related to Guava

Does this PR introduce any user-facing change?

No

How was this patch tested?

Pass Github Actions

Was this patch authored or co-authored using generative AI tooling?

No

@LuciferYang LuciferYang marked this pull request as draft December 26, 2024 12:11
@github-actions github-actions bot added the BUILD label Dec 26, 2024
@LuciferYang
Copy link
Contributor Author

Test first

@LuciferYang LuciferYang changed the title Clean up outdated style check rules related to Guava [SPARK-50678][BUILD] Clean up outdated style check rules related to Guava Dec 26, 2024
@LuciferYang LuciferYang marked this pull request as ready for review December 26, 2024 12:37
<module name="RegexpSinglelineJava">
<property name="format" value="Files\.createTempDir\("/>
<property name="message"
value="Avoid using com.google.common.io.Files.createTempDir() due to CVE-2020-8908.
Copy link
Contributor Author

@LuciferYang LuciferYang Dec 26, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

cc @dongjoon-hyun
Do you think we can clean up these check rules now?
Are there any edge cases that I haven't considered? Thanks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant