# 🔍 Description This PR removes two dependencies from the `kyuubi-rest-client` module - `commons-collections` - has CVE Cx78f40514-81ff and is only used in one place, just rewrite to remove the dependency - `javax.servlet-api` - only used for UT, correct the scope from `compile` to `test` ## Types of changes 🔖 - [ ] Bugfix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ] Breaking change (fix or feature that would cause existing functionality to change) ## Test Plan 🧪 Pass GHA --- # Checklist 📝 - [x] This patch was not authored or co-authored using [Generative Tooling](https://www.apache.org/legal/generative-tooling.html) **Be nice. Be informative.** Closes #6457 from pan3793/rest-client-dep. Closes #6457 c24af70ac [Cheng Pan] dep list 80969d0d3 [Cheng Pan] nit 950d4b730 [Cheng Pan] fix 169281903 [Cheng Pan] fix import c068ba10f [Cheng Pan] nit d46653d53 [Cheng Pan] fix ca7831732 [Cheng Pan] Strip dependencies from REST client Authored-by: Cheng Pan <chengpan@apache.org> Signed-off-by: Cheng Pan <chengpan@apache.org> |
||
|---|---|---|
| .. | ||
| src | ||
| pom.xml | ||