[DRILL-7135] Upgrade to Jetty 9.4

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 1.15.0
• Fix Version/s: 1.19.0
• Assignee: Laurent Goujon
• Reporter: Vitalii Diravka
• Reviewer: Paul Rogers
• Created: 25/Mar/19 01:21
• Updated: 27/May/21 23:50
• Resolved: 27/May/21 23:48

Description

Initially DRILL-7051 updated Jetty to 9.4 version and DRILL-7081 updated Jersey version to 2.28 version. These versions work fine for Drill with Hadoop version below 3.0.
Starting from Hadoop 3.0 it uses org.eclipse.jetty 9.3 version.
That's why it conflicts with newer Jetty&Jersey versions.

Drill can update Jetty and Jersey versions after resolution HADOOP-14930 and HBASE-19256.
Or alternatively these libs can be shaded in Drill, but there is no real reason to do it nowadays.

See details in #1681 PR.

Notes:

• For Jersey update it is necessary to add org.glassfish.jersey.inject:jersey-hk2 in Drill to solve all compilation failures.
• See doc for Jetty update: https://www.eclipse.org/jetty/documentation/9.4.x/upgrading-jetty.html

Issue Links

• depends upon: HADOOP-14930 Upgrade Jetty to 9.4 version
• depends upon: HBASE-19256 [hbase-thirdparty] shade jetty
• fixes: DRILL-7162 <SECURITY ISSUE> Apache Drill uses 3rd Party with Highest CVEs
• fixes: DRILL-7932 Update Hadoop version to 3.2.2.
• is depended upon by: DRILL-7162 <SECURITY ISSUE> Apache Drill uses 3rd Party with Highest CVEs
• is part of: DRILL-7051 Upgrade to Jetty 9.3