[HBASE-28022] Remove netty 3 dependency in the pom file for hbase-endpoint

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.6.0, 2.4.18, 2.5.6, 3.0.0-beta-1
• Component/s: dependencies, pom, security
• Hadoop Flags: Reviewed
• Assignee: Duo Zhang
• Reporter: Duo Zhang
• Created: 14/Aug/23 03:44
• Updated: 15/Aug/23 06:48
• Resolved: 14/Aug/23 08:15

Description

We have this in the hadoop-3.0 profile, which is not necessary and will trigger dependabot warnings about security problem. Hadoop mini cluster will pull in the necessary dependencies.

        <!-- Hadoop needs Netty 3.x at test scope for the minicluster -->
        <dependency>
          <groupId>io.netty</groupId>
          <artifactId>netty</artifactId>
          <version>3.6.2.Final</version>
          <scope>test</scope>
        </dependency>

Issue Links

• links to: GitHub Pull Request #5351