Skip to content

(#2) Make indexer-elastic work with ES8.#3

Draft
blairlearn wants to merge 1 commit into
nci-developfrom
v1.22-with-es8
Draft

(#2) Make indexer-elastic work with ES8.#3
blairlearn wants to merge 1 commit into
nci-developfrom
v1.22-with-es8

Conversation

@blairlearn

Copy link
Copy Markdown
Collaborator

Dockerfile

  • Build with the v1.22-with-es8 branch.
  • Build and run Nutch with Java 17.

Address vulnerabilities

  • Update all io.netty packages to 4.1.135.Final
  • Update org.apache.cxf to v3.6.11
  • Update log4j to 2.25.4
  • Update org.apache.tika to 3.3.1.
  • Force override of Hadoop-managed packages:
    • com.nimbusds/nimbus-jose-jwt -> 9.37.4
    • org.apache.zookeeper/zookeeper -> 3.8.6
    • org.apache.zookeeper/zookeeper-jute -> 3.8.6
  • Update Jackson set to 2.18.6
  • Explicitly set jackson-core to 2.18.6
  • Override org.bouncycastle for org.apache.cxf, forcing to v1.84.
  • Override org.apache.commons2 for org.apache.hadoop, forcing to v2.15.0

@blairlearn blairlearn changed the title (#2) Make indexer-elastic to work with ES8. (#2) Make indexer-elastic work with ES8. Jul 16, 2026
@blairlearn
blairlearn force-pushed the v1.22-with-es8 branch 2 times, most recently from 8c6c9ca to 592cf7f Compare July 17, 2026 18:05
- Rewrite ElasticIndexRewriter to use elasticsearch-java-8.16.7.
- Add unit tests for ElasticIndexWriter.
- Add nci-develop to list of pull-request build triggers.
- Build/run on OpenJDK 17.
  - This mirrors the apache/nutch master branch.
  - Continues to target 11 for runtime.
- Patch vulnerabilities:
  - all io.netty packages to 4.1.135.Final
  - org.apache.cxf to v3.6.11
  - log4j from 2.52.2 to 2.25.4
  - org.apache.tika to 3.3.1.
-Added forced Hadoop-managed overrides:
  - com.nimbusds/nimbus-jose-jwt -> 9.37.4
  - org.apache.zookeeper/zookeeper -> 3.8.6
  - org.apache.zookeeper/zookeeper-jute -> 3.8.6
- Bumped root Jackson set to 2.18.6
- Added explicit jackson-core 2.18.6
- Override org.bouncycastle for org.apache.cxf, forcing it to v1.84.
- Override org.apache.commons2 for org.apache.hadoop, forcing to v2.15.0
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant