Uploaded image for project: 'Cassandra'
  1. Cassandra
  2. CASSANDRA-17750

Remove dependency on Maven Ant Tasks

    XMLWordPrintableJSON

Details

    Description

      Apache Cassandra depends on Maven Ant Tasks (MAT) during build, for declaring dependencies and generating POM files from within build.xml. MAT has long been retired (no commits since maintenance in 2015), has registered CVEs in dependencies (CVE-2017-1000487), and encourages migration to its successor, Maven Artifact Resolver Ant Tasks (MARAT).

      As part of CASSANDRA-16391 <https://issues.apache.org/jira/browse/CASSANDRA-16391>, mck migrated dependency resolution to MARAT, but MAT is still included in our build for generating POMs since MARAT does not have an alternative to the writepom task provided by MAT. I have a patch ready that removes MAT completely, with a workaround for POM generation.

      I am not advocating for any kind of migration away from Ant to an alternative like Gradle or Maven, just to be extra clear.

      Attachments

        Issue Links

          Activity

            People

              aratnofsky Abe Ratnofsky
              aratnofsky Abe Ratnofsky
              Abe Ratnofsky
              David Capwell, Ekaterina Dimitrova, Michael Semb Wever
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 10h 50m
                  10h 50m