MLE-29543: Bump nifi version to 2.9.0 to avoid CVEs#263
Conversation
There was a problem hiding this comment.
Pull request overview
This PR upgrades the MarkLogic NiFi connector build and documentation to target Apache NiFi 2.9.0, primarily to pick up updated transitive dependencies and address reported CVEs.
Changes:
- Bump the Apache NiFi parent and
${nifi.version}property to 2.9.0. - Update documentation/manual testing assets to reference NiFi 2.9.0.
- Upgrade
maven-failsafe-pluginfrom a milestone version to 3.5.5.
Reviewed changes
Copilot reviewed 5 out of 5 changed files in this pull request and generated 1 comment.
Show a summary per file
| File | Description |
|---|---|
| README.md | Updates the “developed and tested on” NiFi version to 2.9.0. |
| pom.xml | Bumps NiFi parent and ${nifi.version} to 2.9.0 for build/dependency alignment. |
| nifi-marklogic-processors/pom.xml | Updates maven-failsafe-plugin version to a stable release (3.5.5). |
| nifi-marklogic-processors/flows-for-manual-testing.json | Updates embedded NiFi bundle version references to 2.9.0 for manual testing flows. |
| docs/index.md | Updates system requirements text to state testing on NiFi 2.9.0+. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| data to be easily written to and read from MarkLogic. The connector consists of a set of custom NiFi processors and | ||
| controller services which can be used in NiFi flows for integrating with MarkLogic. The connector has been developed | ||
| and tested on NiFi 2.5.0; it may work in more recent versions of NiFi too. | ||
| and tested on NiFi 2.9.0; it may work in more recent versions of NiFi too. |
There was a problem hiding this comment.
Add that it may work on earlier versions of NiFi 2 as well. The main risk of it not working on an older version of NiFi 2 is if we modify part of our connector to depend on a newer API in e.g. NiFi 2.9 that's not in NiFi 2.8. But we haven't yet done that, so it's likely that it works on all versions of NiFi 2.x.
There was a problem hiding this comment.
Ok making modification, will force push the changes.
stevebio
force-pushed
the
29543-bump-deps-cve
branch
from
3cadc03 to
ce32dd4
Compare
Upgrade Nifi to 2.9.0. Compatible incremental release, no code changes required. Transitive dependencies in Nifi updated to clear CVEs.