[Snyk] Security upgrade org.apache.hive:hive-metastore from 2.3.4 to 4.2.0

[snyk-io]

Snyk has created this PR to fix 1 vulnerabilities in the maven dependencies of this project.

Snyk changed the following file(s):

• packaging/hudi-flink-bundle/pom.xml

---

This is a major upgrade from Hive 2.x to 4.x, which includes multiple significant breaking changes. The Hive 2.x and 3.x release lines are now End-of-Life. Key changes involve the metastore database schema, table management, execution engines, and API signatures.

Highlights:

• Metastore Schema Upgrade: The underlying database schema for the Hive Metastore must be manually upgraded. Scripts are provided for common databases like PostgreSQL, MySQL, and Oracle.
• Execution Engine: Support for MapReduce has been removed in favor of Tez.
• API and Table Management: All non-transactional managed tables must be converted to external tables. Additionally, some Thrift API signatures have changed, such as delete_table_column_statistics which now requires a new engine argument.

Source: Apache Hive Documentation
Recommendation: This upgrade requires careful planning and execution. Follow the official multi-step migration guides for upgrading from 2.x to 3.x and then to 4.x. A full backup and pre-production validation are essential.

Notice 🤖: This content was generated using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

---

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score	Upgrade
	LDAP Injection SNYK-JAVA-ORGAPACHEDERBY-6069877	101	org.apache.hive:hive-metastore: 2.3.4 -> 4.2.0 Major version upgrade No Path Found No Known Exploit

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 LDAP Injection

[snyk-io]

⛔ Snyk checks have failed. 17 issues have been found so far.

Status	Scanner	Critical	High	Medium	Low	Total (17)
✅	Open Source Security	3	11	0	0	14 issues
⛔	Licenses	0	3	0	0	3 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.