1. Remove the `hbase-shaded-jetty` from `org.apache.hudi:hudi-common`
2. ignore spark-core: Because the jetty-server code is copied in the spark-core package, the jetty-server code version is 9.4.56.v20240826, which has a vulnerability risk: CVE-2024-13009. However, the latest version of spark-core does not update the jetty-server version, so we can only ignore it.
Signed-off-by: gengjun-git <gengjun@starrocks.com>
yan zhang
gengjun-git
Jiao Mingye
Smith Cruise