optimize: remove fst serialization (apache#6002)

Author: funky-eyes

all/pom.xml

@@ -254,11 +254,6 @@
             <artifactId>seata-serializer-kryo</artifactId>
             <version>${project.version}</version>
         </dependency>
-        <dependency>
-            <groupId>io.seata</groupId>
-            <artifactId>seata-serializer-fst</artifactId>
-            <version>${project.version}</version>
-        </dependency>
         <dependency>
             <groupId>io.seata</groupId>
             <artifactId>seata-serializer-hessian</artifactId>
@@ -586,11 +581,6 @@
             <artifactId>kryo</artifactId>
             <scope>provided</scope>
         </dependency>
-        <dependency>
-            <groupId>de.ruedigermoeller</groupId>
-            <artifactId>fst</artifactId>
-            <scope>provided</scope>
-        </dependency>
         <dependency>
             <groupId>com.dameng</groupId>
             <artifactId>DmJdbcDriver18</artifactId>

bom/pom.xml

@@ -270,11 +270,6 @@
                 <artifactId>seata-serializer-hessian</artifactId>
                 <version>${project.version}</version>
             </dependency>
-            <dependency>
-                <groupId>io.seata</groupId>
-                <artifactId>seata-serializer-fst</artifactId>
-                <version>${project.version}</version>
-            </dependency>
             <dependency>
                 <groupId>io.seata</groupId>
                 <artifactId>seata-spring-boot-starter</artifactId>

changes/en-us/2.0.0.md

@@ -149,6 +149,8 @@ The version is updated as follows:
 - [[#5938](https://github.com/seata/seata/pull/5938)] support jmx port in seata
 - [[#5951](https://github.com/seata/seata/pull/5951)] remove un support config in jdk17
 - [[#5959](https://github.com/seata/seata/pull/5959)] modify code style and remove unused import
+- [[#6002](https://github.com/seata/seata/pull/6002)] remove fst serialization
+
 
 ### security:
 - [[#5642](https://github.com/seata/seata/pull/5642)] add Hessian Serializer WhiteDenyList

changes/zh-cn/2.0.0.md

@@ -150,6 +150,7 @@ Seata 是一款开源的分布式事务解决方案，提供高性能和简单
 - [[#5938](https://github.com/seata/seata/pull/5938)] 支持 jmx 监控配置
 - [[#5951](https://github.com/seata/seata/pull/5951)] 删除在 jdk17 中不支持的配置项
 - [[#5959](https://github.com/seata/seata/pull/5959)] 修正代码风格问题及去除无用的类引用
+- [[#6002](https://github.com/seata/seata/pull/6002)] 移除fst序列化模块
 
 
 ### security:

core/src/main/java/io/seata/core/serializer/SerializerType.java

@@ -44,7 +44,7 @@ public enum SerializerType {
     KRYO((byte)0x4),
 
     /**
-     * The fst.
+     * The fst but it's been removed.
      * <p>
      * Math.pow(2, 3)
      */
@@ -56,8 +56,9 @@ public enum SerializerType {
      * Math.pow(2, 4)
      */
     HESSIAN((byte)0x16),
+
     /**
-     * The hessian.
+     * The jackson.
      * <p>
      * Math.pow(2, 5)
      */
@@ -82,6 +83,10 @@ public static SerializerType getByCode(int code) {
                 return b;
             }
         }
+        if (code == SerializerType.FST.getCode()) {
+            throw new IllegalArgumentException(
+                "Since fst is no longer maintained, this serialization extension has been removed from version 2.0 for security and stability reasons.");
+        }
         throw new IllegalArgumentException("unknown codec:" + code);
     }
 

dependencies/pom.xml

@@ -78,7 +78,6 @@
         <kryo.version>5.4.0</kryo.version>
         <kryo-serializers.version>0.45</kryo-serializers.version>
         <hessian.version>4.0.63</hessian.version>
-        <fst.version>2.57</fst.version>
         <groovy.version>2.4.4</groovy.version>
         <zstd.version>1.5.0-4</zstd.version>
         <xstream.version>1.4.20</xstream.version>
@@ -561,11 +560,6 @@
                 <artifactId>hessian</artifactId>
                 <version>${hessian.version}</version>
             </dependency>
-            <dependency>
-                <groupId>de.ruedigermoeller</groupId>
-                <artifactId>fst</artifactId>
-                <version>${fst.version}</version>
-            </dependency>
             <dependency>
                 <groupId>org.apache.commons</groupId>
                 <artifactId>commons-compress</artifactId>

rm-datasource/pom.xml

@@ -103,12 +103,6 @@
             <scope>provided</scope>
             <optional>true</optional>
         </dependency>
-        <dependency>
-            <groupId>de.ruedigermoeller</groupId>
-            <artifactId>fst</artifactId>
-            <scope>provided</scope>
-            <optional>true</optional>
-        </dependency>
         <dependency>
             <groupId>com.alibaba</groupId>
             <artifactId>fastjson</artifactId>

rm-datasource/src/main/java/io/seata/rm/datasource/undo/UndoLogParserFactory.java

@@ -17,6 +17,7 @@
 
 import io.seata.common.loader.EnhancedServiceLoader;
 import io.seata.common.util.CollectionUtils;
+import io.seata.common.util.StringUtils;
 
 import java.util.concurrent.ConcurrentHashMap;
 import java.util.concurrent.ConcurrentMap;
@@ -58,6 +59,10 @@ public static UndoLogParser getInstance() {
      * @return the UndoLogParser
      */
     public static UndoLogParser getInstance(String name) {
+        if (StringUtils.equalsIgnoreCase("fst", name)) {
+            throw new IllegalArgumentException(
+                "Since fst is no longer maintained, this serialization extension has been removed from version 2.0 for security and stability reasons.");
+        }
         return CollectionUtils.computeIfAbsent(INSTANCES, name,
             key -> EnhancedServiceLoader.load(UndoLogParser.class, name));
     }