chore: update CHANGELOG for version 0.3.1

- Added security improvements, including SQL injection protection.
- Enhanced error handling and fixed various bugs.
- Removed dead code to streamline the codebase.

Author: danieljhkim

CHANGELOG.md

@@ -4,6 +4,14 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
+## [0.3.1] - 2026-02-14
+
+### Changed
+- security improvements, SQL injection protection
+- improved error handling
+- bug fixes
+- dead code removal
+
 ## [0.3.0] - 2026-02-14
 
 ### Added

internal/env/detect.go

@@ -43,12 +43,17 @@ func NewJavaDetector() *JavaDetector {
 	return &JavaDetector{}
 }
 
-// FindJavaHome returns the hardcoded Java 17 path from Homebrew installation
-// Java 17 is automatically downloaded via brew during installation
+// FindJavaHome returns the Java 17 path from Homebrew installation.
+// Checks both ARM (/opt/homebrew) and Intel (/usr/local) Homebrew prefixes.
 func (j *JavaDetector) FindJavaHome() string {
-	const java17Home = "/opt/homebrew/opt/openjdk@17"
-	if _, err := os.Stat(java17Home); err == nil {
-		return java17Home
+	candidates := []string{
+		"/opt/homebrew/opt/openjdk@17", // ARM Mac
+		"/usr/local/opt/openjdk@17",    // Intel Mac
+	}
+	for _, path := range candidates {
+		if _, err := os.Stat(path); err == nil {
+			return path
+		}
 	}
 	return ""
 }

internal/service/hdfs/discovery.go

@@ -139,21 +139,6 @@ func IsProcessRunning(pid int) bool {
 	return err == nil
 }
 
-// GetProcessInfo returns information about a process
-func GetProcessInfo(pid int) string {
-	if pid == 0 {
-		return ""
-	}
-
-	cmd := exec.Command("ps", "-p", strconv.Itoa(pid), "-o", "command=")
-	output, err := cmd.Output()
-	if err != nil {
-		return ""
-	}
-
-	return strings.TrimSpace(string(output))
-}
-
 // WaitForSafeMode waits for HDFS to exit safe mode
 // Returns error if timeout is reached
 func WaitForSafeMode(maxRetries int) error {

internal/service/hdfs/hdfs.go

@@ -129,7 +129,9 @@ func (h *HDFSService) startNameNode() error {
 		// Update PID file
 		hdfsPaths := h.paths.HDFSPaths()
 		pidFile := filepath.Join(hdfsPaths.PidsDir, "namenode.pid")
-		os.WriteFile(pidFile, []byte(fmt.Sprintf("%d", pid)), 0644)
+		if err := os.WriteFile(pidFile, []byte(fmt.Sprintf("%d", pid)), 0644); err != nil {
+			util.Warn("Failed to update NameNode PID file: %v", err)
+		}
 		util.Log("HDFS NameNode already running (pid %d).", pid)
 		return nil
 	}
@@ -171,7 +173,9 @@ func (h *HDFSService) startDataNode() error {
 		// Update PID file
 		hdfsPaths := h.paths.HDFSPaths()
 		pidFile := filepath.Join(hdfsPaths.PidsDir, "datanode.pid")
-		os.WriteFile(pidFile, []byte(fmt.Sprintf("%d", pid)), 0644)
+		if err := os.WriteFile(pidFile, []byte(fmt.Sprintf("%d", pid)), 0644); err != nil {
+			util.Warn("Failed to update DataNode PID file: %v", err)
+		}
 		util.Log("HDFS DataNode already running (pid %d).", pid)
 		return nil
 	}

internal/service/hive/metastore_bootstrap.go

@@ -138,6 +138,9 @@ func (h *HiveService) databaseExists(dbType metastore.DBType, dbURL string) (boo
 		if err != nil {
 			return false, err
 		}
+		if !dbIdentPattern.MatchString(dbName) {
+			return false, fmt.Errorf("unsupported postgres database name %q", dbName)
+		}
 		sql := fmt.Sprintf("SELECT 1 FROM pg_database WHERE datname='%s';", escapeSQLLiteral(dbName))
 		cmd := exec.Command("psql", adminURL, "-tAc", sql)
 		cmd.Env = h.env.Export()
@@ -151,11 +154,14 @@ func (h *HiveService) databaseExists(dbType metastore.DBType, dbURL string) (boo
 		if err != nil {
 			return false, err
 		}
+		if !dbIdentPattern.MatchString(info.dbName) {
+			return false, fmt.Errorf("unsupported mysql database name %q", info.dbName)
+		}
 		args := mysqlBaseArgs(info)
 		query := fmt.Sprintf("SELECT SCHEMA_NAME FROM INFORMATION_SCHEMA.SCHEMATA WHERE SCHEMA_NAME='%s';", escapeSQLLiteral(info.dbName))
 		args = append(args, "-e", query)
 		cmd := exec.Command("mysql", args...)
-		cmd.Env = h.env.Export()
+		cmd.Env = mysqlCmdEnv(h.env.Export(), info)
 		out, err := cmd.CombinedOutput()
 		if err != nil {
 			return false, fmt.Errorf("mysql database existence check failed: %v\nOutput: %s", err, strings.TrimSpace(string(out)))
@@ -195,7 +201,7 @@ func (h *HiveService) createDatabase(dbType metastore.DBType, dbURL string) erro
 		args := mysqlBaseArgs(info)
 		args = append(args, "-e", fmt.Sprintf("CREATE DATABASE `%s`;", info.dbName))
 		cmd := exec.Command("mysql", args...)
-		cmd.Env = h.env.Export()
+		cmd.Env = mysqlCmdEnv(h.env.Export(), info)
 		out, err := cmd.CombinedOutput()
 		if err != nil {
 			return fmt.Errorf("failed to create mysql database %q: %v\nOutput: %s", info.dbName, err, strings.TrimSpace(string(out)))
@@ -261,10 +267,18 @@ func mysqlBaseArgs(info *mysqlConnInfo) []string {
 	if info.user != "" {
 		args = append(args, "--user", info.user)
 	}
+	// Password is passed via MYSQL_PWD env var in mysqlCmdEnv() to avoid
+	// exposing it in process listings (ps aux).
+	return args
+}
+
+// mysqlCmdEnv returns environment variables for MySQL commands,
+// including MYSQL_PWD if a password is set.
+func mysqlCmdEnv(baseEnv []string, info *mysqlConnInfo) []string {
 	if info.password != "" {
-		args = append(args, fmt.Sprintf("--password=%s", info.password))
+		return append(baseEnv, "MYSQL_PWD="+info.password)
 	}
-	return args
+	return baseEnv
 }
 
 func escapeSQLLiteral(s string) string {

internal/service/hive/mysql.go

@@ -6,6 +6,8 @@ import (
 	"path/filepath"
 	"sort"
 	"strings"
+
+	"github.com/danieljhkim/local-data-platform/internal/util"
 )
 
 const DefaultMySQLJDBCVersion = "8.4.0"
@@ -60,7 +62,9 @@ func EnsureMySQLJDBCDriver(hiveHome, sparkHome, baseDir string) (string, error)
 
 	if sparkJarsDir != "" {
 		if _, err := findMySQLJar(sparkJarsDir); err != nil {
-			_ = ensureJarInSparkDir(foundJar, sparkJarsDir)
+			if copyErr := ensureJarInSparkDir(foundJar, sparkJarsDir); copyErr != nil {
+				util.Warn("Could not copy MySQL JDBC driver to %s: %v", sparkJarsDir, copyErr)
+			}
 		}
 	}
 

internal/service/yarn/yarn.go

@@ -7,6 +7,7 @@ import (
 	"path/filepath"
 	"strconv"
 	"strings"
+	"syscall"
 	"time"
 
 	"github.com/danieljhkim/local-data-platform/internal/config"
@@ -81,7 +82,9 @@ func (y *YARNService) startResourceManager() error {
 	pid = findWithJPS("ResourceManager")
 	if pid > 0 && isProcessRunning(pid) {
 		pidFile := filepath.Join(y.procMgr.PidDir, name+".pid")
-		os.WriteFile(pidFile, []byte(strconv.Itoa(pid)), 0644)
+		if err := os.WriteFile(pidFile, []byte(strconv.Itoa(pid)), 0644); err != nil {
+			util.Warn("Failed to update ResourceManager PID file: %v", err)
+		}
 		util.Log("YARN ResourceManager already running (pid %d).", pid)
 		return nil
 	}
@@ -115,7 +118,9 @@ func (y *YARNService) startNodeManager() error {
 	pid = findWithJPS("NodeManager")
 	if pid > 0 && isProcessRunning(pid) {
 		pidFile := filepath.Join(y.procMgr.PidDir, name+".pid")
-		os.WriteFile(pidFile, []byte(strconv.Itoa(pid)), 0644)
+		if err := os.WriteFile(pidFile, []byte(strconv.Itoa(pid)), 0644); err != nil {
+			util.Warn("Failed to update NodeManager PID file: %v", err)
+		}
 		util.Log("YARN NodeManager already running (pid %d).", pid)
 		return nil
 	}
@@ -271,7 +276,7 @@ func isProcessRunning(pid int) bool {
 		return false
 	}
 
-	err = process.Signal(os.Signal(nil))
+	err = process.Signal(syscall.Signal(0))
 	return err == nil
 }