You are viewing a plain text version of this content. The canonical link for it is here.
Posted to submarine-dev@hadoop.apache.org by li...@apache.org on 2019/10/14 02:57:27 UTC

[hadoop-submarine] branch master updated: [SUBMARINE-220] Update Java dependency.

This is an automated email from the ASF dual-hosted git repository.

liuxun pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/hadoop-submarine.git


The following commit(s) were added to refs/heads/master by this push:
     new 8b74630  [SUBMARINE-220] Update Java dependency.
8b74630 is described below

commit 8b74630166d81efbab9092472a8961485ad5c8b9
Author: Wei-Chiu Chuang <we...@cloudera.com>
AuthorDate: Tue Oct 8 17:55:13 2019 -0700

    [SUBMARINE-220] Update Java dependency.
    
    ### What is this PR for?
    Update java dependencies with known CVEs.
    
    ### What type of PR is it?
    Improvement
    
    ### Todos
    * [ ] - Task
    
    ### What is the Jira issue?
    https://issues.apache.org/jira/browse/SUBMARINE-220
    
    ### How should this be tested?
    [Travis CI](https://travis-ci.org/jojochuang/hadoop-submarine/builds/595393903)
    
    ### Screenshots (if appropriate)
    
    ### Questions:
    * Does the licenses files need update? No
    * Is there breaking changes for older versions? No
    * Does this needs documentation? No
    
    Author: Wei-Chiu Chuang <we...@cloudera.com>
    
    Closes #38 from jojochuang/SUBMARINE-220 and squashes the following commits:
    
    ae88661 [Wei-Chiu Chuang] SUBMARINE-220. Update dependency.
---
 pom.xml | 14 ++++++--------
 1 file changed, 6 insertions(+), 8 deletions(-)

diff --git a/pom.xml b/pom.xml
index 810e430..0889d8a 100644
--- a/pom.xml
+++ b/pom.xml
@@ -62,8 +62,8 @@
     <pagehelper.version>5.1.10</pagehelper.version>
 
     <gson.version>2.8.1</gson.version>
-    <jackson-databind.version>2.9.9.1</jackson-databind.version>
-    <jackson-annotations.version>2.9.9</jackson-annotations.version>
+    <jackson-databind.version>2.9.10</jackson-databind.version>
+    <jackson-annotations.version>2.9.10</jackson-annotations.version>
     <commons-configuration.version>1.10</commons-configuration.version>
 
     <cglib.version>2.2.2</cglib.version>
@@ -90,19 +90,17 @@
     <testng.version>6.4</testng.version>
     <avro.version>1.8.2</avro.version>
     <httpclient.version>4.5.2</httpclient.version>
-    <jackson-databind.version>2.7.8</jackson-databind.version>
-    <jackson-dataformat-yaml.version>2.9.6</jackson-dataformat-yaml.version>
+    <jackson-dataformat-yaml.version>2.9.10</jackson-dataformat-yaml.version>
     <objenesis.version>2.6</objenesis.version>
     <sshd-core.version>1.1.0</sshd-core.version>
     <codehaus-jackson.version>1.9.13</codehaus-jackson.version>
-    <jackson-databind.version>2.7.8</jackson-databind.version>
     <commons-text.version>1.4</commons-text.version>
     <zip4j.version>1.3.2</zip4j.version>
     <commons-collections.version>3.2.2</commons-collections.version>
     <nimbus-jose-jwt.version>4.41.1</nimbus-jose-jwt.version>
     <commons-io.version>2.4</commons-io.version>
     <mybatis-generator.version>1.3.7</mybatis-generator.version>
-    <derby.version>10.4.2.0</derby.version>
+    <derby.version>10.15.1.3</derby.version>
   </properties>
 
   <modules>
@@ -229,7 +227,7 @@
       <properties>
         <hadoop.version>3.2.1</hadoop.version>
         <jaxb-api.version>2.2.11</jaxb-api.version>
-        <commons-compress.version>1.18</commons-compress.version>
+        <commons-compress.version>1.19</commons-compress.version>
         <guice-servlet.version>4.0</guice-servlet.version>
         <jackson-annotations.version>2.9.5</jackson-annotations.version>
         <guice.version>4.0</guice.version>
@@ -249,7 +247,7 @@
       <properties>
         <hadoop.version>3.1.2</hadoop.version>
         <jaxb-api.version>2.2.11</jaxb-api.version>
-        <commons-compress.version>1.18</commons-compress.version>
+        <commons-compress.version>1.19</commons-compress.version>
         <guice-servlet.version>4.0</guice-servlet.version>
         <jackson-annotations.version>2.7.8</jackson-annotations.version>
         <guice.version>4.0</guice.version>