You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@flink.apache.org by tw...@apache.org on 2021/05/26 20:32:30 UTC
[flink] branch release-1.12 updated:
[FLINK-22774][sql-connector-kinesis] Update Kinesis SQL connector's Guava
to 27.0-jre
This is an automated email from the ASF dual-hosted git repository.
twalthr pushed a commit to branch release-1.12
in repository https://gitbox.apache.org/repos/asf/flink.git
The following commit(s) were added to refs/heads/release-1.12 by this push:
new d215329 [FLINK-22774][sql-connector-kinesis] Update Kinesis SQL connector's Guava to 27.0-jre
d215329 is described below
commit d2153293eaa2066d959b8efdfd9501ea8b1b79aa
Author: Timo Walther <tw...@apache.org>
AuthorDate: Tue May 25 15:00:51 2021 +0200
[FLINK-22774][sql-connector-kinesis] Update Kinesis SQL connector's Guava to 27.0-jre
Avoids that security tools complain about an outdated Guava version in the Kinesis
SQL connector.
This closes #16005.
---
flink-connectors/flink-sql-connector-kinesis/pom.xml | 11 +++++++++++
.../src/main/resources/META-INF/NOTICE | 2 +-
2 files changed, 12 insertions(+), 1 deletion(-)
diff --git a/flink-connectors/flink-sql-connector-kinesis/pom.xml b/flink-connectors/flink-sql-connector-kinesis/pom.xml
index 0a7e674..9adc48f 100644
--- a/flink-connectors/flink-sql-connector-kinesis/pom.xml
+++ b/flink-connectors/flink-sql-connector-kinesis/pom.xml
@@ -35,6 +35,17 @@ under the License.
<packaging>jar</packaging>
+ <dependencyManagement>
+ <dependencies>
+ <dependency>
+ <!-- Bumped for security purposes to a common version in the Hadoop ecosystem -->
+ <groupId>com.google.guava</groupId>
+ <artifactId>guava</artifactId>
+ <version>27.0-jre</version>
+ </dependency>
+ </dependencies>
+ </dependencyManagement>
+
<dependencies>
<dependency>
<groupId>org.apache.flink</groupId>
diff --git a/flink-connectors/flink-sql-connector-kinesis/src/main/resources/META-INF/NOTICE b/flink-connectors/flink-sql-connector-kinesis/src/main/resources/META-INF/NOTICE
index 61bc682..692bb0f 100644
--- a/flink-connectors/flink-sql-connector-kinesis/src/main/resources/META-INF/NOTICE
+++ b/flink-connectors/flink-sql-connector-kinesis/src/main/resources/META-INF/NOTICE
@@ -12,7 +12,7 @@ This project bundles the following dependencies under the Apache Software Licens
- commons-logging:commons-logging:1.1.3
- commons-codec:commons-codec:1.13
- org.apache.commons:commons-lang3:3.3.2
-- com.google.guava:guava:18.0
+- com.google.guava:guava:27.0-jre
- com.fasterxml.jackson.core:jackson-annotations:2.10.5
- com.fasterxml.jackson.core:jackson-databind:2.10.5.1
- com.fasterxml.jackson.core:jackson-core:2.10.5