You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@flink.apache.org by tw...@apache.org on 2021/05/26 20:31:27 UTC
[flink] branch release-1.13 updated:
[FLINK-22774][sql-connector-kinesis] Update Kinesis SQL connector's Guava
to 27.0-jre
This is an automated email from the ASF dual-hosted git repository.
twalthr pushed a commit to branch release-1.13
in repository https://gitbox.apache.org/repos/asf/flink.git
The following commit(s) were added to refs/heads/release-1.13 by this push:
new 878dfe9 [FLINK-22774][sql-connector-kinesis] Update Kinesis SQL connector's Guava to 27.0-jre
878dfe9 is described below
commit 878dfe961528d2093990d02dd6e2c291c7012f90
Author: Timo Walther <tw...@apache.org>
AuthorDate: Tue May 25 15:00:51 2021 +0200
[FLINK-22774][sql-connector-kinesis] Update Kinesis SQL connector's Guava to 27.0-jre
Avoids that security tools complain about an outdated Guava version in the Kinesis
SQL connector.
This closes #16005.
---
flink-connectors/flink-sql-connector-kinesis/pom.xml | 11 +++++++++++
.../src/main/resources/META-INF/NOTICE | 2 +-
2 files changed, 12 insertions(+), 1 deletion(-)
diff --git a/flink-connectors/flink-sql-connector-kinesis/pom.xml b/flink-connectors/flink-sql-connector-kinesis/pom.xml
index 6d284f0..c1b9fdd 100644
--- a/flink-connectors/flink-sql-connector-kinesis/pom.xml
+++ b/flink-connectors/flink-sql-connector-kinesis/pom.xml
@@ -35,6 +35,17 @@ under the License.
<packaging>jar</packaging>
+ <dependencyManagement>
+ <dependencies>
+ <dependency>
+ <!-- Bumped for security purposes to a common version in the Hadoop ecosystem -->
+ <groupId>com.google.guava</groupId>
+ <artifactId>guava</artifactId>
+ <version>27.0-jre</version>
+ </dependency>
+ </dependencies>
+ </dependencyManagement>
+
<dependencies>
<dependency>
<groupId>org.apache.flink</groupId>
diff --git a/flink-connectors/flink-sql-connector-kinesis/src/main/resources/META-INF/NOTICE b/flink-connectors/flink-sql-connector-kinesis/src/main/resources/META-INF/NOTICE
index 17f118f..214e299 100644
--- a/flink-connectors/flink-sql-connector-kinesis/src/main/resources/META-INF/NOTICE
+++ b/flink-connectors/flink-sql-connector-kinesis/src/main/resources/META-INF/NOTICE
@@ -12,7 +12,7 @@ This project bundles the following dependencies under the Apache Software Licens
- commons-logging:commons-logging:1.1.3
- commons-codec:commons-codec:1.13
- org.apache.commons:commons-lang3:3.3.2
-- com.google.guava:guava:18.0
+- com.google.guava:guava:27.0-jre
- com.fasterxml.jackson.core:jackson-annotations:2.12.1
- com.fasterxml.jackson.core:jackson-databind:2.12.1
- com.fasterxml.jackson.core:jackson-core:2.12.1