[pulsar] branch master updated: [fix][sec] Upgrade scala-library to get rid of CVE-2022-36944 (#18021)

[ni...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

nicoloboschi pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/pulsar.git


The following commit(s) were added to refs/heads/master by this push:
     new 3011946a5c3 [fix][sec] Upgrade scala-library to get rid of CVE-2022-36944 (#18021)
3011946a5c3 is described below

commit 3011946a5c3b64ed7c08b6bfb1f6492f8aaaca9c
Author: Nicolò Boschi <bo...@gmail.com>
AuthorDate: Thu Dec 15 11:42:56 2022 +0100

    [fix][sec] Upgrade scala-library to get rid of CVE-2022-36944 (#18021)
---
 pom.xml | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/pom.xml b/pom.xml
index bb1f5ca0df9..ca08e101896 100644
--- a/pom.xml
+++ b/pom.xml
@@ -179,6 +179,7 @@ flexible messaging model and an intuitive client API.</description>
     <elasticsearch-java.version>8.5.2</elasticsearch-java.version>
     <trino.version>363</trino.version>
     <scala.binary.version>2.13</scala.binary.version>
+    <scala-library.version>2.13.10</scala-library.version>
     <debezium.version>1.9.7.Final</debezium.version>
     <debezium.postgresql.version>42.5.0</debezium.postgresql.version>
     <debezium.mysql.version>8.0.30</debezium.mysql.version>
@@ -1339,6 +1340,18 @@ flexible messaging model and an intuitive client API.</description>
         <version>${roaringbitmap.version}</version>
       </dependency>
 
+      <dependency>
+        <groupId>org.scala-lang</groupId>
+        <artifactId>scala-library</artifactId>
+        <version>${scala-library.version}</version>
+      </dependency>
+
+      <dependency>
+        <groupId>org.scala-lang</groupId>
+        <artifactId>scala-reflect</artifactId>
+        <version>${scala-library.version}</version>
+      </dependency>
+
     </dependencies>
   </dependencyManagement>