You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@asterixdb.apache.org by AsterixDB Code Review <do...@asterix-gerrit.ics.uci.edu> on 2026/07/23 23:10:57 UTC
[XS] Change in asterixdb[trinity]: [NO ISSUE][MISC] Update Dependencies to address CVEs
From Michael Blow <mb...@apache.org>:
Michael Blow has uploaded this change for review. ( https://asterix-gerrit.ics.uci.edu/c/asterixdb/+/21457?usp=email )
Change subject: [NO ISSUE][MISC] Update Dependencies to address CVEs
......................................................................
[NO ISSUE][MISC] Update Dependencies to address CVEs
- parquet: 1.17.0 → 1.17.1
(org.apache.parquet)
Ext-ref: MB-72967
Change-Id: I2071918d35e689900f0cd44970965daf5e41d00b
---
M asterixdb/pom.xml
1 file changed, 4 insertions(+), 3 deletions(-)
git pull ssh://asterix-gerrit.ics.uci.edu:29418/asterixdb refs/changes/57/21457/1
diff --git a/asterixdb/pom.xml b/asterixdb/pom.xml
index 778d369..dbdf6e3 100644
--- a/asterixdb/pom.xml
+++ b/asterixdb/pom.xml
@@ -89,7 +89,7 @@
<jacoco.version>0.7.6.201602180812</jacoco.version>
<log4j.version>2.25.5</log4j.version>
<awsjavasdk.version>2.29.27</awsjavasdk.version>
- <parquet.version>1.17.0</parquet.version> <!-- NOTICE: please update transitives from parquet below on any change -->
+ <parquet.version>1.17.1</parquet.version> <!-- NOTICE: please update transitives from parquet below on any change -->
<hadoop-awsjavasdk.version>1.12.797</hadoop-awsjavasdk.version>
<azureblobjavasdk.version>12.31.1</azureblobjavasdk.version>
@@ -1745,23 +1745,24 @@
<artifactId>parquet-jackson</artifactId>
<version>${parquet.version}</version>
</dependency>
- <!-- BEGIN: transitive from parquet, please validate with any update of ${parquet.version} -->
+ <!-- @pinned-with: ${parquet.version} -->
<dependency>
<groupId>io.airlift</groupId>
<artifactId>aircompressor</artifactId>
<version>2.0.3</version>
</dependency>
+ <!-- @pinned-with: ${parquet.version} -->
<dependency>
<groupId>com.github.luben</groupId>
<artifactId>zstd-jni</artifactId>
<version>1.5.7-7</version>
</dependency>
+ <!-- @pinned-with: ${parquet.version} -->
<dependency>
<groupId>commons-pool</groupId>
<artifactId>commons-pool</artifactId>
<version>1.6</version>
</dependency>
- <!-- END: transitive from parquet, please validate with any update of ${parquet.version} -->
<dependency>
<groupId>org.kitesdk</groupId>
<artifactId>kite-data-core</artifactId>
--
To view, visit https://asterix-gerrit.ics.uci.edu/c/asterixdb/+/21457?usp=email
To unsubscribe, or for help writing mail filters, visit https://asterix-gerrit.ics.uci.edu/settings?usp=email
Gerrit-MessageType: newchange
Gerrit-Project: asterixdb
Gerrit-Branch: trinity
Gerrit-Change-Id: I2071918d35e689900f0cd44970965daf5e41d00b
Gerrit-Change-Number: 21457
Gerrit-PatchSet: 1
Gerrit-Owner: Michael Blow <mb...@apache.org>