[spark] branch master updated: [SPARK-45042][BUILD] Upgrade jetty to 9.4.52.v20230823

[ya...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

yangjie01 pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/spark.git


The following commit(s) were added to refs/heads/master by this push:
     new 60d8fc49bec [SPARK-45042][BUILD] Upgrade jetty to 9.4.52.v20230823
60d8fc49bec is described below

commit 60d8fc49bec5dae1b8cf39a0670cb640b430f520
Author: panbingkun <pb...@gmail.com>
AuthorDate: Mon Sep 4 11:48:52 2023 +0800

    [SPARK-45042][BUILD] Upgrade jetty to 9.4.52.v20230823
    
    ### What changes were proposed in this pull request?
    The pr aims to Upgrade jetty from 9.4.51.v20230217 to 9.4.52.v20230823.
    
    ### Why are the changes needed?
    - This is a release of the https://github.com/eclipse/jetty.project/issues/7958 that was sponsored by a [support contract from Webtide.com](mailto:saleswebtide.com)
    
    - The newest version fix a possible security issue:
       This release provides a workaround for Security Advisory https://github.com/advisories/GHSA-58qw-p7qm-5rvh
    
    - The release note as follows:
       https://github.com/eclipse/jetty.project/releases/tag/jetty-9.4.52.v20230823
    
    ### Does this PR introduce _any_ user-facing change?
    No.
    
    ### How was this patch tested?
    Pass GA.
    
    ### Was this patch authored or co-authored using generative AI tooling?
    No.
    
    Closes #42761 from panbingkun/SPARK-45042.
    
    Authored-by: panbingkun <pb...@gmail.com>
    Signed-off-by: yangjie01 <ya...@baidu.com>
---
 dev/deps/spark-deps-hadoop-3-hive-2.3 | 4 ++--
 pom.xml                               | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/dev/deps/spark-deps-hadoop-3-hive-2.3 b/dev/deps/spark-deps-hadoop-3-hive-2.3
index 94c999ba4b6..59164c1f8f4 100644
--- a/dev/deps/spark-deps-hadoop-3-hive-2.3
+++ b/dev/deps/spark-deps-hadoop-3-hive-2.3
@@ -128,8 +128,8 @@ jersey-container-servlet/2.40//jersey-container-servlet-2.40.jar
 jersey-hk2/2.40//jersey-hk2-2.40.jar
 jersey-server/2.40//jersey-server-2.40.jar
 jettison/1.5.4//jettison-1.5.4.jar
-jetty-util-ajax/9.4.51.v20230217//jetty-util-ajax-9.4.51.v20230217.jar
-jetty-util/9.4.51.v20230217//jetty-util-9.4.51.v20230217.jar
+jetty-util-ajax/9.4.52.v20230823//jetty-util-ajax-9.4.52.v20230823.jar
+jetty-util/9.4.52.v20230823//jetty-util-9.4.52.v20230823.jar
 jline/2.14.6//jline-2.14.6.jar
 joda-time/2.12.5//joda-time-2.12.5.jar
 jodd-core/3.5.2//jodd-core-3.5.2.jar
diff --git a/pom.xml b/pom.xml
index b64a0ab15ac..8edc3fd550c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -143,7 +143,7 @@
     <parquet.version>1.13.1</parquet.version>
     <orc.version>1.9.1</orc.version>
     <orc.classifier>shaded-protobuf</orc.classifier>
-    <jetty.version>9.4.51.v20230217</jetty.version>
+    <jetty.version>9.4.52.v20230823</jetty.version>
     <jakartaservlet.version>4.0.3</jakartaservlet.version>
     <chill.version>0.10.0</chill.version>
     <!--


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@spark.apache.org
For additional commands, e-mail: commits-help@spark.apache.org