You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@nifi.apache.org by pv...@apache.org on 2026/04/16 15:37:30 UTC
(nifi) branch main updated: NIFI-15851 Upgraded aircompressor from 0.27 to 2.0.3 for Iceberg (#11153)
This is an automated email from the ASF dual-hosted git repository.
pvillard pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/nifi.git
The following commit(s) were added to refs/heads/main by this push:
new b52256f702c NIFI-15851 Upgraded aircompressor from 0.27 to 2.0.3 for Iceberg (#11153)
b52256f702c is described below
commit b52256f702c1c385fc41536b622331ff9761820a
Author: David Handermann <ex...@apache.org>
AuthorDate: Thu Apr 16 10:37:23 2026 -0500
NIFI-15851 Upgraded aircompressor from 0.27 to 2.0.3 for Iceberg (#11153)
---
.grype.yaml | 8 --------
nifi-extension-bundles/nifi-iceberg-bundle/pom.xml | 6 ++++++
2 files changed, 6 insertions(+), 8 deletions(-)
diff --git a/.grype.yaml b/.grype.yaml
index baa1c8c897e..d47911f062b 100644
--- a/.grype.yaml
+++ b/.grype.yaml
@@ -22,11 +22,3 @@ ignore:
package:
name: jackson-core
version: 2.19.2
- # Reason: Referencing libraries require code changes for upgraded version
- # Mitigating Factors: Snappy and LZ4 decompression depend on component configuration
- # Reference: org.apache.kafka:kafka-clients:4.2.0
- # Reference: org.apache.iceberg:iceberg-core:1.10.1
- - vulnerability: GHSA-vx9q-rhv9-3jvg
- package:
- name: aircompressor
- version: 0.27
diff --git a/nifi-extension-bundles/nifi-iceberg-bundle/pom.xml b/nifi-extension-bundles/nifi-iceberg-bundle/pom.xml
index 1126e9d72a2..d1e280fbdf8 100644
--- a/nifi-extension-bundles/nifi-iceberg-bundle/pom.xml
+++ b/nifi-extension-bundles/nifi-iceberg-bundle/pom.xml
@@ -63,6 +63,12 @@
<scope>import</scope>
<type>pom</type>
</dependency>
+ <!-- Override aircompressor 0.27 from iceberg-core -->
+ <dependency>
+ <groupId>io.airlift</groupId>
+ <artifactId>aircompressor</artifactId>
+ <version>2.0.3</version>
+ </dependency>
</dependencies>
</dependencyManagement>
</project>