[zeppelin] branch master updated: ZEPPELIN-5690 use jinjava 2.5.4 due to cves (#4329)

[jo...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

jongyoul pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/zeppelin.git


The following commit(s) were added to refs/heads/master by this push:
     new ed6bbb9  ZEPPELIN-5690 use jinjava 2.5.4 due to cves (#4329)
ed6bbb9 is described below

commit ed6bbb982d4d106cad46c762c73d334fd004772c
Author: PJ Fanning <pj...@users.noreply.github.com>
AuthorDate: Mon Mar 28 16:55:09 2022 +0200

    ZEPPELIN-5690 use jinjava 2.5.4 due to cves (#4329)
    
    add comment to force rebuild
---
 scalding/pom.xml                         | 2 ++
 submarine/pom.xml                        | 2 +-
 zeppelin-plugins/launcher/docker/pom.xml | 2 +-
 3 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/scalding/pom.xml b/scalding/pom.xml
index 4dc5914..54beb0b 100644
--- a/scalding/pom.xml
+++ b/scalding/pom.xml
@@ -47,6 +47,8 @@
       <name>Concurrent Maven Repo</name>
       <url>https://conjars.org/repo</url>
     </repository>
+
+    <!-- the twitter repo is unreliable (https://github.com/twitter/hadoop-lzo/issues/148) -->
     <repository>
       <id>twitter</id>
       <name>Twitter Maven Repo</name>
diff --git a/submarine/pom.xml b/submarine/pom.xml
index 65c2263..9de6ec7 100644
--- a/submarine/pom.xml
+++ b/submarine/pom.xml
@@ -34,7 +34,7 @@
     <!--library versions-->
     <interpreter.name>submarine</interpreter.name>
     <hadoop.version>${hadoop2.7.version}</hadoop.version>
-    <jinjava.version>2.4.0</jinjava.version>
+    <jinjava.version>2.5.4</jinjava.version>
     <squirrel.version>0.3.8</squirrel.version>
     <guava.version>24.1.1-jre</guava.version>
     <!--test library versions-->
diff --git a/zeppelin-plugins/launcher/docker/pom.xml b/zeppelin-plugins/launcher/docker/pom.xml
index 5adec5e..ab7ce31 100644
--- a/zeppelin-plugins/launcher/docker/pom.xml
+++ b/zeppelin-plugins/launcher/docker/pom.xml
@@ -48,7 +48,7 @@
     <dependency>
       <groupId>com.hubspot.jinjava</groupId>
       <artifactId>jinjava</artifactId>
-      <version>2.4.12</version>
+      <version>2.5.4</version>
     </dependency>
     <dependency>
       <groupId>com.spotify</groupId>