You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@asterixdb.apache.org by AsterixDB Code Review <do...@asterix-gerrit.ics.uci.edu> on 2026/08/04 20:01:03 UTC
[S] Change in asterixdb[master]: [NO ISSUE][MISC] Update Dependencies to address CVEs
From Michael Blow <mb...@apache.org>:
Michael Blow has uploaded this change for review. ( https://asterix-gerrit.ics.uci.edu/c/asterixdb/+/21490?usp=email )
Change subject: [NO ISSUE][MISC] Update Dependencies to address CVEs
......................................................................
[NO ISSUE][MISC] Update Dependencies to address CVEs
- com.fasterxml.woodstox:woodstox-core: 7.2.1 → 7.2.2
- com.github.javaparser:javaparser-core: 3.26.4 → 3.28.2
- com.google.cloud (google-cloud-core.version) 2.72.0 → 2.73.0
- google-cloud-core
- com.google.cloud (google-cloud-storage.version) 2.70.0 → 2.71.0
- google-cloud-storage
- commons-codec:commons-codec: 1.22.0 → 1.22.1
- io.grpc:grpc-bom: 1.83.0 → 1.83.1
- io.grpc:grpc-netty: 1.83.0 → 1.83.1
- org.apache.httpcomponents.client5:httpclient5: 5.6.2 → 5.6.3 (test only)
- software.amazon.awssdk (awsjavasdk.version) 2.49.6 → 2.50.3
- bom
- netty-nio-client
- sdk-core
- software.amazon.awssdk.crt (awsjavasdk.crt.version) 0.48.0 → 0.48.2
- aws-crt
netty is deliberately not advanced: it stays on the 4.1.x line, since
4.2 is a new generation. Minor updates were taken for everything else.
Ext-ref: MB-72431
Change-Id: I37298352aae05b01fe7b6772431e8702b7c98d72
---
M asterixdb/asterix-app/pom.xml
M asterixdb/pom.xml
M hyracks-fullstack/pom.xml
3 files changed, 13 insertions(+), 13 deletions(-)
git pull ssh://asterix-gerrit.ics.uci.edu:29418/asterixdb refs/changes/90/21490/1
diff --git a/asterixdb/asterix-app/pom.xml b/asterixdb/asterix-app/pom.xml
index b413720..451317a 100644
--- a/asterixdb/asterix-app/pom.xml
+++ b/asterixdb/asterix-app/pom.xml
@@ -863,7 +863,7 @@
<dependency>
<groupId>org.apache.httpcomponents.client5</groupId>
<artifactId>httpclient5</artifactId>
- <version>5.6.2</version>
+ <version>5.6.3</version>
<scope>test</scope>
</dependency>
<dependency>
diff --git a/asterixdb/pom.xml b/asterixdb/pom.xml
index 0dcf001..7a985ff 100644
--- a/asterixdb/pom.xml
+++ b/asterixdb/pom.xml
@@ -104,9 +104,9 @@
<parquet.version>1.17.1</parquet.version> <!-- NOTICE: please update transitives from parquet below on any change -->
<hadoop-awsjavasdk.version>1.12.797</hadoop-awsjavasdk.version>
- <awsjavasdk.version>2.49.6</awsjavasdk.version>
+ <awsjavasdk.version>2.50.3</awsjavasdk.version>
<!-- @derived-from: software.amazon.awssdk:aws-sdk-java-pom:${awsjavasdk.version}#awscrt.version -->
- <awsjavasdk.crt.version>0.48.0</awsjavasdk.crt.version>
+ <awsjavasdk.crt.version>0.48.2</awsjavasdk.crt.version>
<azureblobjavasdk.version>12.35.0</azureblobjavasdk.version>
<azurecommonjavasdk.version>12.34.0</azurecommonjavasdk.version>
@@ -116,7 +116,7 @@
<azurecorehttpnetty.version>1.16.5</azurecorehttpnetty.version>
<!-- keep in sync with hyracks-fullstack/pom.xml -->
- <google-cloud-storage.version>2.70.0</google-cloud-storage.version>
+ <google-cloud-storage.version>2.71.0</google-cloud-storage.version>
<hadoop-azuresdk.version>8.6.6</hadoop-azuresdk.version>
<hadoop-gcs.version>hadoop3-2.2.25</hadoop-gcs.version>
<io.opencensus.version>0.31.1</io.opencensus.version>
@@ -622,7 +622,7 @@
<dependency>
<groupId>com.github.javaparser</groupId>
<artifactId>javaparser-core</artifactId>
- <version>3.26.4</version>
+ <version>3.28.2</version>
</dependency>
</dependencies>
</plugin>
@@ -1286,7 +1286,7 @@
<dependency>
<groupId>com.fasterxml.woodstox</groupId>
<artifactId>woodstox-core</artifactId>
- <version>7.2.1</version>
+ <version>7.2.2</version>
</dependency>
<dependency>
<groupId>org.apache.commons</groupId>
@@ -1555,7 +1555,7 @@
<dependency>
<groupId>commons-codec</groupId>
<artifactId>commons-codec</artifactId>
- <version>1.22.0</version>
+ <version>1.22.1</version>
</dependency>
<dependency>
<groupId>it.unimi.dsi</groupId>
@@ -1935,14 +1935,14 @@
<dependency>
<groupId>io.grpc</groupId>
<artifactId>grpc-bom</artifactId>
- <version>1.83.0</version>
+ <version>1.83.1</version>
<type>pom</type>
<scope>import</scope>
</dependency>
<dependency>
<groupId>io.grpc</groupId>
<artifactId>grpc-netty</artifactId>
- <version>1.83.0</version>
+ <version>1.83.1</version>
<exclusions>
<exclusion>
<groupId>io.grpc</groupId>
diff --git a/hyracks-fullstack/pom.xml b/hyracks-fullstack/pom.xml
index 5a33f18..43530d7 100644
--- a/hyracks-fullstack/pom.xml
+++ b/hyracks-fullstack/pom.xml
@@ -80,12 +80,12 @@
<netty.version>4.1.136.Final</netty.version>
<netty.tcnative.version>2.0.81.Final</netty.tcnative.version>
<asm.version>9.10.1</asm.version>
- <awsjavasdk.version>2.49.6</awsjavasdk.version>
+ <awsjavasdk.version>2.50.3</awsjavasdk.version>
<!-- keep in sync with asterixdb/pom.xml -->
- <google-cloud-storage.version>2.70.0</google-cloud-storage.version>
+ <google-cloud-storage.version>2.71.0</google-cloud-storage.version>
<!-- @derived-from: com.google.cloud:google-cloud-storage:${google-cloud-storage.version}#dep:google-cloud-core -->
- <google-cloud-core.version>2.72.0</google-cloud-core.version>
+ <google-cloud-core.version>2.73.0</google-cloud-core.version>
<implementation.title>Apache Hyracks and Algebricks - ${project.name}</implementation.title>
<implementation.url>https://asterixdb.apache.org/</implementation.url>
@@ -901,7 +901,7 @@
<dependency>
<groupId>com.github.javaparser</groupId>
<artifactId>javaparser-core</artifactId>
- <version>3.26.4</version>
+ <version>3.28.2</version>
</dependency>
</dependencies>
</plugin>
--
To view, visit https://asterix-gerrit.ics.uci.edu/c/asterixdb/+/21490?usp=email
To unsubscribe, or for help writing mail filters, visit https://asterix-gerrit.ics.uci.edu/settings?usp=email
Gerrit-MessageType: newchange
Gerrit-Project: asterixdb
Gerrit-Branch: master
Gerrit-Change-Id: I37298352aae05b01fe7b6772431e8702b7c98d72
Gerrit-Change-Number: 21490
Gerrit-PatchSet: 1
Gerrit-Owner: Michael Blow <mb...@apache.org>