You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@nifi.apache.org by pv...@apache.org on 2024/01/17 09:04:23 UTC
(nifi) branch support/nifi-1.x updated: NIFI-12621 Upgraded AWS SDK from 2.20.148 to 2.23.3
This is an automated email from the ASF dual-hosted git repository.
pvillard pushed a commit to branch support/nifi-1.x
in repository https://gitbox.apache.org/repos/asf/nifi.git
The following commit(s) were added to refs/heads/support/nifi-1.x by this push:
new 6136a2cebc NIFI-12621 Upgraded AWS SDK from 2.20.148 to 2.23.3
6136a2cebc is described below
commit 6136a2cebc579bbdd85b073d7a8aba6a71c2a96f
Author: exceptionfactory <ex...@apache.org>
AuthorDate: Tue Jan 16 14:00:45 2024 -0600
NIFI-12621 Upgraded AWS SDK from 2.20.148 to 2.23.3
- Upgraded AWS SDK from 1.12.573 to 1.12.637
- Added dependency check suppression to correct identification of newer ion-java library
Signed-off-by: Pierre Villard <pi...@gmail.com>
This closes #8257.
---
nifi-dependency-check-maven/suppressions.xml | 5 +++++
pom.xml | 4 ++--
2 files changed, 7 insertions(+), 2 deletions(-)
diff --git a/nifi-dependency-check-maven/suppressions.xml b/nifi-dependency-check-maven/suppressions.xml
index 605b4aff46..9b35da649b 100644
--- a/nifi-dependency-check-maven/suppressions.xml
+++ b/nifi-dependency-check-maven/suppressions.xml
@@ -529,4 +529,9 @@
<packageUrl regex="true">^pkg:maven/com\.azure/.*$</packageUrl>
<cve>CVE-2023-36052</cve>
</suppress>
+ <suppress>
+ <notes>software.amazon.ion:ion-java is newer than com.amazonaws.ion:ion-java and does not share the same vulnerabilities</notes>
+ <packageUrl regex="true">^pkg:maven/software\.amazon\.ion/ion\-java@.*$</packageUrl>
+ <cpe>cpe:/a:amazon:ion</cpe>
+ </suppress>
</suppressions>
diff --git a/pom.xml b/pom.xml
index 58126bf940..180ad1e24b 100644
--- a/pom.xml
+++ b/pom.xml
@@ -104,8 +104,8 @@
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
<project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
<inceptionYear>2014</inceptionYear>
- <com.amazonaws.version>1.12.573</com.amazonaws.version>
- <software.amazon.awssdk.version>2.20.148</software.amazon.awssdk.version>
+ <com.amazonaws.version>1.12.637</com.amazonaws.version>
+ <software.amazon.awssdk.version>2.23.3</software.amazon.awssdk.version>
<gson.version>2.10.1</gson.version>
<io.fabric8.kubernetes.client.version>6.8.1</io.fabric8.kubernetes.client.version>
<kotlin.version>1.9.10</kotlin.version>