Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

update dependencies to clear CVEs #16625

Closed
wants to merge 2 commits into from
Closed

update dependencies to clear CVEs #16625

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
304e87a
update dependencies to clear CVEs
janjwerner-confluent Jun 18, 2024
7cdb8ac
update license file
janjwerner-confluent Jun 18, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions extensions-core/azure-extensions/pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -54,6 +54,8 @@
<dependency>
<groupId>com.azure</groupId>
<artifactId>azure-identity</artifactId>
<!-- fixing the version here while we wait for an updated azure-sdk-bom -->
<version>1.12.2</version>
</dependency>
<dependency>
<groupId>com.azure</groupId>
Expand Down
6 changes: 6 additions & 0 deletions extensions-core/druid-ranger-security/pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -41,6 +41,12 @@
<artifactId>woodstox-core</artifactId>
<version>6.4.0</version>
</dependency>
<!-- override the solrj dependency version to address: CVE-2023-50298 -->
<dependency>
<groupId>org.apache.solr</groupId>
<artifactId>solr-solrj</artifactId>
<version>8.11.3</version>
</dependency>
</dependencies>
</dependencyManagement>

Expand Down
6 changes: 3 additions & 3 deletions licenses.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4209,7 +4209,7 @@ license_category: binary
module: extensions/druid-azure-extensions
license_name: MIT License
copyright: Microsoft
version: 1.12.0
version: 1.12.2
libraries:
- com.azure: azure-identity

Expand Down Expand Up @@ -4307,7 +4307,7 @@ license_category: binary
module: extensions/druid-azure-extensions
license_name: MIT License
copyright: Microsoft
version: 1.15.0
version: 1.15.1
libraries:
- com.microsoft.azure: msal4j

Expand Down Expand Up @@ -4871,7 +4871,7 @@ libraries:

name: org.apache.solr solr-solrj
license_category: binary
version: 8.11.2
version: 8.11.3
module: druid-ranger-security
license_name: Apache License version 2.0
libraries:
Expand Down
Loading