ZEPPELIN-5690: use jinjava 2.5.4 due to cves

add comment to force rebuild
apache · Mar 28, 2022 · 2e3cc85 · 2e3cc85
1 parent a750ba7
commit 2e3cc85
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 2 deletions.
diff --git a/scalding/pom.xml b/scalding/pom.xml
@@ -47,6 +47,8 @@
       <name>Concurrent Maven Repo</name>
       <url>https://conjars.org/repo</url>
     </repository>
+
+    <!-- the twitter repo is unreliable (https://github.com/twitter/hadoop-lzo/issues/148) -->
     <repository>
       <id>twitter</id>
       <name>Twitter Maven Repo</name>

diff --git a/submarine/pom.xml b/submarine/pom.xml
@@ -34,7 +34,7 @@
     <!--library versions-->
     <interpreter.name>submarine</interpreter.name>
     <hadoop.version>${hadoop2.7.version}</hadoop.version>
-    <jinjava.version>2.4.0</jinjava.version>
+    <jinjava.version>2.5.4</jinjava.version>
     <squirrel.version>0.3.8</squirrel.version>
     <guava.version>24.1.1-jre</guava.version>
     <!--test library versions-->

diff --git a/zeppelin-plugins/launcher/docker/pom.xml b/zeppelin-plugins/launcher/docker/pom.xml
@@ -48,7 +48,7 @@
     <dependency>
       <groupId>com.hubspot.jinjava</groupId>
       <artifactId>jinjava</artifactId>
-      <version>2.4.12</version>
+      <version>2.5.4</version>
     </dependency>
     <dependency>
       <groupId>com.spotify</groupId>