From 2e3cc85f654ad61e8ffc5ab4c8bb3d1641e85b4c Mon Sep 17 00:00:00 2001
From: PJ Fanning <pjfanning@users.noreply.github.com>
Date: Wed, 23 Mar 2022 13:40:59 +0100
Subject: [PATCH] ZEPPELIN-5690: use jinjava 2.5.4 due to cves

add comment to force rebuild
---
 scalding/pom.xml                         | 2 ++
 submarine/pom.xml                        | 2 +-
 zeppelin-plugins/launcher/docker/pom.xml | 2 +-
 3 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/scalding/pom.xml b/scalding/pom.xml
index 4dc59145006..54beb0b9d47 100644
--- a/scalding/pom.xml
+++ b/scalding/pom.xml
@@ -47,6 +47,8 @@
       <name>Concurrent Maven Repo</name>
       <url>https://conjars.org/repo</url>
     </repository>
+
+    <!-- the twitter repo is unreliable (https://github.com/twitter/hadoop-lzo/issues/148) -->
     <repository>
       <id>twitter</id>
       <name>Twitter Maven Repo</name>
diff --git a/submarine/pom.xml b/submarine/pom.xml
index 65c2263db66..9de6ec7c274 100644
--- a/submarine/pom.xml
+++ b/submarine/pom.xml
@@ -34,7 +34,7 @@
     <!--library versions-->
     <interpreter.name>submarine</interpreter.name>
     <hadoop.version>${hadoop2.7.version}</hadoop.version>
-    <jinjava.version>2.4.0</jinjava.version>
+    <jinjava.version>2.5.4</jinjava.version>
     <squirrel.version>0.3.8</squirrel.version>
     <guava.version>24.1.1-jre</guava.version>
     <!--test library versions-->
diff --git a/zeppelin-plugins/launcher/docker/pom.xml b/zeppelin-plugins/launcher/docker/pom.xml
index 5adec5e7f47..ab7ce318b54 100644
--- a/zeppelin-plugins/launcher/docker/pom.xml
+++ b/zeppelin-plugins/launcher/docker/pom.xml
@@ -48,7 +48,7 @@
     <dependency>
       <groupId>com.hubspot.jinjava</groupId>
       <artifactId>jinjava</artifactId>
-      <version>2.4.12</version>
+      <version>2.5.4</version>
     </dependency>
     <dependency>
       <groupId>com.spotify</groupId>