This is an automated email from the ASF dual-hosted git repository.
ianmcook pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/arrow.git
The following commit(s) were added to refs/heads/main by this push:
new d32e4b053e MINOR: [Java] Bump org.apache.hadoop dependencies from
3.3.6 to 3.4.0 in /java (#40890)
d32e4b053e is described below
commit d32e4b053e6fd70ff4f0e2a0552f2bf3b94647b3
Author: Ian Cook <[email protected]>
AuthorDate: Fri Mar 29 14:46:22 2024 -0400
MINOR: [Java] Bump org.apache.hadoop dependencies from 3.3.6 to 3.4.0 in
/java (#40890)
Updates the Hadoop version to 3.4.0 to address vulnerabilities
identified in
https://deps.dev/maven/org.apache.hadoop%3Ahadoop-common/3.3.6
---
java/adapter/orc/pom.xml | 6 +++---
java/pom.xml | 2 +-
2 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/java/adapter/orc/pom.xml b/java/adapter/orc/pom.xml
index e7a2bfe872..060aed5dcf 100644
--- a/java/adapter/orc/pom.xml
+++ b/java/adapter/orc/pom.xml
@@ -58,7 +58,7 @@
<dependency>
<groupId>org.apache.hadoop</groupId>
<artifactId>hadoop-client-runtime</artifactId>
- <version>3.3.6</version>
+ <version>${dep.hadoop.version}</version>
<scope>test</scope>
<exclusions>
<exclusion>
@@ -70,12 +70,12 @@
<dependency>
<groupId>org.apache.hadoop</groupId>
<artifactId>hadoop-client-api</artifactId>
- <version>3.3.6</version>
+ <version>${dep.hadoop.version}</version>
</dependency>
<dependency>
<groupId>org.apache.hadoop</groupId>
<artifactId>hadoop-common</artifactId>
- <version>3.3.6</version>
+ <version>${dep.hadoop.version}</version>
<scope>test</scope>
<exclusions>
<exclusion>
diff --git a/java/pom.xml b/java/pom.xml
index 850b4d0508..b05b2d8f14 100644
--- a/java/pom.xml
+++ b/java/pom.xml
@@ -37,7 +37,7 @@
<dep.grpc-bom.version>1.61.1</dep.grpc-bom.version>
<dep.protobuf-bom.version>3.23.1</dep.protobuf-bom.version>
<dep.jackson-bom.version>2.17.0</dep.jackson-bom.version>
- <dep.hadoop.version>3.3.6</dep.hadoop.version>
+ <dep.hadoop.version>3.4.0</dep.hadoop.version>
<dep.fbs.version>23.5.26</dep.fbs.version>
<dep.avro.version>1.11.3</dep.avro.version>
<arrow.vector.classifier />
