This is an automated email from the ASF dual-hosted git repository. imaxon pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/asterixdb.git
commit 50600f6866579bd66ae2b1e4834d6bd954673062 Author: Michael Blow <[email protected]> AuthorDate: Thu Feb 26 21:03:13 2026 -0500 [NO ISSUE][*DB][EXT] Advance Apache Avro to 1.12.1 for CVE Change-Id: I120e0f5972d84d9ddda099632a6a6e101ba7d198 Reviewed-on: https://asterix-gerrit.ics.uci.edu/c/asterixdb/+/20942 Reviewed-by: Michael Blow <[email protected]> Tested-by: Michael Blow <[email protected]> --- asterixdb/asterix-external-data/pom.xml | 1 - asterixdb/pom.xml | 8 +++++++- 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/asterixdb/asterix-external-data/pom.xml b/asterixdb/asterix-external-data/pom.xml index 3f1194b9ba..979df540e9 100644 --- a/asterixdb/asterix-external-data/pom.xml +++ b/asterixdb/asterix-external-data/pom.xml @@ -629,7 +629,6 @@ <dependency> <groupId>org.apache.avro</groupId> <artifactId>avro-mapred</artifactId> - <version>1.12.0</version> </dependency> <dependency> <groupId>org.apache.hyracks</groupId> diff --git a/asterixdb/pom.xml b/asterixdb/pom.xml index aecb8b5b07..603a399fe9 100644 --- a/asterixdb/pom.xml +++ b/asterixdb/pom.xml @@ -94,6 +94,7 @@ <hadoop.version>3.4.2</hadoop.version> <jacoco.version>0.7.6.201602180812</jacoco.version> <log4j.version>2.25.3</log4j.version> + <avro.version>1.12.1</avro.version> <!-- IMPORTANT: please keep the aws-crt version in sync with that defined in the AWS SDK BOM --> <!-- you can get this by inspecting the aws-sdk-java-pom for the SDK version. e.g. $ curl -s https://repo1.maven.org/maven2/software/amazon/awssdk/aws-sdk-java-pom/2.31.57/aws-sdk-java-pom-2.31.57.pom | grep awscrt.version @@ -1930,7 +1931,12 @@ <dependency> <groupId>org.apache.avro</groupId> <artifactId>avro</artifactId> - <version>1.12.0</version> + <version>${avro.version}</version> + </dependency> + <dependency> + <groupId>org.apache.avro</groupId> + <artifactId>avro-mapred</artifactId> + <version>${avro.version}</version> </dependency> <dependency> <groupId>org.apache.parquet</groupId>
