This is an automated email from the ASF dual-hosted git repository.
zihaoxiang pushed a commit to branch dev
in repository https://gitbox.apache.org/repos/asf/dolphinscheduler.git
The following commit(s) were added to refs/heads/dev by this push:
new 0f7a844d12 [Improvement-17739][Dependency] Upgrade Spring Boot to fix
CVE-2023-20873 (#17747)
0f7a844d12 is described below
commit 0f7a844d128545e2fb2ed2959b3580160d9e9626
Author: dill <[email protected]>
AuthorDate: Fri Dec 5 13:49:00 2025 +0800
[Improvement-17739][Dependency] Upgrade Spring Boot to fix CVE-2023-20873
(#17747)
---
dolphinscheduler-bom/pom.xml | 2 +-
dolphinscheduler-dist/release-docs/LICENSE | 109 ++++++++++++------------
tools/dependencies/known-dependencies.txt | 130 ++++++++++++++---------------
3 files changed, 122 insertions(+), 119 deletions(-)
diff --git a/dolphinscheduler-bom/pom.xml b/dolphinscheduler-bom/pom.xml
index 5dc6fd472d..3c863e120a 100644
--- a/dolphinscheduler-bom/pom.xml
+++ b/dolphinscheduler-bom/pom.xml
@@ -29,7 +29,7 @@
<properties>
<netty.version>4.1.53.Final</netty.version>
- <spring-boot.version>2.7.3</spring-boot.version>
+ <spring-boot.version>2.7.11</spring-boot.version>
<spring-ldap.version>2.4.1</spring-ldap.version>
<mybatis-plus.version>3.5.2</mybatis-plus.version>
<quartz.version>2.3.2</quartz.version>
diff --git a/dolphinscheduler-dist/release-docs/LICENSE
b/dolphinscheduler-dist/release-docs/LICENSE
index 3b64695e06..575c7b9d03 100644
--- a/dolphinscheduler-dist/release-docs/LICENSE
+++ b/dolphinscheduler-dist/release-docs/LICENSE
@@ -215,7 +215,7 @@ Apache 2.0 licenses
The following components are provided under the Apache License. See project
link for details.
The text of each license is also included at licenses/LICENSE-[project].txt.
- accessors-smart 2.4.8: https://github.com/netplex/json-smart-v2, Apache 2.0
+ accessors-smart 2.4.9: https://github.com/netplex/json-smart-v2, Apache 2.0
failureaccess 1.0.1:
https://mvnrepository.com/artifact/com.google.guava/failureaccess/1.0.1, Apache
2.0
tomcat-embed-el 9.0.65:
https://mvnrepository.com/artifact/org.apache.tomcat.embed/tomcat-embed-el/9.0.65,
Apache 2.0
audience-annotations 0.12.0:
https://mvnrepository.com/artifact/org.apache.yetus/audience-annotations/0.12.0,
Apache 2.0
@@ -249,6 +249,8 @@ The text of each license is also included at
licenses/LICENSE-[project].txt.
curator-test 5.5.0:
https://mvnrepository.com/artifact/org.apache.curator/curator-test/5.5.0,
Apache 2.0
druid 1.2.20: https://mvnrepository.com/artifact/com.alibaba/druid/1.2.20,
Apache 2.0
metrics-core 4.2.11:
https://mvnrepository.com/artifact/io.dropwizard.metrics/metrics-core, Apache
2.0
+ micrometer-core 1.9.10:
https://mvnrepository.com/artifact/io.micrometer/micrometer-core/1.9.10, Apache
2.0
+ micrometer-registry-prometheus 1.9.10:
https://mvnrepository.com/artifact/io.micrometer/micrometer-registry-prometheus/1.9.10,
Apache 2.0
error_prone_annotations 2.1.3
https://mvnrepository.com/artifact/com.google.errorprone/error_prone_annotations/2.1.3,
Apache 2.0
gson 2.9.1: https://github.com/google/gson, Apache 2.0
guava 31.1-jre:
https://mvnrepository.com/artifact/com.google.guava/guava/31.1-jre, Apache 2.0
@@ -271,28 +273,28 @@ The text of each license is also included at
licenses/LICENSE-[project].txt.
jackson-core 2.13.4: https://github.com/FasterXML/jackson-core, Apache 2.0
jackson-core-asl 1.9.13:
https://mvnrepository.com/artifact/org.codehaus.jackson/jackson-core-asl/1.9.13,
Apache 2.0
jackson-databind 2.13.4: https://github.com/FasterXML/jackson-databind,
Apache 2.0
- jackson-datatype-jdk8 2.13.0:
https://mvnrepository.com/artifact/com.fasterxml.jackson.datatype/jackson-datatype-jdk8/2.13.0,
Apache 2.0
+ jackson-datatype-jdk8 2.13.5:
https://mvnrepository.com/artifact/com.fasterxml.jackson.datatype/jackson-datatype-jdk8/2.13.5,
Apache 2.0
jackson-datatype-jsr310 2.13.4:
https://mvnrepository.com/artifact/com.fasterxml.jackson.datatype/jackson-datatype-jsr310/2.13.4,
Apache 2.0
jackson-mapper-asl 1.9.13:
https://mvnrepository.com/artifact/org.codehaus.jackson/jackson-mapper-asl/1.9.13,
Apache 2.0
- jackson-module-parameter-names 2.13.0:
https://mvnrepository.com/artifact/com.fasterxml.jackson.module/jackson-module-parameter-names/2.13.0,
Apache 2.0
+ jackson-module-parameter-names 2.13.5:
https://mvnrepository.com/artifact/com.fasterxml.jackson.module/jackson-module-parameter-names/2.13.5,
Apache 2.0
jcip-annotations 1.0-1:
https://github.com/stephenc/jcip-annotations/blob/jcip-annotations-1.0-1/LICENSE.txt,
Apache 2.0
jettison 1.1: https://github.com/jettison-json/jettison, Apache 2.0
- jetty-continuation 9.4.48.v20220622:
https://mvnrepository.com/artifact/org.eclipse.jetty/jetty-continuation/9.4.48.v20220622,
Apache 2.0 and EPL 1.0
- jetty-http 9.4.48.v20220622:
https://mvnrepository.com/artifact/org.eclipse.jetty/jetty-http/9.4.48.v20220622,
Apache 2.0 and EPL 1.0
- jetty-io 9.4.48.v20220622:
https://mvnrepository.com/artifact/org.eclipse.jetty/jetty-io/9.4.48.v20220622,
Apache 2.0 and EPL 1.0
- jetty-security 9.4.48.v20220622:
https://mvnrepository.com/artifact/org.eclipse.jetty/jetty-security/9.4.48.v20220622,
Apache 2.0 and EPL 1.0
- jetty-server 9.4.48.v20220622:
https://mvnrepository.com/artifact/org.eclipse.jetty/jetty-server/9.4.48.v20220622,
Apache 2.0 and EPL 1.0
- jetty-servlet 9.4.48.v20220622:
https://mvnrepository.com/artifact/org.eclipse.jetty/jetty-servlet/9.4.48.v20220622,
Apache 2.0 and EPL 1.0
- jetty-servlets 9.4.48.v20220622:
https://mvnrepository.com/artifact/org.eclipse.jetty/jetty-servlets/9.4.48.v20220622,
Apache 2.0 and EPL 1.0
- jetty-util-ajax 9.4.48.v20220622:
https://mvnrepository.com/artifact/org.eclipse.jetty/jetty-util-ajax/9.4.48.v20220622,
Apache 2.0 and EPL 1.0
- jetty-webapp 9.4.48.v20220622:
https://mvnrepository.com/artifact/org.eclipse.jetty/jetty-webapp/9.4.48.v20220622,
Apache 2.0 and EPL 1.0
- jetty-xml 9.4.48.v20220622:
https://mvnrepository.com/artifact/org.eclipse.jetty/jetty-xml/9.4.48.v20220622,
Apache 2.0 and EPL 1.0
+ jetty-continuation 9.4.51.v20230217:
https://mvnrepository.com/artifact/org.eclipse.jetty/jetty-continuation/9.4.51.v20230217,
Apache 2.0 and EPL 1.0
+ jetty-http 9.4.51.v20230217:
https://mvnrepository.com/artifact/org.eclipse.jetty/jetty-http/9.4.51.v20230217,
Apache 2.0 and EPL 1.0
+ jetty-io 9.4.51.v20230217:
https://mvnrepository.com/artifact/org.eclipse.jetty/jetty-io/9.4.51.v20230217,
Apache 2.0 and EPL 1.0
+ jetty-security 9.4.51.v20230217:
https://mvnrepository.com/artifact/org.eclipse.jetty/jetty-security/9.4.51.v20230217,
Apache 2.0 and EPL 1.0
+ jetty-server 9.4.51.v20230217:
https://mvnrepository.com/artifact/org.eclipse.jetty/jetty-server/9.4.51.v20230217,
Apache 2.0 and EPL 1.0
+ jetty-servlet 9.4.51.v20230217:
https://mvnrepository.com/artifact/org.eclipse.jetty/jetty-servlet/9.4.51.v20230217,
Apache 2.0 and EPL 1.0
+ jetty-servlets 9.4.51.v20230217:
https://mvnrepository.com/artifact/org.eclipse.jetty/jetty-servlets/9.4.51.v20230217,
Apache 2.0 and EPL 1.0
+ jetty-util-ajax 9.4.51.v20230217:
https://mvnrepository.com/artifact/org.eclipse.jetty/jetty-util-ajax/9.4.51.v20230217,
Apache 2.0 and EPL 1.0
+ jetty-webapp 9.4.51.v20230217:
https://mvnrepository.com/artifact/org.eclipse.jetty/jetty-webapp/9.4.51.v20230217,
Apache 2.0 and EPL 1.0
+ jetty-xml 9.4.51.v20230217:
https://mvnrepository.com/artifact/org.eclipse.jetty/jetty-xml/9.4.51.v20230217,
Apache 2.0 and EPL 1.0
jna 5.10.0:
https://mvnrepository.com/artifact/net.java.dev.jna/jna/5.10.0, Apache 2.0 and
LGPL 2.1
jna-platform 5.10.0:
https://mvnrepository.com/artifact/net.java.dev.jna/jna-platform/5.10.0, Apache
2.0 and LGPL 2.1
joda-time 2.10.13: https://github.com/JodaOrg/joda-time, Apache 2.0
jose4j 0.7.8: https://mvnrepository.com/artifact/org.bitbucket.b_c/jose4j,
Apache 2.0
json-path 2.7.0: https://github.com/json-path/JsonPath, Apache 2.0
- json-smart 2.4.8: https://github.com/netplex/json-smart-v2, Apache 2.0
+ json-smart 2.4.10: https://github.com/netplex/json-smart-v2, Apache 2.0
jsqlparser 4.4: https://github.com/JSQLParser/JSqlParser, Apache 2.0 or
LGPL 4.4
jsr305 3.0.0:
https://mvnrepository.com/artifact/com.google.code.findbugs/jsr305, Apache 2.0
j2objc-annotations 1.3
https://mvnrepository.com/artifact/com.google.j2objc/j2objc-annotations/1.3,
Apache 2.0
@@ -326,48 +328,49 @@ The text of each license is also included at
licenses/LICENSE-[project].txt.
reload4j 1.2.18.3:
https://mvnrepository.com/artifact/ch.qos.reload4j/reload4j/1.2.18.3, Apache 2.0
snakeyaml 1.33:
https://mvnrepository.com/artifact/org.yaml/snakeyaml/1.33, Apache 2.0
snappy-java 1.1.8.4: https://github.com/xerial/snappy-java, Apache 2.0
- spring-aop 5.3.13:
https://mvnrepository.com/artifact/org.springframework/spring-aop/5.3.13,
Apache 2.0
- spring-beans 5.3.22:
https://mvnrepository.com/artifact/org.springframework/spring-beans/5.3.22,
Apache 2.0
- spring-boot 2.7.3:
https://mvnrepository.com/artifact/org.springframework.boot/spring-boot/2.7.3,
Apache 2.0
- spring-boot-actuator 2.7.3:
https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-actuator/2.7.3,
Apache 2.0
- spring-boot-actuator-autoconfigure 2.7.3:
https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-actuator-autoconfigure/2.7.3,
Apache 2.0
- spring-boot-configuration-processor 2.7.3:
https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-configuration-processor/2.7.3,
Apache 2.0
- spring-boot-autoconfigure 2.7.3:
https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-autoconfigure/2.7.3,
Apache 2.0
- spring-boot-starter 2.7.3:
https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter/2.7.3,
Apache 2.0
- spring-boot-starter-actuator 2.7.3:
https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-actuator/2.7.3,
Apache 2.0
- spring-boot-starter-aop 2.7.3:
https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-aop/2.7.3,
Apache 2.0
- spring-boot-starter-jdbc 2.7.3:
https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-jdbc/2.7.3,
Apache 2.0
- spring-boot-starter-jetty 2.7.3:
https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-jetty/2.7.3,
Apache 2.0
- spring-boot-starter-json 2.7.3:
https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-json/2.7.3,
Apache 2.0
- spring-boot-starter-logging 2.7.3:
https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-logging/2.7.3,
Apache 2.0
- spring-boot-starter-quartz 2.7.3:
https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-quartz/2.7.3,
Apache 2.0
- spring-boot-starter-security 2.7.3:
https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-security/2.7.3,
Apache 2.0
- spring-boot-starter-web 2.7.3:
https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-web/2.7.3,
Apache 2.0
- spring-context 5.3.22:
https://mvnrepository.com/artifact/org.springframework/spring-context/5.3.22,
Apache 2.0
- spring-context-support 5.3.13:
https://mvnrepository.com/artifact/org.springframework/spring-context-support/5.3.13,
Apache 2.0
- spring-core 5.3.22:
https://mvnrepository.com/artifact/org.springframework/spring-core/5.3.22,
Apache 2.0
+ spring-aop 5.3.27:
https://mvnrepository.com/artifact/org.springframework/spring-aop/5.3.27,
Apache 2.0
+ spring-beans 5.3.27:
https://mvnrepository.com/artifact/org.springframework/spring-beans/5.3.27,
Apache 2.0
+ spring-boot 2.7.11:
https://mvnrepository.com/artifact/org.springframework.boot/spring-boot/2.7.11,
Apache 2.0
+ spring-boot-actuator 2.7.11:
https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-actuator/2.7.11,
Apache 2.0
+ spring-boot-actuator-autoconfigure 2.7.11:
https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-actuator-autoconfigure/2.7.11,
Apache 2.0
+ spring-boot-configuration-processor 2.7.11:
https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-configuration-processor/2.7.11,
Apache 2.0
+ spring-boot-autoconfigure 2.7.11:
https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-autoconfigure/2.7.11,
Apache 2.0
+ spring-boot-starter 2.7.11:
https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter/2.7.11,
Apache 2.0
+ spring-boot-starter-actuator 2.7.11:
https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-actuator/2.7.11,
Apache 2.0
+ spring-boot-starter-aop 2.7.11:
https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-aop/2.7.11,
Apache 2.0
+ spring-boot-starter-jdbc 2.7.11:
https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-jdbc/2.7.11,
Apache 2.0
+ spring-boot-starter-jetty 2.7.11:
https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-jetty/2.7.11,
Apache 2.0
+ spring-boot-starter-json 2.7.11:
https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-json/2.7.11,
Apache 2.0
+ spring-boot-starter-logging 2.7.11:
https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-logging/2.7.11,
Apache 2.0
+ spring-boot-starter-quartz 2.7.11:
https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-quartz/2.7.11,
Apache 2.0
+ spring-boot-starter-security 2.7.11:
https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-security/2.7.11,
Apache 2.0
+ spring-boot-starter-web 2.7.11:
https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-web/2.7.11,
Apache 2.0
+ spring-context 5.3.27:
https://mvnrepository.com/artifact/org.springframework/spring-context/5.3.27,
Apache 2.0
+ spring-context-support 5.3.27:
https://mvnrepository.com/artifact/org.springframework/spring-context-support/5.3.27,
Apache 2.0
+ spring-core 5.3.27:
https://mvnrepository.com/artifact/org.springframework/spring-core/5.3.27,
Apache 2.0
spring-cloud-kubernetes-client-autoconfig 2.1.3:
https://mvnrepository.com/artifact/org.springframework.cloud/spring-cloud-kubernetes-client-autoconfig,
Apache 2.0
spring-cloud-kubernetes-client-config 2.1.3:
https://mvnrepository.com/artifact/org.springframework.cloud/spring-cloud-kubernetes-client-config,
Apache 2.0
spring-cloud-starter-kubernetes-client-config 2.1.3:
https://mvnrepository.com/artifact/org.springframework.cloud/spring-cloud-starter-kubernetes-client-config,
Apache 2.0
- spring-expression 5.3.13:
https://mvnrepository.com/artifact/org.springframework/spring-expression/5.3.13,
Apache 2.0
+ spring-expression 5.3.27:
https://mvnrepository.com/artifact/org.springframework/spring-expression/5.3.27,
Apache 2.0
springdoc-openapi-ui 1.6.9:
https://mvnrepository.com/artifact/org.springdoc/springdoc-openapi-ui/1.6.9,
Apache 2.0
springdoc-openapi-common 1.6.9:
https://mvnrepository.com/artifact/org.springdoc/springdoc-openapi-common/1.6.9,
Apache 2.0
springdoc-openapi-webmvc-core 1.6.9:
https://mvnrepository.com/artifact/org.springdoc/springdoc-openapi-webmvc-core/1.6.9,
Apache 2.0
- spring-jcl 5.3.13:
https://mvnrepository.com/artifact/org.springframework/spring-jcl/5.3.13,
Apache 2.0
- spring-jdbc 5.3.22:
https://mvnrepository.com/artifact/org.springframework/spring-jdbc/5.3.22,
Apache 2.0
- spring-security-config 5.7.3:
https://mvnrepository.com/artifact/org.springframework.security/spring-security-config/5.7.3,
Apache 2.0
- spring-security-core 5.7.3:
https://mvnrepository.com/artifact/org.springframework.security/spring-security-core/5.7.3,
Apache 2.0
- spring-security-web 5.7.3:
https://mvnrepository.com/artifact/org.springframework.security/spring-security-web/5.7.3,
Apache 2.0
- spring-tx 5.3.22:
https://mvnrepository.com/artifact/org.springframework/spring-tx/5.3.22, Apache
2.0
- spring-web 5.3.13:
https://mvnrepository.com/artifact/org.springframework/spring-web/5.3.13,
Apache 2.0
- spring-webmvc 5.3.13:
https://mvnrepository.com/artifact/org.springframework/spring-webmvc/5.3.13,
Apache 2.0
+ spring-jcl 5.3.27:
https://mvnrepository.com/artifact/org.springframework/spring-jcl/5.3.27,
Apache 2.0
+ spring-jdbc 5.3.27:
https://mvnrepository.com/artifact/org.springframework/spring-jdbc/5.3.27,
Apache 2.0
+ spring-security-config 5.7.8:
https://mvnrepository.com/artifact/org.springframework.security/spring-security-config/5.7.8,
Apache 2.0
+ spring-security-core 5.7.8:
https://mvnrepository.com/artifact/org.springframework.security/spring-security-core/5.7.8,
Apache 2.0
+ spring-security-crypto 5.7.8:
https://mvnrepository.com/artifact/org.springframework.security/spring-security-crypto/5.7.8,
Apache 2.0
+ spring-security-web 5.7.8:
https://mvnrepository.com/artifact/org.springframework.security/spring-security-web/5.7.8,
Apache 2.0
+ spring-tx 5.3.27:
https://mvnrepository.com/artifact/org.springframework/spring-tx/5.3.27, Apache
2.0
+ spring-web 5.3.27:
https://mvnrepository.com/artifact/org.springframework/spring-web/5.3.27,
Apache 2.0
+ spring-webmvc 5.3.27:
https://mvnrepository.com/artifact/org.springframework/spring-webmvc/5.3.27,
Apache 2.0
swagger-annotations 1.6.2:
https://mvnrepository.com/artifact/io.swagger/swagger-annotations/1.6.2, Apache
2.0
swagger-annotations 2.2.0:
https://mvnrepository.com/artifact/io.swagger/swagger-annotations/2.2.0, Apache
2.0
swagger-models 2.2.0:
https://mvnrepository.com/artifact/io.swagger/swagger-models/2.2.0, Apache 2.0
swagger-core 2.2.0:
https://mvnrepository.com/artifact/io.swagger/swagger-core/2.2.0, Apache 2.0
swagger-ui 4.11.1:
https://mvnrepository.com/artifact/io.swagger/swagger-ui/4.11.1, Apache 2.0
token-provider 1.0.1:
https://mvnrepository.com/artifact/org.apache.kerby/token-provider/1.0.1,
Apache 2.0
- tomcat-embed-el 9.0.65:
https://mvnrepository.com/artifact/org.apache.tomcat.embed/tomcat-embed-el/9.0.65,
Apache 2.0
+ tomcat-embed-el 9.0.74:
https://mvnrepository.com/artifact/org.apache.tomcat.embed/tomcat-embed-el/9.0.74,
Apache 2.0
woodstox-core 5.3.0:
https://mvnrepository.com/artifact/com.fasterxml.woodstox/woodstox-core/5.3.0,
Apache 2.0
zookeeper 3.8.0:
https://mvnrepository.com/artifact/org.apache.zookeeper/zookeeper/3.8.0, Apache
2.0
prometheus client_java(simpleclient) 0.15.0:
https://github.com/prometheus/client_java, Apache 2.0
@@ -396,7 +399,7 @@ The text of each license is also included at
licenses/LICENSE-[project].txt.
kubernetes-model-scheduling 5.10.2:
https://mvnrepository.com/artifact/io.fabric8/kubernetes-model-scheduling/5.10.2,
Apache 2.0
kubernetes-model-storageclass 5.10.2:
https://mvnrepository.com/artifact/io.fabric8/kubernetes-model-storageclass/5.10.2,
Apache 2.0
zjsonpatch 0.3.0
https://mvnrepository.com/artifact/io.fabric8/zjsonpatch/0.3.0, Apache 2.0
- jackson-dataformat-yaml 2.13.0
https://mvnrepository.com/artifact/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml/2.13.0,
Apache 2.0
+ jackson-dataformat-yaml 2.13.5
https://mvnrepository.com/artifact/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml/2.13.5,
Apache 2.0
logging-interceptor 4.9.3
https://mvnrepository.com/artifact/com.squareup.okhttp3/logging-interceptor/4.9.3,
Apache 2.0
okio 3.6.0
https://mvnrepository.com/artifact/com.squareup.okio/okio/3.6.0, Apache 2.0
okio-jvm 3.6.0
https://repo1.maven.org/maven2/com/squareup/okio/okio-jvm/3.6.0, Apache 2.0
@@ -405,7 +408,7 @@ The text of each license is also included at
licenses/LICENSE-[project].txt.
jboss-logging:jar 3.4.3.Final
https://mvnrepository.com/artifact/org.jboss.logging/jboss-logging/3.4.3.Final,
Apache 2.0
ion-java 1.0.2
https://mvnrepository.com/artifact/software.amazon.ion/ion-java/1.0.2 Apache
2.0
jmespath-java 1.12.300
https://mvnrepository.com/artifact/com.amazonaws/jmespath-java/1.12.300 Apache
2.0
- jackson-dataformat-cbor 2.13.0
https://mvnrepository.com/artifact/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor/2.13.0
Apache 2.0
+ jackson-dataformat-cbor 2.13.5
https://mvnrepository.com/artifact/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor/2.13.5
Apache 2.0
aws-java-sdk-emr 1.12.300
https://mvnrepository.com/artifact/com.amazonaws/aws-java-sdk-emr/1.12.300
Apache 2.0
aws-java-sdk-core 1.12.300
https://mvnrepository.com/artifact/com.amazonaws/aws-java-sdk-core/1.12.300
Apache 2.0
aws-java-sdk-s3 1.12.300
https://mvnrepository.com/artifact/com.amazonaws/aws-java-sdk-s3/1.12.300
Apache 2.0
@@ -455,7 +458,7 @@ The text of each license is also included at
licenses/LICENSE-[project].txt.
netty-codec-http 4.1.53.Final:
https://mvnrepository.com/artifact/io.netty/netty-codec-http/4.1.53.Final,
Apache 2.0
netty-codec-http2 4.1.53.Final:
https://mvnrepository.com/artifact/io.netty/netty-codec-http2/4.1.53.Final,
Apache 2.0
netty-nio-client 2.17.282:
https://mvnrepository.com/artifact/software.amazon.awssdk/netty-nio-client/2.17.282,
Apache 2.0
- netty-transport-classes-epoll 4.1.79.Final:
https://mvnrepository.com/artifact/io.netty/netty-transport-classes-epoll/4.1.79.Final,
Apache 2.0
+ netty-transport-classes-epoll 4.1.91.Final:
https://mvnrepository.com/artifact/io.netty/netty-transport-classes-epoll/4.1.91.Final,
Apache 2.0
profiles 2.17.282:
https://mvnrepository.com/artifact/software.amazon.awssdk/profiles/2.17.282,
Apache 2.0
protocol-core 2.17.282:
https://mvnrepository.com/artifact/software.amazon.awssdk/protocol-core/2.17.282,
Apache 2.0
regions 2.17.282:
https://mvnrepository.com/artifact/software.amazon.awssdk/regions/2.17.282,
Apache 2.0
@@ -463,20 +466,20 @@ The text of each license is also included at
licenses/LICENSE-[project].txt.
third-party-jackson-core 2.17.282:
https://mvnrepository.com/artifact/software.amazon.awssdk/third-party-jackson-core/2.17.282,
Apache 2.0
utils 2.17.282:
https://mvnrepository.com/artifact/software.amazon.awssdk/utils/2.17.282,
Apache 2.0
content-type 2.2:
https://mvnrepository.com/artifact/com.nimbusds/content-type/2.2, Apache 2.0
- jackson-dataformat-xml 2.13.3:
https://mvnrepository.com/artifact/com.fasterxml.jackson.dataformat/jackson-dataformat-xml/2.13.3,
Apache 2.0
+ jackson-dataformat-xml 2.13.5:
https://mvnrepository.com/artifact/com.fasterxml.jackson.dataformat/jackson-dataformat-xml/2.13.5,
Apache 2.0
lang-tag 1.6:
https://mvnrepository.com/artifact/com.nimbusds/lang-tag/1.6, Apache 2.0
netty-codec-dns 4.1.53.Final:
https://mvnrepository.com/artifact/io.netty/netty-codec-dns/4.1.53.Final,
Apache 2.0
netty-codec-socks 4.1.53.Final:
https://mvnrepository.com/artifact/io.netty/netty-codec-socks/4.1.53.Final,
Apache 2.0
netty-handler-proxy 4.1.53.Final:
https://mvnrepository.com/artifact/io.netty/netty-handler-proxy/4.1.53.Final,
Apache 2.0
netty-resolver-dns 4.1.53.Final:
https://mvnrepository.com/artifact/io.netty/netty-resolver-dns/4.1.53.Final,
Apache 2.0
netty-resolver-dns-native-macos 4.1.53.Final:
https://mvnrepository.com/artifact/io.netty/netty-resolver-dns-native-macos/4.1.53.Final,
Apache 2.0
- netty-tcnative-boringssl-static 2.0.53.Final:
https://mvnrepository.com/artifact/io.netty/netty-tcnative-boringssl-static/2.0.53.Final,
Apache 2.0
+ netty-tcnative-boringssl-static 2.0.59.Final:
https://mvnrepository.com/artifact/io.netty/netty-tcnative-boringssl-static/2.0.59.Final,
Apache 2.0
netty-transport-native-epoll 4.1.53.Final:
https://mvnrepository.com/artifact/io.netty/netty-transport-native-epoll/4.1.53.Final,
Apache 2.0
netty-transport-native-kqueue 4.1.53.Final:
https://mvnrepository.com/artifact/io.netty/netty-transport-native-kqueue/4.1.53.Final,
Apache 2.0
oauth2-oidc-sdk 9.35:
https://mvnrepository.com/artifact/com.nimbusds/oauth2-oidc-sdk/9.35, Apache 2.0
- reactor-core 3.4.22:
https://mvnrepository.com/artifact/io.projectreactor/reactor-core/3.4.22,
Apache 2.0
- reactor-netty-core 1.0.22:
https://mvnrepository.com/artifact/io.projectreactor.netty/reactor-netty-core/1.0.22,
Apache 2.0
- reactor-netty-http 1.0.22:
https://mvnrepository.com/artifact/io.projectreactor.netty/reactor-netty-http/1.0.22,
Apache 2.0
+ reactor-core 3.4.29:
https://mvnrepository.com/artifact/io.projectreactor/reactor-core/3.4.29,
Apache 2.0
+ reactor-netty-core 1.0.31:
https://mvnrepository.com/artifact/io.projectreactor.netty/reactor-netty-core/1.0.31,
Apache 2.0
+ reactor-netty-http 1.0.31:
https://mvnrepository.com/artifact/io.projectreactor.netty/reactor-netty-http/1.0.31,
Apache 2.0
woodstox-core 6.4.0:
https://mvnrepository.com/artifact/com.fasterxml.woodstox/woodstox-core/6.4.0,
Apache 2.0
auto-value 1.10.1:
https://mvnrepository.com/artifact/com.google.auto.value/auto-value/1.10.1,
Apache 2.0
auto-value-annotations 1.10.4:
https://mvnrepository.com/artifact/com.google.auto.value/auto-value-annotations/1.10.4,
Apache 2.0
@@ -541,7 +544,7 @@ The text of each license is also included at
licenses/LICENSE-[project].txt.
py4j 0.10.9: https://mvnrepository.com/artifact/net.sf.py4j/py4j/0.10.9,
BSD 2-clause
LatencyUtils 2.0.3: https://github.com/LatencyUtils/LatencyUtils,
BSD-2-Clause
janino 3.0.16:
https://mvnrepository.com/artifact/org.codehaus.janino/janino/3.0.16, BSD
3-clause
- commons-compiler 3.1.7:
https://mvnrepository.com/artifact/org.codehaus.janino/janino/3.0.16, BSD
3-clause
+ commons-compiler 3.1.9:
https://mvnrepository.com/artifact/org.codehaus.janino/janino/3.0.16, BSD
3-clause
protobuf-java 3.17.2:
https://mvnrepository.com/artifact/com.google.protobuf/protobuf-java/3.17.2 BSD
3-clause
protobuf-java-util 3.17.2:
https://mvnrepository.com/artifact/com.google.protobuf/protobuf-java-util/3.17.2
BSD 3-clause
api-common 2.6.0:
https://mvnrepository.com/artifact/com.google.api/api-common/2.6.0, BSD
diff --git a/tools/dependencies/known-dependencies.txt
b/tools/dependencies/known-dependencies.txt
index 78da859a30..c03b027922 100644
--- a/tools/dependencies/known-dependencies.txt
+++ b/tools/dependencies/known-dependencies.txt
@@ -1,7 +1,7 @@
HdrHistogram-2.1.12.jar
HikariCP-4.0.3.jar
LatencyUtils-2.0.3.jar
-accessors-smart-2.4.8.jar
+accessors-smart-2.4.9.jar
animal-sniffer-annotations-1.19.jar
annotations-2.17.282.jar
annotations-13.0.jar
@@ -39,7 +39,7 @@ commons-cli-1.2.jar
commons-codec-1.11.jar
commons-collections-3.2.2.jar
commons-collections4-4.5.0.jar
-commons-compiler-3.1.7.jar
+commons-compiler-3.1.9.jar
commons-compress-1.27.1.jar
commons-configuration2-2.1.1.jar
commons-io-2.19.0.jar
@@ -85,15 +85,15 @@ jackson-annotations-2.13.4.jar
jackson-core-2.13.4.jar
jackson-core-asl-1.9.13.jar
jackson-databind-2.13.4.jar
-jackson-dataformat-cbor-2.13.3.jar
-jackson-dataformat-yaml-2.13.3.jar
-jackson-datatype-jdk8-2.13.3.jar
+jackson-dataformat-cbor-2.13.5.jar
+jackson-dataformat-yaml-2.13.5.jar
+jackson-datatype-jdk8-2.13.5.jar
jackson-datatype-jsr310-2.13.4.jar
-jackson-jaxrs-base-2.13.3.jar
-jackson-jaxrs-json-provider-2.13.3.jar
+jackson-jaxrs-base-2.13.5.jar
+jackson-jaxrs-json-provider-2.13.5.jar
jackson-mapper-asl-1.9.13.jar
-jackson-module-jaxb-annotations-2.13.3.jar
-jackson-module-parameter-names-2.13.3.jar
+jackson-module-jaxb-annotations-2.13.5.jar
+jackson-module-parameter-names-2.13.5.jar
jakarta.activation-api-1.2.2.jar
jakarta.annotation-api-1.3.5.jar
jakarta.servlet-api-4.0.4.jar
@@ -111,17 +111,17 @@ jcip-annotations-1.0-1.jar
jersey-servlet-1.19.jar
jetcd-common-0.5.11.jar
jetcd-core-0.5.11.jar
-jetty-continuation-9.4.48.v20220622.jar
-jetty-http-9.4.48.v20220622.jar
-jetty-io-9.4.48.v20220622.jar
-jetty-security-9.4.48.v20220622.jar
-jetty-server-9.4.48.v20220622.jar
-jetty-servlet-9.4.48.v20220622.jar
-jetty-servlets-9.4.48.v20220622.jar
-jetty-util-9.4.48.v20220622.jar
-jetty-util-ajax-9.4.48.v20220622.jar
-jetty-webapp-9.4.48.v20220622.jar
-jetty-xml-9.4.48.v20220622.jar
+jetty-continuation-9.4.51.v20230217.jar
+jetty-http-9.4.51.v20230217.jar
+jetty-io-9.4.51.v20230217.jar
+jetty-security-9.4.51.v20230217.jar
+jetty-server-9.4.51.v20230217.jar
+jetty-servlet-9.4.51.v20230217.jar
+jetty-servlets-9.4.51.v20230217.jar
+jetty-util-9.4.51.v20230217.jar
+jetty-util-ajax-9.4.51.v20230217.jar
+jetty-webapp-9.4.51.v20230217.jar
+jetty-xml-9.4.51.v20230217.jar
jmespath-java-1.12.300.jar
jna-5.10.0.jar
jna-platform-5.10.0.jar
@@ -129,7 +129,7 @@ joda-time-2.10.13.jar
jose4j-0.7.8.jar
jsch-0.1.55.jar
json-20140107.jar
-json-smart-2.4.8.jar
+json-smart-2.4.10.jar
json-utils-2.17.282.jar
jsp-api-2.1.jar
jsqlparser-4.4.jar
@@ -182,8 +182,8 @@ logback-core-1.2.11.jar
logging-interceptor-4.9.3.jar
metrics-core-4.2.11.jar
metrics-spi-2.17.282.jar
-micrometer-core-1.9.3.jar
-micrometer-registry-prometheus-1.9.3.jar
+micrometer-core-1.9.10.jar
+micrometer-registry-prometheus-1.9.10.jar
mybatis-3.5.10.jar
mybatis-plus-3.5.2.jar
mybatis-plus-annotation-3.5.2.jar
@@ -201,9 +201,9 @@ netty-handler-4.1.53.Final.jar
netty-nio-client-2.17.282.jar
netty-resolver-4.1.53.Final.jar
netty-tcnative-2.0.48.Final.jar
-netty-tcnative-classes-2.0.53.Final.jar
+netty-tcnative-classes-2.0.59.Final.jar
netty-transport-4.1.53.Final.jar
-netty-transport-classes-epoll-4.1.79.Final.jar
+netty-transport-classes-epoll-4.1.91.Final.jar
netty-transport-native-epoll-4.1.53.Final.jar
netty-transport-native-unix-common-4.1.53.Final.jar
nimbus-jose-jwt-9.8.1.jar
@@ -233,23 +233,23 @@ simpleclient_tracer_otel_agent-0.15.0.jar
slf4j-api-1.7.36.jar
snakeyaml-1.33.jar
snappy-java-1.1.10.1.jar
-spring-aop-5.3.22.jar
-spring-beans-5.3.22.jar
-spring-boot-2.7.3.jar
-spring-boot-actuator-2.7.3.jar
-spring-boot-actuator-autoconfigure-2.7.3.jar
-spring-boot-autoconfigure-2.7.3.jar
+spring-aop-5.3.27.jar
+spring-beans-5.3.27.jar
+spring-boot-2.7.11.jar
+spring-boot-actuator-2.7.11.jar
+spring-boot-actuator-autoconfigure-2.7.11.jar
+spring-boot-autoconfigure-2.7.11.jar
spring-boot-configuration-processor-2.6.1.jar
-spring-boot-starter-2.7.3.jar
-spring-boot-starter-actuator-2.7.3.jar
-spring-boot-starter-aop-2.7.3.jar
-spring-boot-starter-jdbc-2.7.3.jar
-spring-boot-starter-jetty-2.7.3.jar
-spring-boot-starter-json-2.7.3.jar
-spring-boot-starter-logging-2.7.3.jar
-spring-boot-starter-quartz-2.7.3.jar
-spring-boot-starter-security-2.7.3.jar
-spring-boot-starter-web-2.7.3.jar
+spring-boot-starter-2.7.11.jar
+spring-boot-starter-actuator-2.7.11.jar
+spring-boot-starter-aop-2.7.11.jar
+spring-boot-starter-jdbc-2.7.11.jar
+spring-boot-starter-jetty-2.7.11.jar
+spring-boot-starter-json-2.7.11.jar
+spring-boot-starter-logging-2.7.11.jar
+spring-boot-starter-quartz-2.7.11.jar
+spring-boot-starter-security-2.7.11.jar
+spring-boot-starter-web-2.7.11.jar
spring-cloud-commons-3.1.3.jar
spring-cloud-context-3.1.3.jar
spring-cloud-kubernetes-commons-2.1.3.jar
@@ -258,21 +258,21 @@ spring-cloud-kubernetes-client-config-2.1.3.jar
spring-cloud-starter-3.1.3.jar
spring-cloud-starter-bootstrap-3.1.3.jar
spring-cloud-starter-kubernetes-client-config-2.1.3.jar
-spring-context-5.3.22.jar
-spring-context-support-5.3.22.jar
-spring-core-5.3.22.jar
-spring-expression-5.3.22.jar
-spring-jcl-5.3.22.jar
-spring-jdbc-5.3.22.jar
+spring-context-5.3.27.jar
+spring-context-support-5.3.27.jar
+spring-core-5.3.27.jar
+spring-expression-5.3.27.jar
+spring-jcl-5.3.27.jar
+spring-jdbc-5.3.27.jar
spring-ldap-core-2.4.1.jar
-spring-security-config-5.7.3.jar
-spring-security-core-5.7.3.jar
-spring-security-crypto-5.7.3.jar
+spring-security-config-5.7.8.jar
+spring-security-core-5.7.8.jar
+spring-security-crypto-5.7.8.jar
spring-security-rsa-1.0.10.RELEASE.jar
-spring-security-web-5.7.3.jar
-spring-tx-5.3.22.jar
-spring-web-5.3.22.jar
-spring-webmvc-5.3.22.jar
+spring-security-web-5.7.8.jar
+spring-tx-5.3.27.jar
+spring-web-5.3.27.jar
+spring-webmvc-5.3.27.jar
springdoc-openapi-ui-1.6.9.jar
springdoc-openapi-common-1.6.9.jar
springdoc-openapi-webmvc-core-1.6.9.jar
@@ -284,7 +284,7 @@ swagger-models-2.2.0.jar
swagger-ui-4.11.1.jar
third-party-jackson-core-2.17.282.jar
token-provider-1.0.1.jar
-tomcat-embed-el-9.0.65.jar
+tomcat-embed-el-9.0.74.jar
utils-2.17.282.jar
woodstox-core-5.3.0.jar
zjsonpatch-0.4.11.jar
@@ -322,7 +322,7 @@ azure-core-1.36.0.jar
azure-core-http-netty-1.13.0.jar
azure-identity-1.7.1.jar
content-type-2.2.jar
-jackson-dataformat-xml-2.13.3.jar
+jackson-dataformat-xml-2.13.5.jar
lang-tag-1.6.jar
msal4j-1.13.3.jar
msal4j-persistence-extension-1.1.0.jar
@@ -331,18 +331,18 @@ netty-codec-socks-4.1.53.Final.jar
netty-handler-proxy-4.1.53.Final.jar
netty-resolver-dns-4.1.53.Final.jar
netty-resolver-dns-native-macos-4.1.53.Final-osx-x86_64.jar
-netty-tcnative-boringssl-static-2.0.53.Final-linux-aarch_64.jar
-netty-tcnative-boringssl-static-2.0.53.Final-linux-x86_64.jar
-netty-tcnative-boringssl-static-2.0.53.Final-osx-aarch_64.jar
-netty-tcnative-boringssl-static-2.0.53.Final-osx-x86_64.jar
-netty-tcnative-boringssl-static-2.0.53.Final-windows-x86_64.jar
-netty-tcnative-boringssl-static-2.0.53.Final.jar
+netty-tcnative-boringssl-static-2.0.59.Final-linux-aarch_64.jar
+netty-tcnative-boringssl-static-2.0.59.Final-linux-x86_64.jar
+netty-tcnative-boringssl-static-2.0.59.Final-osx-aarch_64.jar
+netty-tcnative-boringssl-static-2.0.59.Final-osx-x86_64.jar
+netty-tcnative-boringssl-static-2.0.59.Final-windows-x86_64.jar
+netty-tcnative-boringssl-static-2.0.59.Final.jar
netty-transport-native-epoll-4.1.53.Final-linux-x86_64.jar
netty-transport-native-kqueue-4.1.53.Final-osx-x86_64.jar
oauth2-oidc-sdk-9.35.jar
-reactor-core-3.4.22.jar
-reactor-netty-core-1.0.22.jar
-reactor-netty-http-1.0.22.jar
+reactor-core-3.4.29.jar
+reactor-netty-core-1.0.31.jar
+reactor-netty-http-1.0.31.jar
azure-resourcemanager-2.21.0.jar
azure-resourcemanager-appplatform-2.21.0.jar
azure-resourcemanager-appservice-2.21.0.jar
