This is an automated email from the ASF dual-hosted git repository.
morningman pushed a commit to branch branch-4.0
in repository https://gitbox.apache.org/repos/asf/doris.git
The following commit(s) were added to refs/heads/branch-4.0 by this push:
new e60e2087b0e branch-4.0: [fix](fe-dep) upgrade vulnerable dependencies
#62274 (#62317)
e60e2087b0e is described below
commit e60e2087b0e9a8168ed47a2655a9b426004e0133
Author: github-actions[bot]
<41898282+github-actions[bot]@users.noreply.github.com>
AuthorDate: Fri May 15 21:12:12 2026 -0700
branch-4.0: [fix](fe-dep) upgrade vulnerable dependencies #62274 (#62317)
Cherry-picked from #62274
Co-authored-by: Calvin Kirs <[email protected]>
---
fe/pom.xml | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/fe/pom.xml b/fe/pom.xml
index b0d8836094e..5f083768bd6 100644
--- a/fe/pom.xml
+++ b/fe/pom.xml
@@ -284,7 +284,7 @@ under the License.
<metrics-core.version>4.0.2</metrics-core.version>
<!--Netty 4.1.94 is not compatible with arrow flight.-->
<!--Need to ensure that the version is the same as in
arrow/java/pom.xml or compatible with it.-->
- <netty-all.version>4.1.130.Final</netty-all.version>
+ <netty-all.version>4.1.132.Final</netty-all.version>
<!--The dependence of transitive dependence cannot be ruled out, only
Saving the nation through twisted ways.-->
<netty-3-test.version>3.10.6.Final</netty-3-test.version>
<objenesis.version>2.1</objenesis.version>
@@ -361,7 +361,7 @@ under the License.
<antlr4.version>4.13.1</antlr4.version>
<joda.version>2.8.1</joda.version>
<project.scm.id>github</project.scm.id>
- <spring.version>3.5.7</spring.version>
+ <spring.version>3.5.13</spring.version>
<spring-framework.version>6.2.12</spring-framework.version>
<orc.version>1.8.4</orc.version>
<zookeeper.version>3.9.3</zookeeper.version>
@@ -371,7 +371,7 @@ under the License.
<woodstox.version>6.5.1</woodstox.version>
<kerby.version>2.0.3</kerby.version>
<jettison.version>1.5.4</jettison.version>
- <jetty.version>12.0.29</jetty.version>
+ <jetty.version>12.0.34</jetty.version>
<jetty-http.version>11.0.26</jetty-http.version>
<immutables.version>2.9.3</immutables.version>
<ivy.version>2.5.2</ivy.version>
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
