This is an automated email from the ASF dual-hosted git repository.
hulee pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/helix.git
The following commit(s) were added to refs/heads/master by this push:
new d1c49fd73 [issue-1728] upgrade guava due to cve (#2042)
d1c49fd73 is described below
commit d1c49fd73757323e1604c690541732dee08e4113
Author: PJ Fanning <[email protected]>
AuthorDate: Tue Apr 19 20:21:45 2022 +0200
[issue-1728] upgrade guava due to cve (#2042)
---
helix-core/helix-core-1.0.3-SNAPSHOT.ivy | 2 +-
helix-core/pom.xml | 2 +-
metadata-store-directory-common/pom.xml | 2 +-
3 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/helix-core/helix-core-1.0.3-SNAPSHOT.ivy
b/helix-core/helix-core-1.0.3-SNAPSHOT.ivy
index d06f3c1f5..2e7bbf8fe 100755
--- a/helix-core/helix-core-1.0.3-SNAPSHOT.ivy
+++ b/helix-core/helix-core-1.0.3-SNAPSHOT.ivy
@@ -59,7 +59,7 @@ under the License.
<dependency org="commons-cli" name="commons-cli" rev="1.2"
conf="compile->compile(default);runtime->runtime(default);default->default"/>
<dependency org="commons-math" name="commons-math" rev="2.1"
conf="compile->compile(default);runtime->runtime(default);default->default"/>
<dependency org="org.apache.commons" name="commons-math3" rev="3.6.1"
conf="compile->compile(default);runtime->runtime(default);default->default"/>
- <dependency org="com.google.guava" name="guava" rev="15.0"
conf="compile->compile(default);runtime->runtime(default);default->default"/>
+ <dependency org="com.google.guava" name="guava" rev="31.1-jre"
conf="compile->compile(default);runtime->runtime(default);default->default"/>
<dependency org="org.yaml" name="snakeyaml" rev="1.30"
conf="compile->compile(default);runtime->runtime(default);default->default"/>
<dependency org="commons-logging" name="commons-logging-api" rev="1.1"
conf="compile->compile(*),master(*);runtime->runtime(*)"/>
<dependency org="io.dropwizard.metrics" name="metrics-core" rev="4.1.14"
conf="compile->compile(default);runtime->runtime(default);default->default"/>
diff --git a/helix-core/pom.xml b/helix-core/pom.xml
index 9678dd32e..7bbcf4857 100755
--- a/helix-core/pom.xml
+++ b/helix-core/pom.xml
@@ -124,7 +124,7 @@
<dependency>
<groupId>com.google.guava</groupId>
<artifactId>guava</artifactId>
- <version>15.0</version>
+ <version>31.1-jre</version>
</dependency>
<dependency>
<groupId>org.yaml</groupId>
diff --git a/metadata-store-directory-common/pom.xml
b/metadata-store-directory-common/pom.xml
index 03de14973..4386f803d 100644
--- a/metadata-store-directory-common/pom.xml
+++ b/metadata-store-directory-common/pom.xml
@@ -74,7 +74,7 @@
<dependency>
<groupId>com.google.guava</groupId>
<artifactId>guava</artifactId>
- <version>20.0</version>
+ <version>31.1-jre</version>
<scope>compile</scope>
</dependency>
<dependency>
