This is an automated email from the ASF dual-hosted git repository.
gsaihemanth pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/hive.git
The following commit(s) were added to refs/heads/master by this push:
new 08944ea420e HIVE-29000: Upgrade nimbus-jose-jwt (#5855)
08944ea420e is described below
commit 08944ea420e1f27d8bdb470159493defc806c71f
Author: Simran Arora <82223479+arorasimran0...@users.noreply.github.com>
AuthorDate: Fri Aug 22 00:02:29 2025 +0530
HIVE-29000: Upgrade nimbus-jose-jwt (#5855)
---
pom.xml | 4 ++++
service/pom.xml | 2 +-
standalone-metastore/metastore-common/pom.xml | 6 ++++++
standalone-metastore/pom.xml | 2 +-
4 files changed, 12 insertions(+), 2 deletions(-)
diff --git a/pom.xml b/pom.xml
index 3227c86aecd..58aa3532d08 100644
--- a/pom.xml
+++ b/pom.xml
@@ -935,6 +935,10 @@
<artifactId>hadoop-auth</artifactId>
<version>${hadoop.version}</version>
<exclusions>
+ <exclusion>
+ <groupId>com.nimbusds</groupId>
+ <artifactId>nimbus-jose-jwt</artifactId>
+ </exclusion>
<exclusion>
<groupId>commons-logging</groupId>
<artifactId>commons-logging</artifactId>
diff --git a/service/pom.xml b/service/pom.xml
index 427712db8e9..5921d2350c7 100644
--- a/service/pom.xml
+++ b/service/pom.xml
@@ -25,7 +25,7 @@
<name>Hive Service</name>
<properties>
<hive.path.to.root>..</hive.path.to.root>
- <nimbus-jose-jwt.version>9.37.3</nimbus-jose-jwt.version>
+ <nimbus-jose-jwt.version>10.4.2</nimbus-jose-jwt.version>
</properties>
<dependencies>
<!-- dependencies are always listed in sorted order by groupId, artifactId
-->
diff --git a/standalone-metastore/metastore-common/pom.xml
b/standalone-metastore/metastore-common/pom.xml
index b9441967464..07cbd5a69dc 100644
--- a/standalone-metastore/metastore-common/pom.xml
+++ b/standalone-metastore/metastore-common/pom.xml
@@ -75,6 +75,12 @@
<dependency>
<groupId>com.github.joshelser</groupId>
<artifactId>dropwizard-metrics-hadoop-metrics2-reporter</artifactId>
+ <exclusions>
+ <exclusion>
+ <groupId>com.nimbusds</groupId>
+ <artifactId>nimbus-jose-jwt</artifactId>
+ </exclusion>
+ </exclusions>
</dependency>
<dependency>
<groupId>com.google.guava</groupId>
diff --git a/standalone-metastore/pom.xml b/standalone-metastore/pom.xml
index 08285cd6d33..3753bde0a7a 100644
--- a/standalone-metastore/pom.xml
+++ b/standalone-metastore/pom.xml
@@ -117,7 +117,7 @@
<httpcomponents.core.version>4.4.13</httpcomponents.core.version>
<httpcomponents.client.version>4.5.13</httpcomponents.client.version>
<pac4j-core.version>4.5.8</pac4j-core.version>
- <nimbus-jose-jwt.version>9.37.3</nimbus-jose-jwt.version>
+ <nimbus-jose-jwt.version>10.4.2</nimbus-jose-jwt.version>
<jetty.version>9.4.57.v20241219</jetty.version>
<javax.annotation-api.version>1.3.2</javax.annotation-api.version>
<!-- If upgrading, upgrade atlas as well in ql/pom.xml, which brings in
some springframework dependencies transitively -->
