This is an automated email from the ASF dual-hosted git repository.
bowenliang pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/kyuubi.git
The following commit(s) were added to refs/heads/master by this push:
new 04468a60c9 [KYUUBI #6737] Bump vertx-grpc and vertx-core from 4.5.1 to
4.5.3
04468a60c9 is described below
commit 04468a60c9a120e8f0f3e2aa4984210eb05bd110
Author: madlnu <[email protected]>
AuthorDate: Thu Oct 17 15:14:53 2024 +0800
[KYUUBI #6737] Bump vertx-grpc and vertx-core from 4.5.1 to 4.5.3
# :mag: Description
## Describe Your Solution ๐ง
Bump vertx-core from 4.5.1 to 4.5.3 to fix CVE-2024-1300 and CVE-2024-1023
## Types of changes :bookmark:
- [ ] Bugfix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
## Test Plan ๐งช
Build and ran locally
---
# Checklist ๐
- [ ] This patch was not authored or co-authored using [Generative
Tooling](https://www.apache.org/legal/generative-tooling.html)
**Be nice. Be informative.**
Closes #6737 from Madhukar525722/vertx.
Closes #6737
7c758e082 [madlnu] Bump vertx-grpc from 4.5.1 to 4.5.3
Authored-by: madlnu <[email protected]>
Signed-off-by: Bowen Liang <[email protected]>
---
dev/dependencyList | 4 ++--
pom.xml | 7 +++++++
2 files changed, 9 insertions(+), 2 deletions(-)
diff --git a/dev/dependencyList b/dev/dependencyList
index a6754d5226..8c549c8bea 100644
--- a/dev/dependencyList
+++ b/dev/dependencyList
@@ -182,7 +182,7 @@ swagger-jaxrs2/2.2.1//swagger-jaxrs2-2.2.1.jar
swagger-models/2.2.1//swagger-models-2.2.1.jar
trino-client/411//trino-client-411.jar
units/1.7//units-1.7.jar
-vertx-core/4.5.1//vertx-core-4.5.1.jar
-vertx-grpc/4.5.1//vertx-grpc-4.5.1.jar
+vertx-core/4.5.3//vertx-core-4.5.3.jar
+vertx-grpc/4.5.3//vertx-grpc-4.5.3.jar
zjsonpatch/0.3.0//zjsonpatch-0.3.0.jar
zstd-jni/1.5.5-1//zstd-jni-1.5.5-1.jar
diff --git a/pom.xml b/pom.xml
index d6a64b4810..85c3d1eaf4 100644
--- a/pom.xml
+++ b/pom.xml
@@ -214,6 +214,7 @@
<trino.client.version>411</trino.client.version>
<trino.tpcds.version>1.4</trino.tpcds.version>
<trino.tpch.version>1.1</trino.tpch.version>
+ <vertx.version>4.5.3</vertx.version>
<!-- webui -->
<webui.skip>true</webui.skip>
@@ -909,6 +910,12 @@
</exclusions>
</dependency>
+ <dependency>
+ <groupId>io.vertx</groupId>
+ <artifactId>vertx-grpc</artifactId>
+ <version>${vertx.version}</version>
+ </dependency>
+
<dependency>
<groupId>io.etcd</groupId>
<artifactId>jetcd-core</artifactId>
