This is an automated email from the ASF dual-hosted git repository.
dongjoon pushed a commit to branch branch-1.8
in repository https://gitbox.apache.org/repos/asf/orc.git
The following commit(s) were added to refs/heads/branch-1.8 by this push:
new b1c7fe224 ORC-1173: Pin jodd-core to 3.5.2 (#1119)
b1c7fe224 is described below
commit b1c7fe22496703859438b23abfa3077e763428d5
Author: Dongjoon Hyun <[email protected]>
AuthorDate: Wed May 18 17:47:57 2022 -0700
ORC-1173: Pin jodd-core to 3.5.2 (#1119)
This PR aims to pin `jodd-core` to 3.5.2 to match with the Apache Spark.
This will prevent Dependabot from confusing.
https://github.com/apache/spark/blob/96f4b7dbc1facd1a38be296263606aa312861c95/pom.xml#L192
```xml
<jodd.version>3.5.2</jodd.version>
```
N/A
(cherry picked from commit 69c8f89b5e715beca26c4faf3a2cb1e72f064acc)
Signed-off-by: Dongjoon Hyun <[email protected]>
---
.github/dependabot.yml | 3 +++
1 file changed, 3 insertions(+)
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 6e0a9e5ad..a0e902813 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -42,3 +42,6 @@ updates:
# Pin protobuf-java to 2.5.0
- dependency-name: "com.google.protobuf:protobuf-java"
versions: "[2.5.1,)"
+ # Pin jodd-core to 3.5.2
+ - dependency-name: "org.jodd:jodd-core"
+ versions: "[3.5.3,)"
