This is an automated email from the ASF dual-hosted git repository.
dongjoon pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/orc.git
The following commit(s) were added to refs/heads/main by this push:
new 2fe35bdb2 ORC-1746: Bump `netty-all` to 4.1.110.Final in `bench` module
2fe35bdb2 is described below
commit 2fe35bdb25d54b5288ddde0dcd8ebb716a8ae69e
Author: sychen <[email protected]>
AuthorDate: Mon Jul 15 10:43:53 2024 -0700
ORC-1746: Bump `netty-all` to 4.1.110.Final in `bench` module
### What changes were proposed in this pull request?
This PR aims to bump `netty-all` to 4.1.110.Final.
### Why are the changes needed?
1. Align the netty version with Spark 4.0.0-preview1 version
2. Avoid potential netty CVE
https://github.com/advisories/GHSA-5jpm-x58v-624v
### How was this patch tested?
GA
### Was this patch authored or co-authored using generative AI tooling?
No
Closes #1984 from cxzl25/ORC-1746.
Authored-by: sychen <[email protected]>
Signed-off-by: Dongjoon Hyun <[email protected]>
---
java/bench/pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/java/bench/pom.xml b/java/bench/pom.xml
index 0dd738b93..1d6b33364 100644
--- a/java/bench/pom.xml
+++ b/java/bench/pom.xml
@@ -92,7 +92,7 @@
<dependency>
<groupId>io.netty</groupId>
<artifactId>netty-all</artifactId>
- <version>4.1.96.Final</version>
+ <version>4.1.110.Final</version>
<scope>runtime</scope>
</dependency>
<dependency>
