This is an automated email from the ASF dual-hosted git repository.

dongjoon pushed a commit to branch branch-2.0
in repository https://gitbox.apache.org/repos/asf/orc.git


The following commit(s) were added to refs/heads/branch-2.0 by this push:
     new c06ea184a ORC-1746: Bump `netty-all` to 4.1.110.Final in `bench` module
c06ea184a is described below

commit c06ea184a06269c9c417560b25e3a1a6dc27c8f7
Author: sychen <[email protected]>
AuthorDate: Mon Jul 15 10:43:53 2024 -0700

    ORC-1746: Bump `netty-all` to 4.1.110.Final in `bench` module
    
    ### What changes were proposed in this pull request?
    This PR aims to bump `netty-all` to 4.1.110.Final.
    
    ### Why are the changes needed?
    1. Align the netty version with Spark 4.0.0-preview1 version
    2. Avoid potential netty CVE 
https://github.com/advisories/GHSA-5jpm-x58v-624v
    
    ### How was this patch tested?
    GA
    
    ### Was this patch authored or co-authored using generative AI tooling?
    No
    
    Closes #1984 from cxzl25/ORC-1746.
    
    Authored-by: sychen <[email protected]>
    Signed-off-by: Dongjoon Hyun <[email protected]>
    (cherry picked from commit 2fe35bdb25d54b5288ddde0dcd8ebb716a8ae69e)
    Signed-off-by: Dongjoon Hyun <[email protected]>
---
 java/bench/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/java/bench/pom.xml b/java/bench/pom.xml
index 6e6c45a65..ebcd396ff 100644
--- a/java/bench/pom.xml
+++ b/java/bench/pom.xml
@@ -92,7 +92,7 @@
       <dependency>
         <groupId>io.netty</groupId>
         <artifactId>netty-all</artifactId>
-        <version>4.1.96.Final</version>
+        <version>4.1.110.Final</version>
         <scope>runtime</scope>
       </dependency>
       <dependency>

Reply via email to