This is an automated email from the ASF dual-hosted git repository.
vjasani pushed a commit to branch 5.2
in repository https://gitbox.apache.org/repos/asf/phoenix.git
The following commit(s) were added to refs/heads/5.2 by this push:
new 96ad75b3d8 PHOENIX-7393 Update transitive dependency of woodstox-core
to 5.4.0 (#1957)
96ad75b3d8 is described below
commit 96ad75b3d8a54e154cdcf2e46e5be7b1a8c56c71
Author: Grzegorz Kokosiński <[email protected]>
AuthorDate: Thu Aug 29 17:47:37 2024 +0200
PHOENIX-7393 Update transitive dependency of woodstox-core to 5.4.0 (#1957)
---
pom.xml | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/pom.xml b/pom.xml
index f26a4fc76e..220ceae781 100644
--- a/pom.xml
+++ b/pom.xml
@@ -1667,6 +1667,12 @@
<artifactId>commons-collections</artifactId>
<version>${collections.version}</version>
</dependency>
+ <!-- Update transitive dependency to a one without CVEs -->
+ <dependency>
+ <groupId>com.fasterxml.woodstox</groupId>
+ <artifactId>woodstox-core</artifactId>
+ <version>5.4.0</version>
+ </dependency>
<dependency>
<groupId>org.apache.commons</groupId>
<artifactId>commons-csv</artifactId>
