This is an automated email from the ASF dual-hosted git repository.
jianglongtao pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/shardingsphere.git
The following commit(s) were added to refs/heads/master by this push:
new 95160d92ca1 Bump quartz to 2.4.0 to fix CVE-2023-39017 (#38039)
95160d92ca1 is described below
commit 95160d92ca1f7790915da6112668c15eda5fb782
Author: Raigor <[email protected]>
AuthorDate: Sat Feb 14 12:14:00 2026 +0800
Bump quartz to 2.4.0 to fix CVE-2023-39017 (#38039)
---
kernel/data-pipeline/core/pom.xml | 11 ++++++-----
kernel/schedule/core/pom.xml | 6 +++---
pom.xml | 21 +++++----------------
3 files changed, 14 insertions(+), 24 deletions(-)
diff --git a/kernel/data-pipeline/core/pom.xml
b/kernel/data-pipeline/core/pom.xml
index 2a9e5fcad66..df7eca8a9f1 100644
--- a/kernel/data-pipeline/core/pom.xml
+++ b/kernel/data-pipeline/core/pom.xml
@@ -44,17 +44,18 @@
<version>${project.version}</version>
</dependency>
<dependency>
- <groupId>org.apache.shardingsphere.elasticjob</groupId>
- <artifactId>elasticjob-lite-core</artifactId>
+ <groupId>org.apache.shardingsphere</groupId>
+ <artifactId>shardingsphere-jdbc</artifactId>
+ <version>${project.version}</version>
</dependency>
+
<dependency>
<groupId>org.apache.shardingsphere.elasticjob</groupId>
<artifactId>elasticjob-lite-lifecycle</artifactId>
</dependency>
<dependency>
- <groupId>org.apache.shardingsphere</groupId>
- <artifactId>shardingsphere-jdbc</artifactId>
- <version>${project.version}</version>
+ <groupId>org.quartz-scheduler</groupId>
+ <artifactId>quartz</artifactId>
</dependency>
<dependency>
diff --git a/kernel/schedule/core/pom.xml b/kernel/schedule/core/pom.xml
index 96d2234bfed..5fefb3dd35c 100644
--- a/kernel/schedule/core/pom.xml
+++ b/kernel/schedule/core/pom.xml
@@ -35,11 +35,11 @@
<dependency>
<groupId>org.apache.shardingsphere.elasticjob</groupId>
- <artifactId>elasticjob-lite-core</artifactId>
+ <artifactId>elasticjob-lite-lifecycle</artifactId>
</dependency>
<dependency>
- <groupId>org.apache.shardingsphere.elasticjob</groupId>
- <artifactId>elasticjob-lite-lifecycle</artifactId>
+ <groupId>org.quartz-scheduler</groupId>
+ <artifactId>quartz</artifactId>
</dependency>
</dependencies>
</project>
diff --git a/pom.xml b/pom.xml
index f7206651804..3b714a7a7ca 100644
--- a/pom.xml
+++ b/pom.xml
@@ -113,6 +113,7 @@
<protobuf.version>3.25.8</protobuf.version>
<elasticjob.version>3.0.4</elasticjob.version>
+ <quartz.version>2.4.0</quartz.version>
<slf4j.version>2.0.17</slf4j.version>
<logback.version>1.3.16</logback.version>
@@ -478,25 +479,13 @@
<dependency>
<groupId>org.apache.shardingsphere.elasticjob</groupId>
- <artifactId>elasticjob-lite-core</artifactId>
+ <artifactId>elasticjob-lite-lifecycle</artifactId>
<version>${elasticjob.version}</version>
- <exclusions>
- <exclusion>
- <groupId>com.zaxxer</groupId>
- <artifactId>HikariCP-java7</artifactId>
- </exclusion>
- </exclusions>
</dependency>
<dependency>
- <groupId>org.apache.shardingsphere.elasticjob</groupId>
- <artifactId>elasticjob-lite-lifecycle</artifactId>
- <version>${elasticjob.version}</version>
- <exclusions>
- <exclusion>
- <groupId>com.zaxxer</groupId>
- <artifactId>HikariCP-java7</artifactId>
- </exclusion>
- </exclusions>
+ <groupId>org.quartz-scheduler</groupId>
+ <artifactId>quartz</artifactId>
+ <version>${quartz.version}</version>
</dependency>
<dependency>
