GitHub user shimamoto opened a pull request: https://github.com/apache/spark/pull/20233
[SPARK-23043][BUILD] Upgrade json4s to 3.5.3 ## What changes were proposed in this pull request? Spark still use a few years old version 3.2.11. This change is to upgrade json4s to 3.5.3. Note that this change does not include the Jackson update because the Jackson version referenced in json4s 3.5.3 is 2.8.4, which has a security vulnerability ([see](https://issues.apache.org/jira/browse/SPARK-20433)). ## How was this patch tested? Existing unit tests and build. You can merge this pull request into a Git repository by running: $ git pull https://github.com/shimamoto/spark upgrade-json4s Alternatively you can review and apply these changes as the patch at: https://github.com/apache/spark/pull/20233.patch To close this pull request, make a commit to your master/trunk branch with (at least) the following in the commit message: This closes #20233 ---- commit e9cf6061a883abbee77ce50f5aa15416f7b86028 Author: shimamoto <chibochibo@...> Date: 2018-01-10T12:51:40Z Upgrade json4s to 3.5.3 version ---- --- --------------------------------------------------------------------- To unsubscribe, e-mail: reviews-unsubscr...@spark.apache.org For additional commands, e-mail: reviews-h...@spark.apache.org