Skip to content

CVE fixes - update of multiple dependencies. #14519

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
abhishekagarwal87 merged 16 commits into from
Jul 7, 2023
Merged

CVE fixes - update of multiple dependencies. #14519

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
16 commits
Select commit Hold shift + click to select a range
5ef9031
update dependencies to address several CVEs
janjwerner-confluent Jun 29, 2023
f0f2896
remove unnecessary entry for pgsql
janjwerner-confluent Jun 29, 2023
94ae851
google libraries versions uplift
janjwerner-confluent Jun 29, 2023
addfb11
updated notes for snakeyaml
janjwerner-confluent Jun 29, 2023
f746c35
update kubernetes libs, revert jackson
janjwerner-confluent Jun 30, 2023
bc923e8
update snappy json-smart testng
janjwerner-confluent Jun 30, 2023
4cc1213
update guice and guava
janjwerner-confluent Jun 30, 2023
d32b569
revert guice update
janjwerner-confluent Jun 30, 2023
c711974
revert testng update
janjwerner-confluent Jul 3, 2023
8b3a464
update licenses file
janjwerner-confluent Jul 3, 2023
a65be6e
add additional versions clean up license file
janjwerner-confluent Jul 4, 2023
a8b1917
updataed confluent dependency, fixed the dependency license info
janjwerner-confluent Jul 4, 2023
4292678
cleaning up licenses and dependency versions
janjwerner-confluent Jul 5, 2023
2d67e09
sort bouncycastle licenses, fix kafka / confluent package names
janjwerner-confluent Jul 6, 2023
8a9b55e
enclose versions in quotes
janjwerner-confluent Jul 6, 2023
bf8034e
adding another jakarta library to dependency analysis exclusion
janjwerner-confluent Jul 6, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions extensions-contrib/kubernetes-overlord-extensions/pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -104,7 +104,7 @@
<dependency>
<groupId>io.fabric8</groupId>
<artifactId>kubernetes-model-core</artifactId>
<version>6.4.1</version>
<version>6.7.2</version>
</dependency>
<dependency>
<groupId>javax.validation</groupId>
Expand All @@ -114,17 +114,17 @@
<dependency>
<groupId>io.fabric8</groupId>
<artifactId>kubernetes-model-batch</artifactId>
<version>6.4.1</version>
<version>6.7.2</version>
</dependency>
<dependency>
<groupId>io.fabric8</groupId>
<artifactId>kubernetes-client-api</artifactId>
<version>6.4.1</version>
<version>6.7.2</version>
</dependency>
<dependency>
<groupId>io.fabric8</groupId>
<artifactId>kubernetes-client</artifactId>
<version>6.4.1</version>
<version>6.7.2</version>
<scope>runtime</scope>
</dependency>

Expand Down
4 changes: 2 additions & 2 deletions extensions-contrib/opentelemetry-emitter/pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,8 +38,8 @@
<opentelemetry.instrumentation.version>1.14.0-alpha</opentelemetry.instrumentation.version>
<!-- These guava and grpc versions are used only in the opentelemetry-extension.
Look at build section for more details about shading. -->
<shade.guava.version>30.1.1-jre</shade.guava.version>
<shade.grpc.version>1.41.0</shade.grpc.version>
<shade.guava.version>32.0.1-jre</shade.guava.version>
<shade.grpc.version>1.41.3</shade.grpc.version>
</properties>
<dependencyManagement>
<dependencies>
Expand Down
2 changes: 1 addition & 1 deletion extensions-core/avro-extensions/pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,7 @@

<properties>
<schemarepo.version>0.1.3</schemarepo.version>
<confluent.version>5.5.1</confluent.version>
<confluent.version>5.5.12</confluent.version>
</properties>

<repositories>
Expand Down
4 changes: 1 addition & 3 deletions extensions-core/kubernetes-extensions/pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,7 @@
</parent>

<properties>
<kubernetes.client.version>11.0.1</kubernetes.client.version>
<kubernetes.client.version>11.0.4</kubernetes.client.version>
</properties>

<dependencies>
Expand Down Expand Up @@ -84,13 +84,11 @@
<dependency>
<groupId>org.bouncycastle</groupId>
<artifactId>bcprov-jdk15on</artifactId>
<version>1.69</version>
<scope>runtime</scope>
</dependency>
<dependency>
<groupId>org.bouncycastle</groupId>
<artifactId>bcprov-ext-jdk15on</artifactId>
<version>1.68</version>
<scope>runtime</scope>
</dependency>

Expand Down
2 changes: 2 additions & 0 deletions integration-tests-ex/cases/pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -316,6 +316,7 @@
<artifactId>curator-client</artifactId>
<version>5.4.0</version>
</dependency>

</dependencies>

<!-- Exclude ITs from surefire. Required because they end with "Test". -->
Expand All @@ -340,6 +341,7 @@
-->
<ignoredUsedUndeclaredDependencies>
<ignoredUsedUndeclaredDependency>org.glassfish.hk2.external:jakarta.inject</ignoredUsedUndeclaredDependency>
<ignoredUsedUndeclaredDependency>jakarta.inject:jakarta.inject-api</ignoredUsedUndeclaredDependency>
</ignoredUsedUndeclaredDependencies>
<!-- Dynamically loaded. -->
<ignoredUnusedDeclaredDependencies>
Expand Down
4 changes: 2 additions & 2 deletions integration-tests/pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -363,7 +363,7 @@
<dependency>
<groupId>io.confluent</groupId>
<artifactId>kafka-schema-registry-client</artifactId>
<version>5.5.1</version>
<version>5.5.12</version>
<exclusions>
<exclusion>
<groupId>org.slf4j</groupId>
Expand Down Expand Up @@ -398,7 +398,7 @@
<dependency>
<groupId>io.confluent</groupId>
<artifactId>kafka-protobuf-provider</artifactId>
<version>5.5.1</version>
<version>5.5.12</version>
<scope>provided</scope>
</dependency>
<dependency>
Expand Down
Loading