Bump quartz to 2.4.0 to fix CVE-2023-39017

Author: RaigorJiang

kernel/data-pipeline/core/pom.xml

@@ -44,17 +44,18 @@
             <version>${project.version}</version>
         </dependency>
         <dependency>
-            <groupId>org.apache.shardingsphere.elasticjob</groupId>
-            <artifactId>elasticjob-lite-core</artifactId>
+            <groupId>org.apache.shardingsphere</groupId>
+            <artifactId>shardingsphere-jdbc</artifactId>
+            <version>${project.version}</version>
         </dependency>
+        
         <dependency>
             <groupId>org.apache.shardingsphere.elasticjob</groupId>
             <artifactId>elasticjob-lite-lifecycle</artifactId>
         </dependency>
         <dependency>
-            <groupId>org.apache.shardingsphere</groupId>
-            <artifactId>shardingsphere-jdbc</artifactId>
-            <version>${project.version}</version>
+            <groupId>org.quartz-scheduler</groupId>
+            <artifactId>quartz</artifactId>
         </dependency>
 
         <dependency>

kernel/schedule/core/pom.xml

@@ -35,11 +35,11 @@
 
         <dependency>
             <groupId>org.apache.shardingsphere.elasticjob</groupId>
-            <artifactId>elasticjob-lite-core</artifactId>
+            <artifactId>elasticjob-lite-lifecycle</artifactId>
         </dependency>
         <dependency>
-            <groupId>org.apache.shardingsphere.elasticjob</groupId>
-            <artifactId>elasticjob-lite-lifecycle</artifactId>
+            <groupId>org.quartz-scheduler</groupId>
+            <artifactId>quartz</artifactId>
         </dependency>
     </dependencies>
 </project>

pom.xml

@@ -113,6 +113,7 @@
         <protobuf.version>3.25.8</protobuf.version>
 
         <elasticjob.version>3.0.4</elasticjob.version>
+        <quartz.version>2.4.0</quartz.version>
 
         <slf4j.version>2.0.17</slf4j.version>
         <logback.version>1.3.16</logback.version>
@@ -478,25 +479,13 @@
 
             <dependency>
                 <groupId>org.apache.shardingsphere.elasticjob</groupId>
-                <artifactId>elasticjob-lite-core</artifactId>
+                <artifactId>elasticjob-lite-lifecycle</artifactId>
                 <version>${elasticjob.version}</version>
-                <exclusions>
-                    <exclusion>
-                        <groupId>com.zaxxer</groupId>
-                        <artifactId>HikariCP-java7</artifactId>
-                    </exclusion>
-                </exclusions>
             </dependency>
             <dependency>
-                <groupId>org.apache.shardingsphere.elasticjob</groupId>
-                <artifactId>elasticjob-lite-lifecycle</artifactId>
-                <version>${elasticjob.version}</version>
-                <exclusions>
-                    <exclusion>
-                        <groupId>com.zaxxer</groupId>
-                        <artifactId>HikariCP-java7</artifactId>
-                    </exclusion>
-                </exclusions>
+                <groupId>org.quartz-scheduler</groupId>
+                <artifactId>quartz</artifactId>
+                <version>${quartz.version}</version>
             </dependency>
 
             <dependency>