Update snappy-java to 1.1.10.8

scala-steward · michaelmior · commit 85839a063ac0 · 2025-07-22T07:02:36.000-04:00
Signed-off-by: Scala Steward &lt;scala_steward@virtuslab.com&gt;
diff --git a/project/Dependencies.scala b/project/Dependencies.scala
@@ -37,5 +37,5 @@ object Dependencies {
   // XXX Version bundled with Spark is vulnerable to CVE-2022-3171
   lazy val protobuf = "com.google.protobuf" % "protobuf-java" % "3.25.5"
   // XXX Bundled version is vulnerable to CVE-2023-34455
-  lazy val snappyJava = "org.xerial.snappy" % "snappy-java" % "1.1.10.7"
+  lazy val snappyJava = "org.xerial.snappy" % "snappy-java" % "1.1.10.8"
 }

Original file line number	Diff line number	Diff line change
`@@ -37,5 +37,5 @@ object Dependencies {`
`37`	`37`	`// XXX Version bundled with Spark is vulnerable to CVE-2022-3171`
`38`	`38`	`lazy val protobuf = "com.google.protobuf" % "protobuf-java" % "3.25.5"`
`39`	`39`	`// XXX Bundled version is vulnerable to CVE-2023-34455`
`40`		`- lazy val snappyJava = "org.xerial.snappy" % "snappy-java" % "1.1.10.7"`
	`40`	`+ lazy val snappyJava = "org.xerial.snappy" % "snappy-java" % "1.1.10.8"`
`41`	`41`	`}`