Skip to content

Commit 064d364

Browse files
authored
* Updated dependencies Fixed CVE-2024-36114 via transitive dependency override
1 parent e99b050 commit 064d364

File tree

9 files changed

+151
-116
lines changed

9 files changed

+151
-116
lines changed

.github/workflows/broken_links_checker.yml

Lines changed: 2 additions & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

.github/workflows/ci-build-next-java.yml

Lines changed: 0 additions & 7 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

.github/workflows/ci-build.yml

Lines changed: 0 additions & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

.github/workflows/dependencies_update.yml

Lines changed: 5 additions & 9 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

dependencies.md

Lines changed: 85 additions & 83 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

doc/changes/changelog.md

Lines changed: 1 addition & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

doc/changes/changes_2.0.9.md

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
# Parquet for Java 2.0.9, released 2024-06-03
2+
3+
Code name: Security update - fix for CVE-2024-36114
4+
5+
## Summary
6+
7+
Fixed CVE-2024-36114 https://github.com/advisories/GHSA-973x-65j7-xcf4 via transitive version update.
8+
Updated dependencies.
9+
10+
## Security
11+
12+
* #72: CVE-2024-36114: io.airlift:aircompressor:jar:0.21:compile
13+
14+
## Dependency Updates
15+
16+
### Compile Dependency Updates
17+
18+
* Added `io.airlift:aircompressor:0.27`
19+
* Updated `org.apache.commons:commons-compress:1.26.1` to `1.26.2`
20+
21+
### Test Dependency Updates
22+
23+
* Updated `org.mockito:mockito-core:5.11.0` to `5.12.0`
24+
* Updated `org.mockito:mockito-junit-jupiter:5.11.0` to `5.12.0`
25+
26+
### Plugin Dependency Updates
27+
28+
* Updated `com.exasol:error-code-crawler-maven-plugin:2.0.2` to `2.0.3`
29+
* Updated `com.exasol:project-keeper-maven-plugin:4.3.0` to `4.3.2`
30+
* Updated `org.apache.maven.plugins:maven-deploy-plugin:3.1.1` to `3.1.2`
31+
* Updated `org.apache.maven.plugins:maven-enforcer-plugin:3.4.1` to `3.5.0`
32+
* Updated `org.apache.maven.plugins:maven-gpg-plugin:3.2.2` to `3.2.4`
33+
* Updated `org.apache.maven.plugins:maven-javadoc-plugin:3.6.3` to `3.7.0`
34+
* Updated `org.apache.maven.plugins:maven-toolchains-plugin:3.1.0` to `3.2.0`
35+
* Updated `org.sonarsource.scanner.maven:sonar-maven-plugin:3.11.0.3922` to `4.0.0.4121`
36+
* Updated `org.sonatype.plugins:nexus-staging-maven-plugin:1.6.13` to `1.7.0`

0 commit comments

Comments
 (0)