Merge pull request #431 from hypertrace/fix-vulnerabilities

chore: fix vulnerabilities

Author: ravisingal

pinot-distribution/pinot-assembly.xml

@@ -60,10 +60,12 @@
       </source>
       <destName>plugins/pinot-stream-ingestion/pinot-kinesis/pinot-kinesis-${project.version}-shaded.jar</destName>
     </file>
+    <!--
     <file>
       <source>${pinot.root}/pinot-plugins/pinot-stream-ingestion/pinot-pulsar/target/pinot-pulsar-${project.version}-shaded.jar</source>
       <destName>plugins/pinot-stream-ingestion/pinot-pulsar/pinot-pulsar-${project.version}-shaded.jar</destName>
     </file>
+    -->
     <!-- End Include Pinot Stream Ingestion Plugins-->
     <!-- Start Include Pinot Batch Ingestion Plugins-->
     <file>

pinot-plugins/pinot-file-system/pinot-hdfs/pom.xml

@@ -49,7 +49,7 @@
     </dependency>
     <dependency>
       <groupId>org.apache.hadoop.thirdparty</groupId>
-      <artifactId>hadoop-shaded-protobuf_3_21</artifactId>
+      <artifactId>hadoop-shaded-protobuf_3_25</artifactId>
     </dependency>
   </dependencies>
 

pinot-plugins/pinot-input-format/pinot-orc/pom.xml

@@ -66,7 +66,7 @@
     </dependency>
     <dependency>
       <groupId>org.apache.hadoop.thirdparty</groupId>
-      <artifactId>hadoop-shaded-protobuf_3_21</artifactId>
+      <artifactId>hadoop-shaded-protobuf_3_25</artifactId>
     </dependency>
     <dependency>
       <groupId>org.apache.hive</groupId>

pinot-plugins/pinot-input-format/pinot-parquet/pom.xml

@@ -63,7 +63,7 @@
     </dependency>
     <dependency>
       <groupId>org.apache.hadoop.thirdparty</groupId>
-      <artifactId>hadoop-shaded-protobuf_3_21</artifactId>
+      <artifactId>hadoop-shaded-protobuf_3_25</artifactId>
     </dependency>
 
     <!-- Used for Parquet Writer in tests -->

pinot-plugins/pinot-stream-ingestion/pom.xml

@@ -40,7 +40,7 @@
     <module>pinot-kafka-2.0</module>
     <module>pinot-kafka-3.0</module>
     <module>pinot-kinesis</module>
-    <module>pinot-pulsar</module>
+    <!-- <module>pinot-pulsar</module> -->
   </modules>
 
 </project>

pinot-tools/pom.xml

@@ -104,11 +104,13 @@
       <artifactId>pinot-kinesis</artifactId>
       <scope>runtime</scope>
     </dependency>
+    <!--
     <dependency>
       <groupId>org.apache.pinot</groupId>
       <artifactId>pinot-pulsar</artifactId>
       <scope>runtime</scope>
     </dependency>
+    -->
     <dependency>
       <groupId>org.apache.pinot</groupId>
       <artifactId>pinot-batch-ingestion-standalone</artifactId>

pom.xml

@@ -560,11 +560,13 @@
         <artifactId>pinot-kinesis</artifactId>
         <version>${project.version}</version>
       </dependency>
+      <!--
       <dependency>
         <groupId>org.apache.pinot</groupId>
         <artifactId>pinot-pulsar</artifactId>
         <version>${project.version}</version>
       </dependency>
+      -->
       <!-- Input Format -->
       <dependency>
         <groupId>org.apache.pinot</groupId>
@@ -1371,8 +1373,8 @@
       </dependency>
       <dependency>
         <groupId>org.apache.hadoop.thirdparty</groupId>
-        <artifactId>hadoop-shaded-protobuf_3_21</artifactId>
-        <version>1.2.0</version>
+        <artifactId>hadoop-shaded-protobuf_3_25</artifactId>
+        <version>1.4.0</version>
       </dependency>
 
       <!-- Metrics -->