Skip to content

Commit aba4a3d

Browse files
authored
deps: update dependencies (kserve#137)
Motivation Update dependencies to keep them up-to-date. In particular want to update netty ito resolve [CVE](https://www.cve.org/CVERecord?id=CVE-2024-29025) with `io.netty_netty-codec-http` picked up by twistlock Modifications grpc 1.60.2, netty 4.1.108, protobuf 3.25.3, annotations 9.0.87, guava 33.1.0-jre, jackson-databind 2.16.2, thrift 0.20.0, log4j2 2.23.1, bouncycastle 1.77, junit 5.10.2 Note that grpc-java v1.59.1 [resolved issue](grpc/grpc-java#10665 (comment)) with supporting netty 4.1.101.Final --------- Signed-off-by: Anh-Uong <[email protected]>
1 parent 4b61e94 commit aba4a3d

File tree

1 file changed

+10
-10
lines changed

1 file changed

+10
-10
lines changed

pom.xml

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -57,25 +57,25 @@
5757
<!--suppress UnresolvedMavenProperty -->
5858
<jenkins-build-tag>${env.BUILD_TAG}</jenkins-build-tag> <!-- set by jenkins -->
5959

60-
<grpc-version>1.59.0</grpc-version>
61-
<netty-version>4.1.100.Final</netty-version>
60+
<grpc-version>1.60.2</grpc-version>
61+
<netty-version>4.1.108.Final</netty-version>
6262
<litelinks-version>1.7.2</litelinks-version>
6363
<kv-utils-version>0.5.1</kv-utils-version>
6464
<etcd-java-version>0.0.24</etcd-java-version>
65-
<protobuf-version>3.25.0</protobuf-version>
66-
<annotation-version>9.0.82</annotation-version>
67-
<guava-version>32.1.3-jre</guava-version>
68-
<jackson-databind-version>2.16.0</jackson-databind-version>
65+
<protobuf-version>3.25.3</protobuf-version>
66+
<annotation-version>9.0.87</annotation-version>
67+
<guava-version>33.1.0-jre</guava-version>
68+
<jackson-databind-version>2.16.2</jackson-databind-version>
6969
<gson-version>2.10.1</gson-version>
70-
<thrift-version>0.19.0</thrift-version>
70+
<thrift-version>0.20.0</thrift-version>
7171
<eclipse-collections-version>11.1.0</eclipse-collections-version>
72-
<log4j2-version>2.21.1</log4j2-version>
72+
<log4j2-version>2.23.1</log4j2-version>
7373
<slf4j-version>1.7.36</slf4j-version>
7474
<!-- Care must be taken when updating the prometheus client lib version
7575
since we have some custom optimized extensions to this -->
7676
<prometheus-version>0.9.0</prometheus-version>
77-
<bouncycastle-version>1.74</bouncycastle-version>
78-
<junit-version>5.10.1</junit-version>
77+
<bouncycastle-version>1.77</bouncycastle-version>
78+
<junit-version>5.10.2</junit-version>
7979

8080
<zookeeper-version>3.8.4</zookeeper-version>
8181
<curator-version>5.3.0</curator-version>

0 commit comments

Comments
 (0)