Merge pull request #54633 from wolfi-dev/cve-celeborn-0.5-0.5.4-r1-2c89fe5628821664a029718dff47e0d1

celeborn-0.5/0.5.4-r1: cve remediation

Author: bentasker

celeborn-0.5.yaml

@@ -1,7 +1,7 @@
 package:
   name: celeborn-0.5
   version: 0.5.4
-  epoch: 1
+  epoch: 2
   description: "Apache Celeborn - A Remote Shuffle Service for Distributed Data Processing Engines"
   copyright:
     - license: Apache-2.0

celeborn-0.5/pombump-deps.yaml

@@ -0,0 +1,4 @@
+patches:
+    - groupId: commons-beanutils
+      artifactId: commons-beanutils
+      version: 1.11.0