2
0
Эх сурвалжийг харах

fix CVE-2023-3635 (#818)

Signed-off-by: lentitude2tk <xushuang.hu@zilliz.com>
xushuang.hu 1 жил өмнө
parent
commit
bd528c921a
1 өөрчлөгдсөн 37 нэмэгдсэн , 8 устгасан
  1. 37 8
      pom.xml

+ 37 - 8
pom.xml

@@ -79,7 +79,7 @@
         <junit.version>4.13.2</junit.version>
         <junit.jupiter.version>5.10.1</junit.jupiter.version>
         <lombok.version>1.18.22</lombok.version>
-        <okhttp.version>4.10.0</okhttp.version>
+        <okhttp.version>4.12.0</okhttp.version>
         <plexus.version>3.0.24</plexus.version>
         <maven.source.plugin.version>3.1.0</maven.source.plugin.version>
         <maven.javadoc.plugin.version>3.1.1</maven.javadoc.plugin.version>
@@ -92,7 +92,7 @@
         <junit.jupiter.engine.version>5.10.1</junit.jupiter.engine.version>
         <jackson.version>2.16.1</jackson.version>
         <gson.version>2.10.1</gson.version>
-        <kotlin.version>1.6.20</kotlin.version>
+        <kotlin.version>1.9.10</kotlin.version>
         <version.fastjson>1.2.83</version.fastjson>
         <mockito.version>5.8.0</mockito.version>
         <testcontainers.version>1.19.6</testcontainers.version>
@@ -101,9 +101,13 @@
         <hbase.version>1.2.0</hbase.version>
         <parquet.version>1.13.1</parquet.version>
         <unirest.version>3.13.10</unirest.version>
+        <guava.version>32.1.3-jre</guava.version>
+        <errorprone.version>2.21.1</errorprone.version>
+        <snappy.version>1.1.10.5</snappy.version>
+
         <!--storage sdk-->
         <aws-java-sdk-s3.version>1.12.312</aws-java-sdk-s3.version>
-        <minio-java-sdk.veresion>8.2.1</minio-java-sdk.veresion>
+        <minio-java-sdk.veresion>8.5.7</minio-java-sdk.veresion>
         <azure-java-blob-sdk.version>12.24.0</azure-java-blob-sdk.version>
         <azure-java-identity-sdk.version>1.10.1</azure-java-identity-sdk.version>
     </properties>
@@ -137,6 +141,36 @@
                 <artifactId>jackson-core</artifactId>
                 <version>${jackson.version}</version>
             </dependency>
+            <dependency>
+                <groupId>com.google.guava</groupId>
+                <artifactId>guava</artifactId>
+                <version>${guava.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>com.google.errorprone</groupId>
+                <artifactId>error_prone_annotations</artifactId>
+                <version>${errorprone.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.jetbrains.kotlin</groupId>
+                <artifactId>kotlin-stdlib-jdk8</artifactId>
+                <version>${kotlin.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.jetbrains.kotlin</groupId>
+                <artifactId>kotlin-stdlib-common</artifactId>
+                <version>${kotlin.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.jetbrains.kotlin</groupId>
+                <artifactId>kotlin-stdlib</artifactId>
+                <version>${kotlin.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.xerial.snappy</groupId>
+                <artifactId>snappy-java</artifactId>
+                <version>${snappy.version}</version>
+            </dependency>
         </dependencies>
     </dependencyManagement>
 
@@ -252,11 +286,6 @@
             <artifactId>gson</artifactId>
             <version>${gson.version}</version>
         </dependency>
-        <dependency>
-            <groupId>org.jetbrains.kotlin</groupId>
-            <artifactId>kotlin-stdlib</artifactId>
-            <version>${kotlin.version}</version>
-        </dependency>
         <dependency>
             <groupId>com.alibaba</groupId>
             <artifactId>fastjson</artifactId>