|
521 | 521 | <type>pom</type>
|
522 | 522 | <scope>import</scope>
|
523 | 523 | </dependency>
|
| 524 | + |
| 525 | + <!-- This is needed due to indirect dependency in cdm-core --> |
| 526 | + <!-- https://mvnrepository.com/artifact/com.google.protobuf/protobuf-java --> |
| 527 | + <dependency> |
| 528 | + <groupId>com.google.protobuf</groupId> |
| 529 | + <artifactId>protobuf-java</artifactId> |
| 530 | + <version>3.25.5</version> |
| 531 | + </dependency> |
| 532 | + |
| 533 | + <!-- |
| 534 | + The below are here to force updated dependencies of the hadoop libraries. |
| 535 | + The default selections have security vulnerabilities. Ideally we wouldn't be including |
| 536 | + hadoop at all, but parquet currently has dependencies on hadoop to read and write files. |
| 537 | + --> |
| 538 | + <!-- https://mvnrepository.com/artifact/org.apache.avro/avro --> |
| 539 | + <dependency> |
| 540 | + <groupId>org.apache.avro</groupId> |
| 541 | + <artifactId>avro</artifactId> |
| 542 | + <version>1.12.0</version> |
| 543 | + </dependency> |
| 544 | + <!-- https://mvnrepository.com/artifact/dnsjava/dnsjava --> |
| 545 | + <dependency> |
| 546 | + <groupId>dnsjava</groupId> |
| 547 | + <artifactId>dnsjava</artifactId> |
| 548 | + <version>3.6.2</version> |
| 549 | + </dependency> |
| 550 | + <!-- https://mvnrepository.com/artifact/org.bouncycastle/bcprov-jdk18on --> |
| 551 | + <dependency> |
| 552 | + <groupId>org.bouncycastle</groupId> |
| 553 | + <artifactId>bcprov-jdk18on</artifactId> |
| 554 | + <version>1.78.1</version> |
| 555 | + </dependency> |
| 556 | + <!-- https://mvnrepository.com/artifact/org.apache.commons/commons-configuration2 --> |
| 557 | + <dependency> |
| 558 | + <groupId>org.apache.commons</groupId> |
| 559 | + <artifactId>commons-configuration2</artifactId> |
| 560 | + <version>2.11.0</version> |
| 561 | + </dependency> |
| 562 | + <!-- https://mvnrepository.com/artifact/com.nimbusds/nimbus-jose-jwt --> |
| 563 | + <dependency> |
| 564 | + <groupId>com.nimbusds</groupId> |
| 565 | + <artifactId>nimbus-jose-jwt</artifactId> |
| 566 | + <version>9.41.2</version> |
| 567 | + </dependency> |
524 | 568 | </dependencies>
|
525 | 569 | </dependencyManagement>
|
526 | 570 |
|
|
932 | 976 | <groupId>org.apache.hadoop</groupId>
|
933 | 977 | <artifactId>hadoop-client</artifactId>
|
934 | 978 | <version>3.4.0</version>
|
| 979 | + <exclusions> |
| 980 | + <exclusion> |
| 981 | + <groupId>org.bouncycastle</groupId> |
| 982 | + <artifactId>bcprov-jdk15on</artifactId> |
| 983 | + </exclusion> |
| 984 | + </exclusions> |
935 | 985 | </dependency>
|
936 | 986 | <dependency>
|
937 | 987 | <groupId>org.apache.parquet</groupId>
|
|
0 commit comments