This is an automated email from the ASF dual-hosted git repository.
cgivre pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/drill.git
The following commit(s) were added to refs/heads/master by this push:
new e1a06f3dba [MINOR] Update dependencies for Paimon due to CVEs (#3039)
e1a06f3dba is described below
commit e1a06f3dba676e5f4e0871b88ef4b3d36fc43bc8
Author: PJ Fanning <[email protected]>
AuthorDate: Mon Mar 9 14:36:00 2026 +0100
[MINOR] Update dependencies for Paimon due to CVEs (#3039)
---
contrib/format-paimon/pom.xml | 8 ++++----
1 file changed, 4 insertions(+), 4 deletions(-)
diff --git a/contrib/format-paimon/pom.xml b/contrib/format-paimon/pom.xml
index 0bc02a9da0..c711d8ced8 100644
--- a/contrib/format-paimon/pom.xml
+++ b/contrib/format-paimon/pom.xml
@@ -85,12 +85,12 @@
<dependency>
<groupId>io.airlift</groupId>
<artifactId>aircompressor</artifactId>
- <version>0.27</version>
+ <version>2.0.3</version>
</dependency>
<dependency>
- <groupId>org.lz4</groupId>
+ <groupId>at.yawk.lz4</groupId>
<artifactId>lz4-java</artifactId>
- <version>1.8.0</version>
+ <version>1.10.4</version>
</dependency>
<dependency>
<groupId>com.github.luben</groupId>
@@ -100,7 +100,7 @@
<dependency>
<groupId>org.xerial.snappy</groupId>
<artifactId>snappy-java</artifactId>
- <version>1.1.8.4</version>
+ <version>1.1.10.8</version>
</dependency>
<!-- Test dependency -->
