This is an automated email from the ASF dual-hosted git repository.
huaxingao pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/iceberg.git
The following commit(s) were added to refs/heads/main by this push:
new 0cd2faaf45 Build: Bump org.xerial.snappy:snappy-java from 1.1.10.8 to
1.1.10.10 (#18455)
0cd2faaf45 is described below
commit 0cd2faaf45b605f61d9d046df8eaab2175f39d89
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Sun Oct 11 14:44:51 2026 -0700
Build: Bump org.xerial.snappy:snappy-java from 1.1.10.8 to 1.1.10.10
(#18455)
Bumps
[org.xerial.snappy:snappy-java](https://github.com/xerial/snappy-java) from
1.1.10.8 to 1.1.10.10.
- [Release notes](https://github.com/xerial/snappy-java/releases)
-
[Commits](https://github.com/xerial/snappy-java/compare/v1.1.10.8...v1.1.10.10)
---
updated-dependencies:
- dependency-name: org.xerial.snappy:snappy-java
dependency-version: 1.1.10.10
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
---
kafka-connect/build.gradle | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/kafka-connect/build.gradle b/kafka-connect/build.gradle
index d61b32f6c0..2493c9d58d 100644
--- a/kafka-connect/build.gradle
+++ b/kafka-connect/build.gradle
@@ -76,7 +76,7 @@
project(':iceberg-kafka-connect:iceberg-kafka-connect-runtime') {
// force upgrades for dependencies with known vulnerabilities...
resolutionStrategy {
force 'org.codehaus.jettison:jettison:1.5.7'
- force 'org.xerial.snappy:snappy-java:1.1.10.8'
+ force 'org.xerial.snappy:snappy-java:1.1.10.10'
force 'org.apache.commons:commons-compress:1.28.0'
force 'org.apache.hadoop.thirdparty:hadoop-shaded-guava:1.5.0'
force 'com.fasterxml.woodstox:woodstox-core:6.7.0'