This is an automated email from the ASF dual-hosted git repository.
nicoloboschi pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/pulsar.git
The following commit(s) were added to refs/heads/master by this push:
new 3011946a5c3 [fix][sec] Upgrade scala-library to get rid of
CVE-2022-36944 (#18021)
3011946a5c3 is described below
commit 3011946a5c3b64ed7c08b6bfb1f6492f8aaaca9c
Author: Nicolò Boschi <boschi1...@gmail.com>
AuthorDate: Thu Dec 15 11:42:56 2022 +0100
[fix][sec] Upgrade scala-library to get rid of CVE-2022-36944 (#18021)
---
pom.xml | 13 +++++++++++++
1 file changed, 13 insertions(+)
diff --git a/pom.xml b/pom.xml
index bb1f5ca0df9..ca08e101896 100644
--- a/pom.xml
+++ b/pom.xml
@@ -179,6 +179,7 @@ flexible messaging model and an intuitive client
API.</description>
<elasticsearch-java.version>8.5.2</elasticsearch-java.version>
<trino.version>363</trino.version>
<scala.binary.version>2.13</scala.binary.version>
+ <scala-library.version>2.13.10</scala-library.version>
<debezium.version>1.9.7.Final</debezium.version>
<debezium.postgresql.version>42.5.0</debezium.postgresql.version>
<debezium.mysql.version>8.0.30</debezium.mysql.version>
@@ -1339,6 +1340,18 @@ flexible messaging model and an intuitive client
API.</description>
<version>${roaringbitmap.version}</version>
</dependency>
+ <dependency>
+ <groupId>org.scala-lang</groupId>
+ <artifactId>scala-library</artifactId>
+ <version>${scala-library.version}</version>
+ </dependency>
+
+ <dependency>
+ <groupId>org.scala-lang</groupId>
+ <artifactId>scala-reflect</artifactId>
+ <version>${scala-library.version}</version>
+ </dependency>
+
</dependencies>
</dependencyManagement>
