>From Michael Blow <[email protected]>:

Michael Blow has submitted this change. ( 
https://asterix-gerrit.ics.uci.edu/c/asterixdb/+/20942?usp=email )

Change subject: [NO ISSUE][*DB][EXT] Advance Apache Avro to 1.12.1 for CVE
......................................................................

[NO ISSUE][*DB][EXT] Advance Apache Avro to 1.12.1 for CVE

Change-Id: I120e0f5972d84d9ddda099632a6a6e101ba7d198
Reviewed-on: https://asterix-gerrit.ics.uci.edu/c/asterixdb/+/20942
Reviewed-by: Michael Blow <[email protected]>
Tested-by: Michael Blow <[email protected]>
---
M asterixdb/asterix-external-data/pom.xml
M asterixdb/pom.xml
2 files changed, 7 insertions(+), 2 deletions(-)

Approvals:
  Michael Blow: Looks good to me, approved; Verified




diff --git a/asterixdb/asterix-external-data/pom.xml 
b/asterixdb/asterix-external-data/pom.xml
index 3f1194b..979df54 100644
--- a/asterixdb/asterix-external-data/pom.xml
+++ b/asterixdb/asterix-external-data/pom.xml
@@ -629,7 +629,6 @@
     <dependency>
       <groupId>org.apache.avro</groupId>
       <artifactId>avro-mapred</artifactId>
-      <version>1.12.0</version>
     </dependency>
     <dependency>
       <groupId>org.apache.hyracks</groupId>
diff --git a/asterixdb/pom.xml b/asterixdb/pom.xml
index aecb8b5..603a399 100644
--- a/asterixdb/pom.xml
+++ b/asterixdb/pom.xml
@@ -94,6 +94,7 @@
     <hadoop.version>3.4.2</hadoop.version>
     <jacoco.version>0.7.6.201602180812</jacoco.version>
     <log4j.version>2.25.3</log4j.version>
+    <avro.version>1.12.1</avro.version>
     <!-- IMPORTANT: please keep the aws-crt version in sync with that defined 
in the AWS SDK BOM -->
     <!-- you can get this by inspecting the aws-sdk-java-pom for the SDK 
version. e.g.
      $ curl -s 
https://repo1.maven.org/maven2/software/amazon/awssdk/aws-sdk-java-pom/2.31.57/aws-sdk-java-pom-2.31.57.pom
 | grep awscrt.version
@@ -1930,7 +1931,12 @@
       <dependency>
         <groupId>org.apache.avro</groupId>
         <artifactId>avro</artifactId>
-        <version>1.12.0</version>
+        <version>${avro.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apache.avro</groupId>
+        <artifactId>avro-mapred</artifactId>
+        <version>${avro.version}</version>
       </dependency>
       <dependency>
         <groupId>org.apache.parquet</groupId>

--
To view, visit https://asterix-gerrit.ics.uci.edu/c/asterixdb/+/20942?usp=email
To unsubscribe, or for help writing mail filters, visit 
https://asterix-gerrit.ics.uci.edu/settings?usp=email

Gerrit-MessageType: merged
Gerrit-Project: asterixdb
Gerrit-Branch: lumina
Gerrit-Change-Id: I120e0f5972d84d9ddda099632a6a6e101ba7d198
Gerrit-Change-Number: 20942
Gerrit-PatchSet: 3
Gerrit-Owner: Michael Blow <[email protected]>
Gerrit-Reviewer: Jenkins <[email protected]>
Gerrit-Reviewer: Michael Blow <[email protected]>

Reply via email to