This is an automated email from the ASF dual-hosted git repository. chesnay pushed a commit to branch release-1.9 in repository https://gitbox.apache.org/repos/asf/flink.git
The following commit(s) were added to refs/heads/release-1.9 by this push: new 05eca9a [FLINK-15554][azure] Bump jetty-util to 3.1.2 05eca9a is described below commit 05eca9a8ca1388e3f20f1a72d114c19afc54a01d Author: Chesnay Schepler <ches...@apache.org> AuthorDate: Wed Jan 15 11:58:50 2020 +0100 [FLINK-15554][azure] Bump jetty-util to 3.1.2 --- flink-filesystems/flink-azure-fs-hadoop/pom.xml | 12 ++++++++++++ .../flink-azure-fs-hadoop/src/main/resources/META-INF/NOTICE | 4 ++-- 2 files changed, 14 insertions(+), 2 deletions(-) diff --git a/flink-filesystems/flink-azure-fs-hadoop/pom.xml b/flink-filesystems/flink-azure-fs-hadoop/pom.xml index 781e851..b6c8fd2 100644 --- a/flink-filesystems/flink-azure-fs-hadoop/pom.xml +++ b/flink-filesystems/flink-azure-fs-hadoop/pom.xml @@ -36,6 +36,7 @@ under the License. <properties> <fs.azure.sdk.version>1.16.0</fs.azure.sdk.version> <fs.jackson.core.version>2.9.4</fs.jackson.core.version> + <jetty.version>9.3.24.v20180605</jetty.version> </properties> <dependencies> @@ -90,6 +91,17 @@ under the License. </dependencies> + <dependencyManagement> + <dependencies> + <dependency> + <!-- Pulled in by hadoop-azure; bumps it to the version used by 3.1.2+ for security purposes --> + <groupId>org.eclipse.jetty</groupId> + <artifactId>jetty-util-ajax</artifactId> + <version>${jetty.version}</version> + </dependency> + </dependencies> + </dependencyManagement> + <build> <plugins> <!-- Relocate all Azure related classes --> diff --git a/flink-filesystems/flink-azure-fs-hadoop/src/main/resources/META-INF/NOTICE b/flink-filesystems/flink-azure-fs-hadoop/src/main/resources/META-INF/NOTICE index 9235626..5aeadd3 100644 --- a/flink-filesystems/flink-azure-fs-hadoop/src/main/resources/META-INF/NOTICE +++ b/flink-filesystems/flink-azure-fs-hadoop/src/main/resources/META-INF/NOTICE @@ -17,5 +17,5 @@ This project bundles the following dependencies under the Apache Software Licens - org.apache.hadoop:hadoop-azure:3.1.0 - org.apache.httpcomponents:httpclient:4.5.3 - org.apache.httpcomponents:httpcore:4.4.6 -- org.eclipse.jetty:jetty-util:9.3.19.v20170502 -- org.eclipse.jetty:jetty-util-ajax:9.3.19.v20170502 +- org.eclipse.jetty:jetty-util:9.3.24.v20180605 +- org.eclipse.jetty:jetty-util-ajax:9.3.24.v20180605