Skip to content

Commit

Permalink
Bump org.xerial.snappy:snappy-java from 1.1.10.4 to 1.1.10.5 in /java
Browse files Browse the repository at this point in the history
Bumps [org.xerial.snappy:snappy-java](https://github.com/xerial/snappy-java) from 1.1.10.4 to 1.1.10.5.
- [Release notes](https://github.com/xerial/snappy-java/releases)
- [Commits](xerial/snappy-java@v1.1.10.4...v1.1.10.5)

---
updated-dependencies:
- dependency-name: org.xerial.snappy:snappy-java
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
  • Loading branch information
dependabot[bot] authored Mar 12, 2024
1 parent 31cbe9e commit 976e058
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion java/pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -81,7 +81,7 @@
Snappy is used by both hadoop-client and parquet-hadoop.
We were getting multiple versions added to the classpath, and they both have vulnerabilities.
-->
<snappy.version>1.1.10.4</snappy.version>
<snappy.version>1.1.10.5</snappy.version>
<!-- Hadoop declares an old version of Protobuf with vulnerabilities. Managed from 2.5.0. -->
<protobuf.version>3.23.3</protobuf.version>
<!-- Hadoop declares an old version of Nimbus with vulnerabilities. Managed from 9.8.1. -->
Expand Down

0 comments on commit 976e058

Please sign in to comment.