From c41f2ed398738d63635ab9ef03d457989a10e31b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 6 Aug 2024 03:23:32 +0000
Subject: [PATCH 1/2] Bump avro.version from 1.11.3 to 1.12.0 in /java

Bumps `avro.version` from 1.11.3 to 1.12.0.

Updates `org.apache.avro:avro` from 1.11.3 to 1.12.0

Updates `org.apache.avro:avro-ipc` from 1.11.3 to 1.12.0

Updates `org.apache.avro:avro-mapred` from 1.11.3 to 1.12.0

---
updated-dependencies:
- dependency-name: org.apache.avro:avro
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.apache.avro:avro-ipc
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.apache.avro:avro-mapred
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 java/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/java/pom.xml b/java/pom.xml
index 30547b0dfd..781fedfbf9 100644
--- a/java/pom.xml
+++ b/java/pom.xml
@@ -90,7 +90,7 @@
         <!-- Hadoop declares an old version of Nimbus with vulnerabilities. Managed from 9.8.1. -->
         <nimbus-jose-jwt.version>9.40</nimbus-jose-jwt.version>
         <!-- Hadoop declares an old version of Avro with vulnerabilities. Managed from 1.7.7. -->
-        <avro.version>1.11.3</avro.version>
+        <avro.version>1.12.0</avro.version>
         <!-- Hadoop declares an old version of json-smart with vulnerabilities. Managed from 2.4.7. -->
         <json-smart.version>2.5.1</json-smart.version>
         <!-- Hadoop declares an old version of Kerby with vulnerabilities. Managed from 1.0.1. -->

From 2ae735530fd234db1c6f715aa2ff2c5876ed0ddf Mon Sep 17 00:00:00 2001
From: patchwork01 <110390516+patchwork01@users.noreply.github.com>
Date: Tue, 6 Aug 2024 08:54:52 +0000
Subject: [PATCH 2/2] Update jQuery dependency check suppression

---
 code-style/dependency-check-suppressions.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/code-style/dependency-check-suppressions.xml b/code-style/dependency-check-suppressions.xml
index 4236d12060..ae99d8a52f 100644
--- a/code-style/dependency-check-suppressions.xml
+++ b/code-style/dependency-check-suppressions.xml
@@ -134,7 +134,7 @@
         We don't expose that page, so it won't be a problem.
         This is a provided dependency for the module bulk-import/bulk-import-runner.
         ]]></notes>
-        <filePath regex="true">^.*/avro-ipc-1\.11\.3\.jar/.*/jquery-.*\.js$</filePath>
+        <filePath regex="true">^.*/avro-ipc-1\.12\.0\.jar/.*/jquery-.*\.js$</filePath>
         <vulnerabilityName regex="true">.*</vulnerabilityName>
     </suppress>
     <suppress>