2.6.1: Dependency Upgrade to fix Vulnerabilities on top of 2.6.0
Summary
Updated dependencies to fix vulnerabilities.
Bug Fixes
- #229: Fixed vulnerabilities CVE-2022-37865 and CVE-2022-37866 by ugrading transitive dependency to
org.apache.ivy:ivy
required byspark-sql
.
Dependency Updates
Compile Dependency Updates
- Added
org.apache.ivy:ivy:2.5.1
Plugin Dependency Updates
- Updated
com.exasol:artifact-reference-checker-maven-plugin:0.4.0
to0.4.2
- Updated
com.exasol:error-code-crawler-maven-plugin:1.1.2
to1.2.1
- Updated
com.exasol:project-keeper-maven-plugin:2.8.0
to2.9.1
- Updated
io.github.zlika:reproducible-build-maven-plugin:0.15
to0.16
- Updated
org.apache.maven.plugins:maven-assembly-plugin:3.3.0
to3.4.2
- Updated
org.apache.maven.plugins:maven-failsafe-plugin:3.0.0-M5
to3.0.0-M7
- Updated
org.apache.maven.plugins:maven-jar-plugin:3.2.2
to3.3.0
- Updated
org.apache.maven.plugins:maven-surefire-plugin:3.0.0-M5
to3.0.0-M7
- Updated
org.codehaus.mojo:flatten-maven-plugin:1.2.7
to1.3.0
- Updated
org.codehaus.mojo:versions-maven-plugin:2.10.0
to2.13.0