From d00f4d6539024871e7e18c132f8955f7631e15ab Mon Sep 17 00:00:00 2001 From: Emily Bourke Date: Thu, 14 Dec 2023 10:21:16 +0000 Subject: [PATCH] Update org.xerial.snappy:snappy-java to 1.1.10.5 Version 1.1.10.3 was flagged by Snyk as having a vulnerability, which was fixed in v1.1.10.4. --- build.sbt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build.sbt b/build.sbt index a43994c..a33d0b8 100644 --- a/build.sbt +++ b/build.sbt @@ -24,7 +24,7 @@ lazy val core = project.settings( libraryDependencies ++= versionDependent(scalaBinaryVersion.value, handlesAnnotations=false, compilerPlugin("org.scalamacros" % "paradise" % "2.1.1" cross CrossVersion.full)).toSeq ++ Seq( "org.apache.avro" % "avro" % "1.11.1", - "org.xerial.snappy" % "snappy-java" % "1.1.10.3", + "org.xerial.snappy" % "snappy-java" % "1.1.10.5", "org.parboiled" %% "parboiled" % "2.5.0", "org.scala-lang" % "scala-compiler" % scalaVersion.value % "provided", "org.scalatest" %% "scalatest" % "3.2.16" % Test,