drill
DRILL-7994: Dependency version updates for severe vulnerabilities
#2432

Merged

Overview Commits 18 Changes View On GitHub

DRILL-7994: Dependency version updates for severe vulnerabilities #2432

jnturton merged 18 commits into apache:master from jnturton:7994-bump-tdigest

jnturton requested a review from

vdiravka 2 years ago

jnturton assigned

jnturton 2 years ago

jnturton added security

vdiravka commented on 2022-01-20

jnturton force pushed from fd7ca5d7 to 8808e544 2 years ago

cgivre commented on 2022-01-28

jnturton marked this pull request as ready for review 2 years ago

jnturton force pushed from b02991ab to 2cadbcb2 2 years ago

jnturton force pushed from 2cadbcb2 to e967c967 2 years ago

jnturton requested a review from

vdiravka 2 years ago

vdiravka requested changes on 2022-01-29

vdiravka commented on 2022-01-29

jnturton requested a review from

vdiravka 2 years ago

jnturton force pushed from d709c16f to f7f00cc3 2 years ago

vdiravka requested changes on 2022-01-31

jnturton force pushed from f7f00cc3 to fbbffd87 2 years ago

jnturton force pushed from fbbffd87 to 82f30762 2 years ago

Sev 8+ vuln dep updates.

89b85962

Adjust netty-tcnative version for windows-x86_64.

ca5a6c79

Bump Avro because of severe Velocity vulns.

63036e00

Adjust expected row count to accommodate t-digest 3.3 improvements.

4957d228

Code comment whitespace formatting.

f7504c55

Remove cruft from jdbc-all jar.

b8db1877

Return needed Netty jars to jdbc-all.

f3258a5c

Adjust unit test memory allocs for TestAggregateFunctions.

37baa2ff

Remove references to unused artifact jersey-guava.

4b3e2058

Netty to 2.0.48.

784457d3

+200MiB direct memory for the unit test run.

156d46a3

Upgrade jetty-server and h2 for dependabot.

9b68f19d

Fixes for H2 lib upgrade.

c1c9ad6b

Work around DOUBLE type DDL syntax error for pg dialect.

372cd84d

Increase CI heap mem allocation for the sake of JDK 8.

c1837588

jnturton force pushed from 57fa937d to c1837588 2 years ago

Specify parallel GC for CI to try to minimise peak mem usage.

36c97b2e

jnturton force pushed from 7351cda8 to 36c97b2e 2 years ago

Cast Netty ByteBuffer to Buffer for JDK 8 compat.

c537875a

jnturton force pushed from cec69f1e to c537875a 2 years ago

Increase CI heap mem allocation for the sake of TestAggregateFunctions.

52298d7a

jnturton requested a review from

vdiravka 2 years ago

vdiravka approved these changes on 2022-02-02

jnturton merged c093851e into master 2 years ago

Reviewers

vdiravka

cgivre

Assignees

jnturton

Labels

security

Milestone

No milestone

drill DRILL-7994: Dependency version updates for severe vulnerabilities #2432 Merged

DRILL-7994: Dependency version updates for severe vulnerabilities #2432

drill
DRILL-7994: Dependency version updates for severe vulnerabilities
#2432

Merged