Skip to content

Commit 3182e8c

Browse files
committed
Bump snappy-java to 1.1.10.1
1 parent 9138eb8 commit 3182e8c

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

project/Dependencies.scala

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -52,6 +52,7 @@ object Dependencies {
5252
val hadoopGcpClient = "hadoop3-2.2.5"
5353
val parquetHadoop = "1.12.3"
5454
val jsonSmart = "2.4.9" // Fix CVE
55+
val snappyJava = "1.1.10.1" // Fix CVE
5556
val commonsText = "1.10.0" // Fix CVE
5657
val ivy = "2.5.1" // Fix CVE
5758

@@ -140,6 +141,7 @@ object Dependencies {
140141
.exclude("com.amazonaws", "aws-java-sdk-bundle") // aws-java-sdk-core is already present in assembled jar
141142
val hadoopGcp = "com.google.cloud.bigdataoss" % "gcs-connector" % V.hadoopGcpClient % Runtime
142143
val jsonSmart = "net.minidev" % "json-smart" % V.jsonSmart
144+
val snappyJava = "org.xerial.snappy" % "snappy-java" % V.snappyJava
143145
val kinesisClient = ("software.amazon.kinesis" % "amazon-kinesis-client" % V.kinesisClient)
144146
.exclude("software.amazon.glue", "schema-registry-common")
145147
.exclude("software.amazon.glue", "schema-registry-serde")
@@ -304,6 +306,7 @@ object Dependencies {
304306
hadoop,
305307
parquetHadoop,
306308
jsonSmart,
309+
snappyJava,
307310
specs2,
308311
specs2ScalaCheck,
309312
scalaCheck,

0 commit comments

Comments
 (0)