Bump dependencies for 2.1 (#2103)
* Bump jackson and use jackson-bom for everything
(some deps previously were not listed in the bom, but now they are)
* Bump other dependencies
* Review license/notice files (no changes)
diff --git a/pom.xml b/pom.xml
index 958131b..2dca8dd 100644
--- a/pom.xml
+++ b/pom.xml
@@ -131,7 +131,6 @@
<htrace.hadoop.version>4.1.0-incubating</htrace.hadoop.version>
<htrace.version>3.2.0-incubating</htrace.version>
<it.failIfNoSpecifiedTests>false</it.failIfNoSpecifiedTests>
- <jackson.version>2.12.1</jackson.version>
<!-- prevent introduction of new compiler warnings -->
<maven.compiler.failOnWarning>true</maven.compiler.failOnWarning>
<maven.compiler.release>11</maven.compiler.release>
@@ -171,37 +170,19 @@
<version>1.5.1</version>
</dependency>
<dependency>
- <groupId>com.fasterxml.jackson.jaxrs</groupId>
- <artifactId>jackson-jaxrs-base</artifactId>
- <version>${jackson.version}</version>
- <classifier>jakarta</classifier>
- </dependency>
- <dependency>
- <groupId>com.fasterxml.jackson.jaxrs</groupId>
- <artifactId>jackson-jaxrs-json-provider</artifactId>
- <version>${jackson.version}</version>
- <classifier>jakarta</classifier>
- </dependency>
- <dependency>
- <groupId>com.fasterxml.jackson.module</groupId>
- <artifactId>jackson-module-jaxb-annotations</artifactId>
- <version>${jackson.version}</version>
- <classifier>jakarta</classifier>
- </dependency>
- <dependency>
<groupId>com.github.ben-manes.caffeine</groupId>
<artifactId>caffeine</artifactId>
- <version>3.0.0</version>
+ <version>3.0.2</version>
</dependency>
<dependency>
<groupId>com.github.spotbugs</groupId>
<artifactId>spotbugs-annotations</artifactId>
- <version>4.2.2</version>
+ <version>4.2.3</version>
</dependency>
<dependency>
<groupId>com.google.auto.service</groupId>
<artifactId>auto-service</artifactId>
- <version>1.0-rc7</version>
+ <version>1.0</version>
</dependency>
<dependency>
<groupId>com.google.code.findbugs</groupId>
@@ -217,7 +198,7 @@
<!-- converge transitive dependency version between guava and caffeine -->
<groupId>com.google.errorprone</groupId>
<artifactId>error_prone_annotations</artifactId>
- <version>2.5.1</version>
+ <version>2.6.0</version>
</dependency>
<dependency>
<!-- this is a runtime dependency of guava, no longer included with guava as of 27.1 -->
@@ -228,7 +209,7 @@
<dependency>
<groupId>com.google.guava</groupId>
<artifactId>guava</artifactId>
- <version>30.1-jre</version>
+ <version>30.1.1-jre</version>
</dependency>
<dependency>
<groupId>com.google.protobuf</groupId>
@@ -238,7 +219,7 @@
<dependency>
<groupId>com.lmax</groupId>
<artifactId>disruptor</artifactId>
- <version>3.4.2</version>
+ <version>3.4.4</version>
</dependency>
<dependency>
<groupId>commons-cli</groupId>
@@ -374,7 +355,7 @@
<dependency>
<groupId>org.apache.commons</groupId>
<artifactId>commons-vfs2</artifactId>
- <version>2.7.0</version>
+ <version>2.8.0</version>
<exclusions>
<exclusion>
<groupId>org.apache.hadoop</groupId>
@@ -505,12 +486,12 @@
<dependency>
<groupId>org.checkerframework</groupId>
<artifactId>checker-qual</artifactId>
- <version>3.11.0</version>
+ <version>3.13.0</version>
</dependency>
<dependency>
<groupId>org.easymock</groupId>
<artifactId>easymock</artifactId>
- <version>4.2</version>
+ <version>4.3</version>
</dependency>
<dependency>
<groupId>org.freemarker</groupId>
@@ -530,7 +511,7 @@
<dependency>
<groupId>org.javassist</groupId>
<artifactId>javassist</artifactId>
- <version>3.27.0-GA</version>
+ <version>3.28.0-GA</version>
</dependency>
<dependency>
<groupId>org.jboss.logging</groupId>
@@ -540,12 +521,13 @@
<dependency>
<groupId>org.jline</groupId>
<artifactId>jline</artifactId>
- <version>3.19.0</version>
+ <version>3.20.0</version>
</dependency>
<dependency>
+ <!-- converge transitive dependency version between powermock and easymock -->
<groupId>org.objenesis</groupId>
<artifactId>objenesis</artifactId>
- <version>3.1</version>
+ <version>3.2</version>
</dependency>
<dependency>
<groupId>org.powermock</groupId>
@@ -575,28 +557,28 @@
<dependency>
<groupId>com.fasterxml.jackson</groupId>
<artifactId>jackson-bom</artifactId>
- <version>${jackson.version}</version>
+ <version>2.12.3</version>
<type>pom</type>
<scope>import</scope>
</dependency>
<dependency>
<groupId>jakarta.platform</groupId>
<artifactId>jakarta.jakartaee-bom</artifactId>
- <version>9.0.0</version>
+ <version>9.1.0-RC1</version>
<type>pom</type>
<scope>import</scope>
</dependency>
<dependency>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-bom</artifactId>
- <version>2.14.0</version>
+ <version>2.14.1</version>
<type>pom</type>
<scope>import</scope>
</dependency>
<dependency>
<groupId>org.eclipse.jetty</groupId>
<artifactId>jetty-bom</artifactId>
- <version>11.0.1</version>
+ <version>11.0.2</version>
<type>pom</type>
<scope>import</scope>
</dependency>
@@ -610,14 +592,14 @@
<dependency>
<groupId>org.glassfish.jaxb</groupId>
<artifactId>jaxb-bom</artifactId>
- <version>3.0.0</version>
+ <version>3.0.1</version>
<type>pom</type>
<scope>import</scope>
</dependency>
<dependency>
<groupId>org.glassfish.jersey</groupId>
<artifactId>jersey-bom</artifactId>
- <version>3.0.1</version>
+ <version>3.0.2</version>
<type>pom</type>
<scope>import</scope>
</dependency>
