DRILL-7994: Dependency version updates for severe vulnerabilities (#2432)

* Sev 8+ vuln dep updates.

* Adjust netty-tcnative version for windows-x86_64.

* Bump Avro because of severe Velocity vulns.

* Adjust expected row count to accommodate t-digest 3.3 improvements.

"The meaning of the compression parameter became a bit more strict in this
latest version. As such, the digest should be a bit smaller and tails
should be a bit more accurate." -- Ted Dunning

* Code comment whitespace formatting.

* Remove cruft from jdbc-all jar.

* Return needed Netty jars to jdbc-all.

* Adjust unit test memory allocs for TestAggregateFunctions.

* Remove references to unused artifact jersey-guava.

* Netty to 2.0.48.

* +200MiB direct memory for the unit test run.

* Upgrade jetty-server and h2 for dependabot.

* Fixes for H2 lib upgrade.

* Work around DOUBLE type DDL syntax error for pg dialect.

* Increase CI heap mem allocation for the sake of JDK 8.

* Specify parallel GC for CI to try to minimise peak mem usage.

* Cast Netty ByteBuffer to Buffer for JDK 8 compat.

* Increase CI heap mem allocation for the sake of TestAggregateFunctions.
24 files changed
tree: 7282a3458f005320c834102b64813eab771b8e03
  1. .github/
  2. .mvn/
  3. common/
  4. contrib/
  5. dev-support/
  6. distribution/
  7. docs/
  8. drill-shaded/
  9. drill-yarn/
  10. exec/
  11. hooks/
  12. logical/
  13. metastore/
  14. protocol/
  15. sample-data/
  16. src/
  17. tools/
  18. .asf.yaml
  19. .dockerignore
  20. .editorconfig
  21. .gitignore
  22. .lgtm.yml
  23. .travis.yml
  24. Dockerfile
  25. header
  26. KEYS
  27. LICENSE
  28. NOTICE
  29. pom.xml
  30. README.md
  31. start-build-env.sh
README.md

Apache Drill

Build Status Artifact License Stack Overflow Join Drill Slack

Apache Drill is a distributed MPP query layer that supports SQL and alternative query languages against NoSQL and Hadoop data storage systems. It was inspired in part by Google's Dremel.

Developers

Please read Environment.md for setting up and running Apache Drill. For complete developer documentation see DevDocs.md.

More Information

Please see the Apache Drill Website or the Apache Drill Documentation for more information including:

  • Remote Execution Installation Instructions
  • Running Drill on Docker instructions
  • Information about how to submit logical and distributed physical plans
  • More example queries and sample data
  • Find out ways to be involved or discuss Drill

Join the community!

Apache Drill is an Apache Foundation project and is seeking all types of users and contributions. Please say hello on the Apache Drill mailing list.You can also join our Google Hangouts or join our Slack Channel if you need help with using or developing Apache Drill (more information can be found on Apache Drill website).

Export Control

This distribution includes cryptographic software. The country in which you currently reside may have restrictions on the import, possession, use, and/or re-export to another country, of encryption software. BEFORE using any encryption software, please check your country's laws, regulations and policies concerning the import, possession, or use, and re-export of encryption software, to see if this is permitted. See http://www.wassenaar.org/ for more information.
The U.S. Government Department of Commerce, Bureau of Industry and Security (BIS), has classified this software as Export Commodity Control Number (ECCN) 5D002.C.1, which includes information security software using or performing cryptographic functions with asymmetric algorithms. The form and manner of this Apache Software Foundation distribution makes it eligible for export under the License Exception ENC Technology Software Unrestricted (TSU) exception (see the BIS Export Administration Regulations, Section 740.13) for both object code and source code. The following provides more details on the included cryptographic software: Java SE Security packages are used to provide support for authentication, authorization and secure sockets communication. The Jetty Web Server is used to provide communication via HTTPS. The Cyrus SASL libraries, Kerberos Libraries and OpenSSL Libraries are used to provide SASL based authentication and SSL communication.