chrislu 7b548be48e security: add dependencyManagement to fix vulnerable transitives ...

- Pin Jackson to 2.15.3 (fixes multiple CVEs in older versions)
- Pin Netty to 4.1.100.Final (fixes CVEs in transport/codec)
- Pin Apache Avro to 1.11.4 (fixes deserialization CVEs)
- Pin Apache ZooKeeper to 3.9.1 (fixes authentication bypass)
- Pin commons-compress to 1.26.0 (fixes zip slip vulnerabilities)
- Pin commons-io to 2.15.1 (fixes path traversal)
- Pin Guava to 32.1.3-jre (fixes temp directory vulnerabilities)
- Pin SnakeYAML to 2.2 (fixes arbitrary code execution)
- Pin Jetty to 9.4.53 (fixes multiple HTTP vulnerabilities)
- Overrides vulnerable versions from Spark/Hadoop transitives

2025-11-22 14:05:24 -08:00

..

data

volume: large_volume version has bug when using in memory index

2021-06-28 15:48:07 -07:00

erasure_coding

faster master startup

2025-11-18 12:06:56 -08:00

foundationdb

filer store: add foundationdb (#7178)

2025-11-19 20:06:57 -08:00

fuse_integration

faster master startup

2025-11-18 12:06:56 -08:00

java/spark

security: add dependencyManagement to fix vulnerable transitives

2025-11-22 14:05:24 -08:00

kafka

go mod tidy

2025-11-22 12:38:45 -08:00

kms

Add Kafka Gateway (#7231)

2025-10-13 18:05:17 -07:00

mq

faster master startup

2025-11-18 12:06:56 -08:00

postgres

Clean up logs and deprecated functions (#7339)

2025-10-17 22:11:50 -07:00

random_access

Java 3.59

2023-11-13 08:23:53 -08:00

s3

test read write by s3fs and PyArrow native file system for s3 (#7520)

2025-11-21 11:18:32 -08:00