chrislu e2e89b52b7 security: add dependency overrides for vulnerable transitive deps ...

- Add commons-beanutils 1.11.0 (fixes CVE in 1.9.4)
- Add protobuf-java 3.25.5 (compatible with Spark/Hadoop ecosystem)
- Add nimbus-jose-jwt 9.37.2 (minimum secure version)
- Add snappy-java 1.1.10.4 (fixes compression vulnerabilities)
- Add dnsjava 3.6.0 (fixes DNS security issues)

All dependencies are pulled transitively from Hadoop/Spark:
- commons-beanutils: hadoop-common
- protobuf-java: hadoop-common
- nimbus-jose-jwt: hadoop-auth
- snappy-java: spark-core
- dnsjava: hadoop-common

Verified with mvn dependency:tree that overrides are applied correctly.

2025-11-22 22:06:29 -08:00

..

data

volume: large_volume version has bug when using in memory index

2021-06-28 15:48:07 -07:00

erasure_coding

faster master startup

2025-11-18 12:06:56 -08:00

foundationdb

filer store: add foundationdb (#7178)

2025-11-19 20:06:57 -08:00

fuse_integration

faster master startup

2025-11-18 12:06:56 -08:00

java/spark

security: add dependency overrides for vulnerable transitive deps

2025-11-22 22:06:29 -08:00

kafka

go mod tidy

2025-11-22 12:38:45 -08:00

kms

Add Kafka Gateway (#7231)

2025-10-13 18:05:17 -07:00

mq

faster master startup

2025-11-18 12:06:56 -08:00

postgres

Clean up logs and deprecated functions (#7339)

2025-10-17 22:11:50 -07:00

random_access

Java 3.59

2023-11-13 08:23:53 -08:00

s3

test read write by s3fs and PyArrow native file system for s3 (#7520)

2025-11-21 11:18:32 -08:00