From d212e435f51532b7193208f1c3c3ed7247b54143 Mon Sep 17 00:00:00 2001 From: Nikhil Bhatia Date: Fri, 17 May 2024 23:39:13 +0000 Subject: [PATCH] [PLAT-13829] Upgrade commons-compress to 1.26.0 Summary: Fix a CVE in org.apache.commons:commons-compress by bumping it up from 1.25.0 to 1.26.0 Test Plan: Ran dev Itests Reviewers: muthu, anijhawan Reviewed By: muthu Subscribers: yugaware Differential Revision: https://phorge.dev.yugabyte.com/D35176 --- managed/build.sbt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/managed/build.sbt b/managed/build.sbt index e3629f712cec..365c1d69994a 100644 --- a/managed/build.sbt +++ b/managed/build.sbt @@ -164,7 +164,7 @@ libraryDependencies ++= Seq( "org.codehaus.janino" % "janino" % "3.1.9", "org.apache.commons" % "commons-lang3" % "3.14.0", "org.apache.commons" % "commons-collections4" % "4.4", - "org.apache.commons" % "commons-compress" % "1.25.0", + "org.apache.commons" % "commons-compress" % "1.26.0", "org.apache.commons" % "commons-csv" % "1.10.0", "org.apache.httpcomponents.core5" % "httpcore5" % "5.2.4", "org.apache.httpcomponents.core5" % "httpcore5-h2" % "5.2.4",