fix(datahub-upgrade): fix vulnerabilities (#2813)

This commit is contained in:
Dexter Lee 2021-06-30 22:57:39 -07:00 committed by GitHub
parent 6fe663bf6a
commit ad081138f7
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 6 additions and 2 deletions

View File

@ -62,7 +62,7 @@ project.ext.externalDependency = [
'guice': 'com.google.inject:guice:4.2.2', 'guice': 'com.google.inject:guice:4.2.2',
'guava': 'com.google.guava:guava:27.0.1-jre', 'guava': 'com.google.guava:guava:27.0.1-jre',
'h2': 'com.h2database:h2:1.4.196', 'h2': 'com.h2database:h2:1.4.196',
'hadoopClient': 'org.apache.hadoop:hadoop-client:3.1.0', 'hadoopClient': 'org.apache.hadoop:hadoop-client:3.1.1',
'hibernateCore': 'org.hibernate:hibernate-core:5.2.16.Final', 'hibernateCore': 'org.hibernate:hibernate-core:5.2.16.Final',
'httpClient': 'org.apache.httpcomponents:httpclient:4.5.9', 'httpClient': 'org.apache.httpcomponents:httpclient:4.5.9',
'iStackCommons': 'com.sun.istack:istack-commons-runtime:4.0.1', 'iStackCommons': 'com.sun.istack:istack-commons-runtime:4.0.1',

View File

@ -10,7 +10,11 @@ dependencies {
compile project(':gms:client') compile project(':gms:client')
compile externalDependency.javaxInject compile externalDependency.javaxInject
compile externalDependency.hadoopClient compile(externalDependency.hadoopClient) {
exclude group: 'net.minidev', module: 'json-smart'
exclude group: 'com.nimbusds', module: 'nimbus-jose-jwt'
exclude group: "org.apache.htrace", module: "htrace-core4"
}
compile externalDependency.lombok compile externalDependency.lombok
compile externalDependency.picocli compile externalDependency.picocli
compile externalDependency.parquet compile externalDependency.parquet