5099f5aa70
update httpclient due to cve ( #12422 )
...
https://github.com/apache/druid/issues/12421
2022-04-21 10:12:19 +08:00
d2a6754692
Bump PostgreSQL JDBC driver to 42.3.3 (CVE-2022-21724) ( #12410 )
...
* Bump PostgreSQL JDBC driver to 42.3.3 (CVE-2022-21724)
* update license file
2022-04-09 15:38:26 +05:30
7d5666109c
upgrade surefire 3.0.0-M6 ( #12395 )
...
* upgrade surefire 3.0.0-M6
* increasing memory
2022-04-04 23:56:15 -07:00
c3377bf744
upgrade maven-pmd-plugin to fix warning ( #12349 )
...
we sometimes see warnings similar to the one mentioned
https://issues.apache.org/jira/browse/MPMD-325
Upgrading the plugin should hopefully reduce occurrence of those.
2022-03-19 10:18:26 -07:00
4ed1abca94
Bump slf4j.version from 1.7.12 to 1.7.36 ( #11594 )
...
Bump slf4j.version from 1.7.12 to 1.7.36
- [Release notes](Release notes: https://www.slf4j.org/news.html )
Updates `jcl-over-slf4j` from 1.7.12 to 1.7.36
- [Commits](https://github.com/qos-ch/slf4j/compare/v_1.7.12...v_1.7.36 )
Updates `slf4j-simple` from 1.7.12 to 1.7.36
- [Commits](https://github.com/qos-ch/slf4j/compare/v_1.7.12...v_1.7.36 )
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Suneet Saldanha <suneet@apache.org>
Co-authored-by: Xavier Léauté <xvrl@apache.org>
2022-03-18 13:45:44 -07:00
6f0e5f25fa
update surefire plugin to 3.0.0-M4 ( #12342 )
...
stay on surefire 3.0.0-M4 until we can upgrade to 3.0.0-M6
with a fix for https://issues.apache.org/jira/browse/SUREFIRE-1815
causing issues in RetryUtilsTest.
2022-03-18 08:20:28 -07:00
a5dfb911de
Bump maven-site-plugin from 3.1 to 3.11.0 ( #12310 )
...
Bumps [maven-site-plugin](https://github.com/apache/maven-site-plugin ) from 3.1 to 3.11.0.
- [Release notes](https://github.com/apache/maven-site-plugin/releases )
- [Commits](https://github.com/apache/maven-site-plugin/compare/maven-site-plugin-3.1...maven-site-plugin-3.11.0 )
---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-site-plugin
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-03-17 15:17:29 +08:00
5d02a91faa
upgrade Error Prone to 2.11 (requires Java 11) ( #12306 )
...
The latest version of Error Prone now requires Java 11. Upgrading means we can
remove a lot of the maven profile complexity required to run checks with Java 8.
This also requires switching our strict build to use Java 11.
* update error-prone to 2.11
* remove need for specific maven profiles for Java 8 and Java 15
* fix additional Error Prone warnings with Java 11
* update strict build to use Java 11
2022-03-14 19:40:48 -07:00
a1cdee2a3a
Bump jersey.version from 1.19.3 to 1.19.4 ( #12290 )
...
* Bump jersey.version from 1.19.3 to 1.19.4
Bumps `jersey.version` from 1.19.3 to 1.19.4.
Updates `jersey-client` from 1.19.3 to 1.19.4
Updates `jersey-core` from 1.19.3 to 1.19.4
Updates `jersey-grizzly2` from 1.19.3 to 1.19.4
Updates `jersey-guice` from 1.19.3 to 1.19.4
Updates `jersey-server` from 1.19.3 to 1.19.4
Updates `jersey-servlet` from 1.19.3 to 1.19.4
Updates `jersey-json` from 1.19.3 to 1.19.4
Updates `jersey-test-framework-core` from 1.19.3 to 1.19.4
Updates `jersey-test-framework-grizzly2` from 1.19.3 to 1.19.4
---
updated-dependencies:
- dependency-name: com.sun.jersey:jersey-client
dependency-type: direct:development
update-type: version-update:semver-patch
- dependency-name: com.sun.jersey:jersey-core
dependency-type: direct:development
update-type: version-update:semver-patch
- dependency-name: com.sun.jersey:jersey-grizzly2
dependency-type: direct:development
update-type: version-update:semver-patch
- dependency-name: com.sun.jersey.contribs:jersey-guice
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: com.sun.jersey:jersey-server
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: com.sun.jersey:jersey-servlet
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: com.sun.jersey:jersey-json
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: com.sun.jersey.jersey-test-framework:jersey-test-framework-core
dependency-type: direct:development
update-type: version-update:semver-patch
- dependency-name: com.sun.jersey.jersey-test-framework:jersey-test-framework-grizzly2
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
* Update licenses.yaml
* Update licenses.yaml
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Clint Wylie <cwylie@apache.org>
2022-03-04 09:57:20 +08:00
50038d9344
latest datasketches-java-3.1.0 ( #12224 )
...
These changes are to use the latest datasketches-java-3.1.0 and also to restore support for quantile and HLL4 sketches to be able to grow larger than a given buffer in a buffer aggregator and move to heap in rare cases. This was discussed in #11544 .
Co-authored-by: AlexanderSaydakov <AlexanderSaydakov@users.noreply.github.com>
2022-03-01 17:14:42 -08:00
d105519558
Replace use of PowerMock with Mockito ( #12282 )
...
Mockito now supports all our needs and plays much better with recent Java versions.
Migrating to Mockito also simplifies running the kind of tests that required PowerMock in the past.
* replace all uses of powermock with mockito-inline
* upgrade mockito to 4.3.1 and fix use of deprecated methods
* import mockito bom to align all our mockito dependencies
* add powermock to forbidden-apis to avoid accidentally reintroducing it in the future
2022-02-27 22:47:09 -08:00
1434197ee1
update airline dependency to 2.x ( #12270 )
...
* upgrade Airline to Airline 2
https://github.com/airlift/airline is no longer maintained, updating to
https://github.com/rvesse/airline (Airline 2) to use an actively
maintained version, while minimizing breaking changes.
Note, this is a backwards incompatible change, and extensions relying on
the CliCommandCreator extension point will also need to be updated.
* fix dependency checks where jakarta.inject is now resolved first instead
of javax.inject, due to Airline 2 using jakarta
2022-02-27 15:19:28 -08:00
009dd9e09a
upgrade core Apache Kafka dependencies to 3.1.0 ( #12203 )
...
Announcement: https://blogs.apache.org/kafka/entry/what-s-new-in-apache7
Release notes: https://dist.apache.org/repos/dist/release/kafka/3.1.0/RELEASE_NOTES.html
* upgrade core Apache Kafka dependencies to 3.1.0
* fix use of private Kafka APIs
* remove deprecated test rules
* remove mock calls that weren't verified in the first place
* remove the need for powermock in KafkaLookupExtractorFactoryTest
* align curator-test version with curator itself
* update easymock to 4.3.0
2022-02-23 18:42:51 -08:00
4add2510ed
Add syntax support for PARTITIONED BY/CLUSTERED BY in INSERT queries ( #12163 )
...
This PR aims to add parser changes for supporting PARTITIONED BY and CLUSTERED BY as proposed in the issue #11929 .
2022-02-08 16:23:15 +05:30
1f7dd6d86c
Forbiddenapis: Split the guava16-only signatures file from main signatures file ( #12170 )
2022-01-19 17:50:28 -08:00
b55f7a25fe
Fix forbiddenapis causing travis failing ( #12158 )
...
* Fix forbiddenapis causing travis failing
* Use failOnUnresolvableSignatures instead
2022-01-15 16:13:37 -08:00
6a93872586
OpenTelemetry emitter extension ( #12015 )
...
* Add OpenTelemetry emitter extension
* Fix build
* Fix checkstyle
* Add used undeclared dependencies
* Ignore unused declared dependencies
2022-01-15 12:18:04 +08:00
fe71fc414f
Update log4j2 to 2.17.1 ( #12106 )
...
Signed-off-by: frank chen <frank.chen021@outlook.com>
2021-12-30 19:18:16 -06:00
f345759360
Update to 2.17.0 ( #12081 )
2021-12-19 20:27:08 -08:00
d917e0433e
Update to log4j 2.16.0. ( #12061 )
...
* Update to log4j 2.16.0.
* Update licenses.yaml
2021-12-13 19:06:00 -08:00
19316018b8
update log4j to 2.15.0 to address security vulnerabilities ( #12051 )
2021-12-09 22:34:54 -08:00
ffc5ade506
Remove use of deprecated PMD ruleset ( #12044 )
...
* Remove use of deprecated PMD ruleset
This fixes annoying warnings we were getting during build.
- Use a custom PMD ruleset, since the built-in one uses deprecated rules.
- UnnecessaryImport replaces most of the deprecated rules
- Update maven-pmd-plugin to 3.15
- Exclude ancient asm version from caliper, since this was causing
incompatibility warnings with PMD and could also affect our tests runs
in unexpected ways
2021-12-09 13:04:27 -08:00
0565f0e6a1
fix build warnings for forbidden-apis ( #12034 )
...
* replace deprecated forbidden-apis config failOnUnresolvableSignatures
with ignoreSignaturesOfMissingClasses which avoids warnings for
classes not present in a particular sub-module
* fix incorrect signature for Files.createTempDirectory
2021-12-07 22:21:01 -08:00
7237dc837c
complex typed expressions ( #11853 )
...
* complex typed expressions
* add built-in hll collector expressions to get coverage on druid-processing, more types, more better
* rampage!!!
* more javadoc
* adjustments
* oops
* lol
* remove unused dependency
* contradiction?
* more test
2021-11-08 00:33:06 -08:00
90640bb316
Support for hadoop 3 via maven profiles ( #11794 )
...
Add support for hadoop 3 profiles . Most of the details are captured in #11791 .
We use a combination of maven profiles and resource filtering to achieve this. Hadoop2 is supported by default and a new maven profile with the name hadoop3 is created. This will allow the user to choose the profile which is best suited for the use case.
2021-10-30 22:46:24 +05:30
07a232d7b4
Bump netty4 to 4.1.68; suppress CVE-2021-37136 and CVE-2021-37137 for netty3 ( #11844 )
...
* bump netty4 to 4.1.68
* suppress CVE-2021-37136 and CVE-2021-37137 for netty3
* license
2021-10-25 21:09:15 -07:00
8cf1cbc4a9
latest datasketches-java and datasketches-memory ( #11773 )
...
* latest datasketches-java and datasketches-memory
* updated versions of datasketches-java and datasketches-memory
Co-authored-by: AlexanderSaydakov <AlexanderSaydakov@users.noreply.github.com>
2021-10-19 23:42:30 -07:00
bc3b038712
Update Apache Kafka client libraries to 3.0.0 ( #11735 )
...
Release notes:
https://downloads.apache.org/kafka/3.0.0/RELEASE_NOTES.html
https://blogs.apache.org/kafka/entry/what-s-new-in-apache6
2021-10-05 10:23:19 -07:00
9bff6bd70e
Upgrade ORC to 1.7.0 ( #11726 )
...
* Upgrade ORC to 1.7.0
* address comments
* address comments
* Add import
2021-09-27 13:20:09 -07:00
1370fcf9bf
dependency check with inhert instead of aggregate ( #11709 )
2021-09-15 04:18:59 -07:00
fe1d8c206a
bump version to 0.23.0-SNAPSHOT ( #11670 )
2021-09-08 15:56:04 -07:00
2a658acad4
Put sleep in an extension ( #11632 )
...
* Put sleep in an extension
* dependency
2021-08-25 01:27:45 -07:00
590583699f
Bump maven-enforcer-plugin from 3.0.0-M3 to 3.0.0 ( #11543 )
...
Bumps [maven-enforcer-plugin](https://github.com/apache/maven-enforcer ) from 3.0.0-M3 to 3.0.0.
- [Release notes](https://github.com/apache/maven-enforcer/releases )
- [Commits](https://github.com/apache/maven-enforcer/compare/enforcer-3.0.0-M3...enforcer-3.0.0 )
---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-enforcer-plugin
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-08-04 08:43:49 -07:00
cf674c833c
Bump maven-resources-plugin from 3.1.0 to 3.2.0 ( #11525 )
...
Bumps [maven-resources-plugin](https://github.com/apache/maven-resources-plugin ) from 3.1.0 to 3.2.0.
- [Release notes](https://github.com/apache/maven-resources-plugin/releases )
- [Commits](https://github.com/apache/maven-resources-plugin/compare/maven-resources-plugin-3.1.0...maven-resources-plugin-3.2.0 )
---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-resources-plugin
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-08-02 09:38:34 -07:00
2e850b5655
Bump aws.sdk.version from 1.11.884 to 1.12.37 ( #11367 )
...
* Bump aws.sdk.version from 1.11.884 to 1.12.8
Bumps `aws.sdk.version` from 1.11.884 to 1.12.8.
Updates `aws-java-sdk-core` from 1.11.884 to 1.12.8
- [Release notes](https://github.com/aws/aws-sdk-java/releases )
- [Changelog](https://github.com/aws/aws-sdk-java/blob/master/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-java/compare/1.11.884...1.12.8 )
Updates `aws-java-sdk-ec2` from 1.11.884 to 1.12.8
- [Release notes](https://github.com/aws/aws-sdk-java/releases )
- [Changelog](https://github.com/aws/aws-sdk-java/blob/master/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-java/compare/1.11.884...1.12.8 )
Updates `aws-java-sdk-s3` from 1.11.884 to 1.12.8
- [Release notes](https://github.com/aws/aws-sdk-java/releases )
- [Changelog](https://github.com/aws/aws-sdk-java/blob/master/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-java/compare/1.11.884...1.12.8 )
Updates `aws-java-sdk-sts` from 1.11.884 to 1.12.8
- [Release notes](https://github.com/aws/aws-sdk-java/releases )
- [Changelog](https://github.com/aws/aws-sdk-java/blob/master/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-java/compare/1.11.884...1.12.8 )
Updates `aws-java-sdk-kinesis` from 1.11.884 to 1.12.8
- [Release notes](https://github.com/aws/aws-sdk-java/releases )
- [Changelog](https://github.com/aws/aws-sdk-java/blob/master/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-java/compare/1.11.884...1.12.8 )
Updates `aws-java-sdk-rds` from 1.11.884 to 1.12.8
- [Release notes](https://github.com/aws/aws-sdk-java/releases )
- [Changelog](https://github.com/aws/aws-sdk-java/blob/master/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-java/compare/1.11.884...1.12.8 )
---
updated-dependencies:
- dependency-name: com.amazonaws:aws-java-sdk-core
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: com.amazonaws:aws-java-sdk-ec2
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: com.amazonaws:aws-java-sdk-s3
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: com.amazonaws:aws-java-sdk-sts
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: com.amazonaws:aws-java-sdk-kinesis
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: com.amazonaws:aws-java-sdk-rds
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
* Fix license and bump to latest aws
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Suneet Saldanha <suneet@apache.org>
2021-08-01 00:12:57 -07:00
4bca7f014e
update error-prone to 2.8.0 with fix for crashing check ( #11494 )
...
* error-prone 2.8.0 fixes https://github.com/google/error-prone/issues/2396
* fix for a few ignored return values
* fix unknown args in sub-modules
2021-07-29 09:13:46 -07:00
3f456fe305
Address CVE-2021-35515 CVE-2021-36090 ( #11496 )
...
* Address CVE-2021-35515 CVE-2021-36090
Bump commons-compress to deal with new CVEs
* fix licenses
2021-07-26 14:54:32 -07:00
5037493e45
Bump commons-io to 2.11.0 ( #11460 )
...
* Bump commons-io to 2.11.0
* Address comments
* Remove try catch
* Fix checkstyle
2021-07-19 15:47:14 -07:00
63fcd77c38
support using mariadb connector with mysql extensions ( #11402 )
...
* support using mariadb connector with mysql extensions
* cleanup and more tests
* fix test
* javadocs, more tests, etc
* style and more test
* more test more better
* missing pom
* more pom
2021-07-08 12:25:37 -07:00
8037a54525
revert commons-io to 2.6 ( #11392 )
...
* * revert commons-io to 2.6
* * fix failing tests
2021-06-29 23:04:38 -07:00
3ad6a3d74f
switch to netty-bom instead of individual dependencies ( #11356 )
2021-06-29 12:52:12 -07:00
a1c20d7457
update jackson dependencies to use bom ( #11353 )
...
Switching to the bom dependency declaration simplifies managing jackson
dependencies. It also removes the need to override individual library
versions for CVE fixes, since the bom takes care of that internally.
This change aligns our jackson dependency versions on 2.10.5(.x):
- updates jackson libraries from 2.10.2 to 2.10.5
- jackson-databind remains at 2.10.5.1 as defined in the bom
Release notes: https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.10
2021-06-16 18:37:30 -07:00
712f2a5d00
upgrade error-prone to 2.7.1 and support checks with Java 11+ ( #11363 )
...
* upgrade error-prone to 2.7.1 and support checks with Java 11+
- upgrade error-prone to 2.7.1
- support running error-prone with Java 11 and above using -Xplugin
instead of custom compiler
- add compiler arguments to ignore warnings/errors in Java 15/16
- introduce strictCompile property to enable strict profiles since we
now need multiple strict profiles for Java 8
- properly exclude all generated source files from error-prone
- fix druid-processing overriding annotation processors from parent pom
- fix druid-core disabling most non-default checks
- align plugin and annotation errorprone versions
- fix / suppress additional issues found by error-prone:
* fix bug in SeekableStreamSupervisor initializing ArrayList size with
the taskGroupdId
* fix missing @Override annotations
- remove outdated compiler plugin in benchmarks
- remove deleted ParameterPackage error-prone rule
- re-enable checks on benchmark module as well
* fix IntelliJ inspections
* disable LongFloatConversion due to bug in error-prone with JDK 8
* add comment about InsecureCrypto
2021-06-16 12:55:34 -07:00
6edc017fad
update jacoco for Java 15/16 support ( #11361 )
2021-06-12 13:57:41 +08:00
167044f715
Bump fastutil from 8.2.3 to 8.5.4 ( #11347 )
...
* Bump fastutil from 8.2.3 to 8.5.4
Bumps [fastutil](https://github.com/vigna/fastutil ) from 8.2.3 to 8.5.4.
- [Release notes](https://github.com/vigna/fastutil/releases )
- [Changelog](https://github.com/vigna/fastutil/blob/master/CHANGES )
- [Commits](https://github.com/vigna/fastutil/compare/8.2.3...8.5.4 )
---
updated-dependencies:
- dependency-name: it.unimi.dsi:fastutil
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
* update licenses.yaml
* update maven dependency list for -core and -extra libraries to pass maven dependency checks
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Xavier Léauté <xvrl@apache.org>
2021-06-10 07:43:18 -07:00
1a27ed0b86
Bump junit from 4.12 to 4.13.2 ( #11344 )
...
Bumps [junit](https://github.com/junit-team/junit4 ) from 4.12 to 4.13.2.
- [Release notes](https://github.com/junit-team/junit4/releases )
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.12.md )
- [Commits](https://github.com/junit-team/junit4/compare/r4.12...r4.13.2 )
---
updated-dependencies:
- dependency-name: junit:junit
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-06-08 18:18:39 -07:00
be10a236d5
Bump commons-io from 2.6 to 2.9.0 ( #11338 )
...
* Bump commons-io from 2.6 to 2.9.0
Bumps commons-io from 2.6 to 2.9.0.
---
updated-dependencies:
- dependency-name: commons-io:commons-io
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
* update licenses.yaml to reflect version bumps
* fix tests relying on specific log messages
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Xavier Léauté <xvrl@apache.org>
2021-06-08 10:02:59 -07:00
dbec8da7ea
enable dependabot for dependency updates ( #11079 )
...
* enable dependabot for dependency updates
* exclude dependabot config from license checks
2021-06-07 13:56:32 -07:00
0c5d1c9725
Web console: add more query fixing auto suggestions ( #11203 )
...
* add more query fixing auto suggestions
* update query gen
* update toolkit
* update licenses
* fix funky quotes
* funky => fancy
* revert engine change
* separate web-console and website npm and node deps
2021-06-04 09:29:00 -07:00
b517c3339b
remove ZooKeeper 3.4 support + pass tests with Java 15 ( #11073 )
...
With this change, Druid will only support ZooKeeper 3.5.x and later.
In order to support Java 15 we need to switch to ZK 3.5.x client libraries and drop support for ZK 3.4.x
(see #10780 for the detailed reasons)
* remove ZooKeeper 3.4.x compatibility
* exclude additional ZK 3.5.x netty dependencies to ensure we use our version
* keep ZooKeeper version used for integration tests in sync with client library version
* remove the need to specify ZK version at runtime for docker
* add support to run integration tests with JDK 15
* build and run unit tests with Java 15 in travis
2021-05-25 12:49:49 -07:00
PJ Fanning
Jihoon Son
aggarwalakshay
Xavier Léauté
dependabot[bot]
Alexander Saydakov
Laksh Singla
Uwe Schindler
Benedict Jin
Ivan Vankovich
Frank Chen
Gian Merlino
Clint Wylie
Karan Kumar
William Hyun
Suneet Saldanha
Dongjoon Hyun
zachjsh
Vadim Ogievetsky