dependabot[bot]
f5527dc3e7
Bump io.grpc:grpc-netty-shaded from 1.57.2 to 1.65.1 ( #16731 )
...
Bumps [io.grpc:grpc-netty-shaded](https://github.com/grpc/grpc-java ) from 1.57.2 to 1.65.1.
- [Release notes](https://github.com/grpc/grpc-java/releases )
- [Commits](https://github.com/grpc/grpc-java/compare/v1.57.2...v1.65.1 )
---
updated-dependencies:
- dependency-name: io.grpc:grpc-netty-shaded
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: asdf2014 <asdf2014@apache.org>
2024-07-29 14:51:39 +08:00
Adarsh Sanjeev
9a2d7c28bc
Prepare master branch for 31.0.0 release ( #16333 )
2024-04-26 09:22:43 +05:30
Karan Kumar
c4990f56d6
Prepare main branch for next 30.0.0 release. ( #15707 )
2024-01-23 15:55:54 +05:30
Laksh Singla
5f86072456
Prepare master for Druid 29 ( #15121 )
...
Prepare master for Druid 29
2023-10-11 10:33:45 +05:30
Tejaswini Bandlamudi
388d5ecf78
Fix reported CVEs ( #14882 )
...
Suppress CVEs from dependencies with no available fix or false positives
hadoop-annotations: CVE-2022-25168, CVE-2021-33036
hadoop-client-runtime: CVE-2023-1370, CVE-2023-37475
okio: CVE-2023-3635
Upgrade grpc version to fix CVE-2023-33953
2023-08-24 19:28:55 +05:30
AmatyaAvadhanula
0412f40d36
Prepare master branch for next release, 28.0.0 ( #14595 )
...
* Prepare master branch for next release, 28.0.0
2023-07-18 09:22:30 +05:30
Jan Werner
95115d722a
CVE fixes - update of multiple dependencies. ( #14519 )
...
Apache Druid brings multiple direct and transitive dependencies that are affected by plethora of CVEs.
This PR attempts to update all the dependencies that did not require code refactoring.
This PR modifies pom files, license file and OWASP Dependency Check suppression file.
2023-07-07 20:27:30 +05:30
Clint Wylie
1aef72aa7e
Bump up the version in pom to 27.0.0 in preparation of release ( #14051 )
2023-04-10 14:56:59 +05:30
Clint Wylie
08b5951cc5
merge druid-core, extendedset, and druid-hll into druid-processing to simplify everything ( #13698 )
...
* merge druid-core, extendedset, and druid-hll into druid-processing to simplify everything
* fix poms and license stuff
* mockito is evil
* allow reset of JvmUtils RuntimeInfo if tests used static injection to override
2023-02-17 14:27:41 -08:00
Kashif Faraz
7cf761cee4
Prepare master branch for next release, 26.0.0 ( #13401 )
...
* Prepare master branch for next release, 26.0.0
* Use docker image for druid 24.0.1
* Fix version in druid-it-cases pom.xml
2022-11-22 15:31:01 +05:30
Abhishek Agarwal
618757352b
Bump up the version to 25.0.0 ( #12975 )
...
* Bump up the version to 25.0.0
* Fix the version in console
2022-08-29 11:27:38 +05:30
dependabot[bot]
86d01b3681
Bump opentelemetry-instrumentation-bom-alpha ( #12531 )
...
Bumps [opentelemetry-instrumentation-bom-alpha](https://github.com/open-telemetry/opentelemetry-java-instrumentation ) from 1.7.0-alpha to 1.14.0-alpha.
- [Release notes](https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-java-instrumentation/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-java-instrumentation/commits )
---
updated-dependencies:
- dependency-name: io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-01 13:51:39 -07:00
Abhishek Agarwal
2fe053c5cb
Bump up the versions ( #12480 )
2022-04-27 14:28:20 +05:30
Xavier Léauté
4c61878f9c
Reduce use of mocking and simplify some tests ( #12283 )
...
* remove use of mocks for ServiceMetricEvent
* simplify KafkaEmitterTests by moving to Mockito
* speed up KafkaEmitterTest by adjusting reporting frequency in tests
* remove unnecessary easymock and JUnitParams dependencies
2022-02-26 17:23:09 -08:00
Uwe Schindler
1f7dd6d86c
Forbiddenapis: Split the guava16-only signatures file from main signatures file ( #12170 )
2022-01-19 17:50:28 -08:00
Ivan Vankovich
6a93872586
OpenTelemetry emitter extension ( #12015 )
...
* Add OpenTelemetry emitter extension
* Fix build
* Fix checkstyle
* Add used undeclared dependencies
* Ignore unused declared dependencies
2022-01-15 12:18:04 +08:00