honeymoose
/
OpenSearch
mirror of https://github.com/honeymoose/OpenSearch.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
OpenSearch/buildSrc/version.properties

45 lines
1.1 KiB
Properties
Raw Normal View History

[Version] Increment main to 2.0 (#1192) Increment version on main to 2.0.0. Signed-off-by: Nicholas Walter Knize <nknize@apache.org> Co-authored-by: dblock <dblock@amazon.com>
2021-09-01 23:35:53 -04:00
opensearch = 2.0.0
Upgrade to Lucene 8.9 (#1080) This commit upgrades to the official lucene 8.9 release Signed-off-by: Nicholas Walter Knize <nknize@apache.org>
2021-08-20 12:28:06 -04:00
lucene = 8.9.0
Build: Consolidate dependencies specified in multiple places Some dependencies must be specified in a couple places in the build. e.g. randomized runner is specified both in buildSrc (for the gradle wrapper plugin), as well as in the test-framework. This change creates buildSrc/versions.properties which acts similar to the set of shared version properties we used to have in the maven parent pom.
2015-11-10 02:34:22 -05:00
Upgrade bundled jdk to 15.0.1 and switch back to Oracle (#64253) This commit updates the bundled jdk to 15.0.1, and at the same time once again switches the bundled jdk back to adoptopenjdk, which has fixed their build problem and regained support for glibc 2.12. closes #64026
2020-10-29 13:55:46 -04:00
bundled_jdk_vendor = adoptopenjdk
bundled_jdk = 15.0.1+9
Bundle java in distributions (#38013) * Bundle java in distributions Setting up a jdk is currently a required external step when installing elasticsearch. This is particularly problematic for the rpm/deb packages as installing a jdk in the same package installation command does not guarantee any order, so must be done in separate steps. Additionally, JAVA_HOME must be set and often causes problems in selecting a correct jdk when, for example, the system java is an older unsupported version. This commit bundles platform specific openjdks into each distribution. In addition to eliminating the issues above, it also presents future possible improvements like using jlink to build jdk images only containing modules that elasticsearch uses. closes #31845
2019-03-08 14:04:18 -05:00
[CVE] Upgrade dependencies to mitigate CVEs (#657) This PR upgrade the following dependencies to fix CVEs. - commons-codec:1.12 (->1.13) apache/commons-codec@48b6157 - ant:1.10.8 (->1.10.9) https://ant.apache.org/security.html - jackson-databind:2.10.4 (->2.11.0) FasterXML/jackson-databind#2589 - jackson-dataformat-cbor:2.10.4 (->2.11.0) https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28491 - apache-httpclient:4.5.10 (->4.5.13) https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-13956 - checkstyle:8.20 (->8.29) https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10782 - junit:4.12 (->4.13.1) https://github.com/junit-team/junit4/security/advisories/GHSA-269g-pwp5-87pp - netty:4.1.49.Final (->4.1.59) https://github.com/netty/netty/security/advisories/GHSA-5mcr-gq6c-3hq2 Signed-off-by: Rabi Panda <adnapibar@gmail.com>
2021-05-18 14:37:24 -04:00
checkstyle = 8.29
Improve checkstyle performance and readability (#54308) Drop a nasty regex in our checkstyle config that I wrote a long time ago in favor of a checkstyle extension. This is better because: * It is faster. It saves a little more than a minute across the entire build. * It is easier to read. Who knew 100 lines of Java would be easier to read than a regex, but it is. * It has tests.
2020-03-27 11:04:38 -04:00
Build: Consolidate dependencies specified in multiple places Some dependencies must be specified in a couple places in the build. e.g. randomized runner is specified both in buildSrc (for the gradle wrapper plugin), as well as in the test-framework. This change creates buildSrc/versions.properties which acts similar to the set of shared version properties we used to have in the maven parent pom.
2015-11-10 02:34:22 -05:00
# optional dependencies
Upgrade to lucene-7.3.0-snapshot-98a6b3d. (#29298) Most notable changes include: - this release doesn't have the 7.2.1 version constant so I had to create one - spatial4j and jts were upgraded
2018-04-03 03:27:14 -04:00
spatial4j = 0.7
jts = 1.15.0
Update Jackson to 2.12.5 (#1247) Signed-off-by: Andriy Redko <andriy.redko@aiven.io>
2021-09-21 18:33:20 -04:00
jackson = 2.12.5
Upgrade to Jackson 2.10.4 (#56188) Another Jackson release is available. There are some CVEs addressed, none of which impact us, but since we can now bump Jackson easily, let us move along with the train to avoid the false positives from security scanners.
2020-05-06 17:19:22 -04:00
snakeyaml = 1.26
Move icu4j and super-csv version numbers to versions file (#32769) The upcoming ML log structure finder functionality will use these libraries, and it makes sense to use the same versions that are being used elsewhere in Elasticsearch. This is especially true with icu4j, which is pretty big.
2018-08-10 07:19:06 -04:00
icu4j = 62.1
supercsv = 2.4.0
Skip some logging tests on JDK 9 There is a bug in Log4j on JDK 9 for walking the stack to find where a log line is coming from. This bug is impacting some of our testing, so this commit marks these tests as skippable only on JDK 9 until the bug is fixed upstream. Relates #26467
2017-09-01 12:38:22 -04:00
# when updating log4j, please update also docs/java-api/index.asciidoc
LOGGING: Upgrade to Log4J 2.11.1 (#32616) * LOGGING: Upgrade to Log4J 2.11.1 * Upgrade to `2.11.1` to fix memory leaks in slow logger when logging large requests * This was caused by a bug in Log4J https://issues.apache.org/jira/browse/LOG4J2-2269 and is fixed in `2.11.1` via https://git-wip-us.apache.org/repos/asf?p=logging-log4j2.git;h=9496c0c * Fixes #32537 * Fixes #27300
2018-08-06 08:56:21 -04:00
log4j = 2.11.1
Build: Consolidate dependencies specified in multiple places Some dependencies must be specified in a couple places in the build. e.g. randomized runner is specified both in buildSrc (for the gradle wrapper plugin), as well as in the test-framework. This change creates buildSrc/versions.properties which acts similar to the set of shared version properties we used to have in the maven parent pom.
2015-11-10 02:34:22 -05:00
slf4j = 1.6.2
Handle long paths on Windows for standalone tests In some cases our Windows builds fail due to long path names that arise from a combination of long build job names plus long sub-project names. While newer versions of Windows can handle long paths, invoking batch scripts longer than 260 characters via cmd.exe is still problematic. This leads to failing integration tests because we can not run the commands to install plugins, create the keystore, and start the node. This commit handles this by converting all paths on Windows used to start an Elasticsearch node to short path names. Relates #26365
2017-08-24 18:46:49 -04:00
# when updating the JNA version, also update the version in buildSrc/build.gradle
Upgrade to JNA 5.5.0 (#58183) This commit bumps our JNA dependency from 4.5.1 to 5.5.0, so that we are now on the latest maintained line, and pick up a large collection of bug fixes that have accumulated.
2020-06-17 07:34:24 -04:00
jna = 5.5.0
Build: Consolidate dependencies specified in multiple places Some dependencies must be specified in a couple places in the build. e.g. randomized runner is specified both in buildSrc (for the gradle wrapper plugin), as well as in the test-framework. This change creates buildSrc/versions.properties which acts similar to the set of shared version properties we used to have in the maven parent pom.
2015-11-10 02:34:22 -05:00
[CVE] Upgrade dependencies to mitigate CVEs (#657) This PR upgrade the following dependencies to fix CVEs. - commons-codec:1.12 (->1.13) apache/commons-codec@48b6157 - ant:1.10.8 (->1.10.9) https://ant.apache.org/security.html - jackson-databind:2.10.4 (->2.11.0) FasterXML/jackson-databind#2589 - jackson-dataformat-cbor:2.10.4 (->2.11.0) https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28491 - apache-httpclient:4.5.10 (->4.5.13) https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-13956 - checkstyle:8.20 (->8.29) https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10782 - junit:4.12 (->4.13.1) https://github.com/junit-team/junit4/security/advisories/GHSA-269g-pwp5-87pp - netty:4.1.49.Final (->4.1.59) https://github.com/netty/netty/security/advisories/GHSA-5mcr-gq6c-3hq2 Signed-off-by: Rabi Panda <adnapibar@gmail.com>
2021-05-18 14:37:24 -04:00
netty = 4.1.59.Final
Upgrade to joda 2.10.4 (#47805)
2019-10-31 09:26:35 -04:00
joda = 2.10.4
NETWORKING: Upgrade Netty to 4.1.30 (#34417) * closes #34411
2018-10-12 11:13:28 -04:00
Upgrade the bouncycastle dependency to 1.61 (#40017) This commit upgrades the bouncycastle dependency from 1.59 to 1.61.
2019-03-14 08:54:14 -04:00
# when updating this version, you need to ensure compatibility with:
# - plugins/ingest-attachment (transitive dependency, check the upstream POM)
# - distribution/tools/plugin-cli
Update BouncyCastle to 1.64 (#52185) (#52464) This commit upgrades the bouncycastle dependency from 1.61 to 1.64.
2020-02-18 07:11:34 -05:00
bouncycastle=1.64
Build: Consolidate dependencies specified in multiple places Some dependencies must be specified in a couple places in the build. e.g. randomized runner is specified both in buildSrc (for the gradle wrapper plugin), as well as in the test-framework. This change creates buildSrc/versions.properties which acts similar to the set of shared version properties we used to have in the maven parent pom.
2015-11-10 02:34:22 -05:00
# test dependencies
Build: Fix reproduce info for methods with ( or ) (#35712) Our `REPRODUCE WITH` line wasn't working for tests with `(` or `)` in the method name. This isn't super common, but happens sometimes for our yml based rest tests. This is because randomized runner's globbing mechanism dind't escape `(` or `)`. I filed this upstream at https://github.com/randomizedtesting/randomizedtesting/issues/271 and Dawid kindly fixed the issue. This upgrades to pick up the fix. Closes #35692
2018-11-29 08:38:09 -05:00
randomizedrunner = 2.7.1
Upgrade to JUnit 4.12 (#23877) * Upgrade to JUnit 4.12 * Add permission to junit 4.12 and remove junit4-ant specific permission
2017-05-02 03:58:21 -04:00
junit = 4.12
[CVE] Upgrade dependencies to mitigate CVEs (#657) This PR upgrade the following dependencies to fix CVEs. - commons-codec:1.12 (->1.13) apache/commons-codec@48b6157 - ant:1.10.8 (->1.10.9) https://ant.apache.org/security.html - jackson-databind:2.10.4 (->2.11.0) FasterXML/jackson-databind#2589 - jackson-dataformat-cbor:2.10.4 (->2.11.0) https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28491 - apache-httpclient:4.5.10 (->4.5.13) https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-13956 - checkstyle:8.20 (->8.29) https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10782 - junit:4.12 (->4.13.1) https://github.com/junit-team/junit4/security/advisories/GHSA-269g-pwp5-87pp - netty:4.1.49.Final (->4.1.59) https://github.com/netty/netty/security/advisories/GHSA-5mcr-gq6c-3hq2 Signed-off-by: Rabi Panda <adnapibar@gmail.com>
2021-05-18 14:37:24 -04:00
httpclient = 4.5.13
Update http-core and http-client dependencies (#46549) Relates to #45808 Closes #45577
2019-09-11 07:42:32 -04:00
httpcore = 4.4.12
Update httpclient for JDK 11 TLS engine (#37994) The apache commons http client implementations recently released versions that solve TLS compatibility issues with the new TLS engine that supports TLSv1.3 with JDK 11. This change updates our code to use these versions since JDK 11 is a supported JDK and we should allow the use of TLSv1.3.
2019-01-30 16:24:29 -05:00
httpasyncclient = 4.1.4
Build: Remove transitive dependencies Transitive dependencies can be confusing and hard to deal with when conflicts arise between them. This change removes transitive dependencies from elasticsearch, and forces any dependency conflicts to be resolved manually, instead of automatically by gradle. closes #14627
2015-11-10 17:58:46 -05:00
commonslogging = 1.1.3
[CVE] Upgrade dependencies to mitigate CVEs (#657) This PR upgrade the following dependencies to fix CVEs. - commons-codec:1.12 (->1.13) apache/commons-codec@48b6157 - ant:1.10.8 (->1.10.9) https://ant.apache.org/security.html - jackson-databind:2.10.4 (->2.11.0) FasterXML/jackson-databind#2589 - jackson-dataformat-cbor:2.10.4 (->2.11.0) https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28491 - apache-httpclient:4.5.10 (->4.5.13) https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-13956 - checkstyle:8.20 (->8.29) https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10782 - junit:4.12 (->4.13.1) https://github.com/junit-team/junit4/security/advisories/GHSA-269g-pwp5-87pp - netty:4.1.49.Final (->4.1.59) https://github.com/netty/netty/security/advisories/GHSA-5mcr-gq6c-3hq2 Signed-off-by: Rabi Panda <adnapibar@gmail.com>
2021-05-18 14:37:24 -04:00
commonscodec = 1.13
Upgrade hamcrest to 2.1 (#41464) hamcrest has some improvements in newer versions, like FileMatchers that make assertions regarding file exists cleaner. This commit upgrades to the latest version of hamcrest so we can start using new and improved matchers.
2019-04-25 02:39:40 -04:00
hamcrest = 2.1
Merge branch 'master' into feature/http_client
2016-06-17 07:50:18 -04:00
securemock = 1.2
Drop mocksocket & securemock dependencies from sniffer and rest client (no needed) (#1174) * Drop mocksocket & securemock dependencies from sniffer and rest client (not needed) Signed-off-by: Andriy Redko <andriy.redko@aiven.io> * Removing .gitignore Signed-off-by: Andriy Redko <andriy.redko@aiven.io>
2021-08-31 14:18:37 -04:00
mockito = 1.9.5
objenesis = 1.0
Remove connect SocketPermissions from core (#22797) This is related to #22116. Core no longer needs `SocketPermission` `connect`. This permission is relegated to these modules/plugins: - transport-netty4 module - reindex module - repository-url module - discovery-azure-classic plugin - discovery-ec2 plugin - discovery-gce plugin - repository-azure plugin - repository-gcs plugin - repository-hdfs plugin - repository-s3 plugin And for tests: - mocksocket jar - rest client - httpcore-nio jar - httpasyncclient jar
2017-02-03 10:39:56 -05:00
Add microbenchmarking infrastructure (#18891) With this commit we add a benchmarks project that contains the necessary build infrastructure and an example benchmark. It is added as a separate project to avoid interfering with the regular build too much (especially sanity checks) and to keep the microbenchmarks isolated. Microbenchmarks are generated with `gradle :benchmarks:jmhJar` and can be run with ` gradle :benchmarks:jmh`. We intentionally do not use the [jmh-gradle-plugin](https://github.com/melix/jmh-gradle-plugin) as it causes all sorts of problems (dependencies are not properly excluded, not all JMH parameters can be set) and it adds another abstraction layer that is not needed. Closes #18242
2016-06-15 10:48:02 -04:00
# benchmark dependencies
Upgrade to JMH 1.19
2017-12-29 04:56:47 -05:00
jmh = 1.19