samza

samza copied to clipboard

Test Done: gradle build

jia-gao

SAMZA-2758: Upgrade vulnerable versions jetty and jackson

1

Issues: Upgrade dependencies for security fixes and enhancements for jetty and jackson In current dependencies there are security vulnerabilities Jackson: https://security.snyk.io/package/maven/com.fasterxml.jackson.core:jackson-databind/2.12.2 Jetty: https://security.snyk.io/package/maven/org.eclipse.jetty:jetty-server/9.4.38.v20210224 Upgrade Jackson to version: 2.13.3 Upgrade Jetty...

perkss

This has 2 specific purposes. - Upgrade the Yarn Version to a Java 11 compatible version - Make everything compile when building with Java 11. I have tested that both...

james-deee

Improve GRADLE build Performance

1

[Compiler daemon](https://docs.gradle.org/current/userguide/performance.html#compiler_daemon). The Gradle Java plugin allows you to run the compiler as a separate process by setting `options.fork = true`. This feature can lead to much less garbage collection...

shisheng-1

SAMZA-2754: Set default scala suffix to 2.12

1

We should set the default scala suffix to 2.12 since 2.11 is quite old at this point.

bringhurst

Bumps [redcarpet](https://github.com/vmg/redcarpet) from 3.4.0 to 3.5.1. Release notes Sourced from redcarpet's releases. Redcarpet v3.5.1 Fix a security vulnerability using :quote in combination with the :escape_html option. Reported by Johan Smits....

dependabot[bot]

Bumps [json](https://github.com/flori/json) from 2.1.0 to 2.3.0. Changelog Sourced from json's changelog. 2019-12-11 (2.3.0) Fix default of create_additions to always be false for JSON(user_input) and JSON.parse(user_input, nil). Note that JSON.load remains...

dependabot[bot]

Bumps [addressable](https://github.com/sporkmonger/addressable) from 2.5.2 to 2.8.0. Changelog Sourced from addressable's changelog. Addressable 2.8.0 fixes ReDoS vulnerability in Addressable::Template#match no longer replaces + with spaces in queries for non-http(s) schemes fixed...

dependabot[bot]

Bumps [ffi](https://github.com/ffi/ffi) from 1.9.23 to 1.15.5. Changelog Sourced from ffi's changelog. 1.15.5 / 2022-01-10 Fixed: Fix long double argument or return values on 32bit i686. #849 FFI::ConstGenerator: avoid usage of...

dependabot[bot]

Changes: - Added a new class of exception called BlobNotFoundException - Added a new metric to track the count of of this exception during restore from blob stores.

shekhars-li