From 67faa8c6c6983701dcb8fa10f7eea0975617e276 Mon Sep 17 00:00:00 2001 From: Purushottam Sinha Date: Sat, 4 Jul 2026 06:40:14 +0530 Subject: [PATCH 1/2] [FLINK-40071][build] Bump jackson-bom to 2.21.4 jackson-databind 2.21.3 is affected by several recently published CVEs (CVE-2026-54512 through 54518). 2.21.4 fixes all of them except CVE-2026-54515, which has no released fix in any 2.x line yet. Update the NOTICE files of the modules bundling non-shaded jackson. Generated-by: Claude Code (claude-fable-5) --- .../src/main/resources/META-INF/NOTICE | 2 +- .../src/main/resources/META-INF/NOTICE | 4 ++-- .../src/main/resources/META-INF/NOTICE | 8 ++++---- .../src/main/resources/META-INF/NOTICE | 6 +++--- .../src/main/resources/META-INF/NOTICE | 6 +++--- .../src/main/resources/META-INF/NOTICE | 4 ++-- .../flink-sql-avro/src/main/resources/META-INF/NOTICE | 4 ++-- flink-kubernetes/src/main/resources/META-INF/NOTICE | 8 ++++---- .../src/main/resources/META-INF/NOTICE | 10 +++++----- .../src/main/resources/META-INF/NOTICE | 4 ++-- flink-python/src/main/resources/META-INF/NOTICE | 6 +++--- pom.xml | 2 +- 12 files changed, 32 insertions(+), 32 deletions(-) diff --git a/flink-filesystems/flink-azure-fs-hadoop/src/main/resources/META-INF/NOTICE b/flink-filesystems/flink-azure-fs-hadoop/src/main/resources/META-INF/NOTICE index bbe9df3590903e..7ac8dbb15ea9ac 100644 --- a/flink-filesystems/flink-azure-fs-hadoop/src/main/resources/META-INF/NOTICE +++ b/flink-filesystems/flink-azure-fs-hadoop/src/main/resources/META-INF/NOTICE @@ -6,7 +6,7 @@ The Apache Software Foundation (http://www.apache.org/). This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt) -- com.fasterxml.jackson.core:jackson-core:2.21.3 +- com.fasterxml.jackson.core:jackson-core:2.21.4 - com.google.guava:guava:20.0 - commons-codec:commons-codec:1.15 - commons-logging:commons-logging:1.1.3 diff --git a/flink-filesystems/flink-fs-hadoop-shaded/src/main/resources/META-INF/NOTICE b/flink-filesystems/flink-fs-hadoop-shaded/src/main/resources/META-INF/NOTICE index 0a0cd52d519559..4ce56d8ddbd3c1 100644 --- a/flink-filesystems/flink-fs-hadoop-shaded/src/main/resources/META-INF/NOTICE +++ b/flink-filesystems/flink-fs-hadoop-shaded/src/main/resources/META-INF/NOTICE @@ -7,8 +7,8 @@ The Apache Software Foundation (http://www.apache.org/). This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt) - com.fasterxml.jackson.core:jackson-annotations:2.21 -- com.fasterxml.jackson.core:jackson-core:2.21.3 -- com.fasterxml.jackson.core:jackson-databind:2.21.3 +- com.fasterxml.jackson.core:jackson-core:2.21.4 +- com.fasterxml.jackson.core:jackson-databind:2.21.4 - com.fasterxml.woodstox:woodstox-core:5.3.0 - com.google.guava:failureaccess:1.0 - com.google.guava:guava:27.0-jre diff --git a/flink-filesystems/flink-gs-fs-hadoop/src/main/resources/META-INF/NOTICE b/flink-filesystems/flink-gs-fs-hadoop/src/main/resources/META-INF/NOTICE index 5067d42c4cfd55..81a66d61af80c3 100644 --- a/flink-filesystems/flink-gs-fs-hadoop/src/main/resources/META-INF/NOTICE +++ b/flink-filesystems/flink-gs-fs-hadoop/src/main/resources/META-INF/NOTICE @@ -7,10 +7,10 @@ The Apache Software Foundation (http://www.apache.org/). This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt) - com.fasterxml.jackson.core:jackson-annotations:2.21 -- com.fasterxml.jackson.core:jackson-core:2.21.3 -- com.fasterxml.jackson.core:jackson-databind:2.21.3 -- com.fasterxml.jackson.dataformat:jackson-dataformat-xml:2.21.3 -- com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.21.3 +- com.fasterxml.jackson.core:jackson-core:2.21.4 +- com.fasterxml.jackson.core:jackson-databind:2.21.4 +- com.fasterxml.jackson.dataformat:jackson-dataformat-xml:2.21.4 +- com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.21.4 - com.fasterxml.woodstox:woodstox-core:7.0.0 - com.google.android:annotations:4.1.1.4 - com.google.api-client:google-api-client-jackson2:2.0.1 diff --git a/flink-filesystems/flink-s3-fs-hadoop/src/main/resources/META-INF/NOTICE b/flink-filesystems/flink-s3-fs-hadoop/src/main/resources/META-INF/NOTICE index 3a842d2524904e..be45a35767aa6c 100644 --- a/flink-filesystems/flink-s3-fs-hadoop/src/main/resources/META-INF/NOTICE +++ b/flink-filesystems/flink-s3-fs-hadoop/src/main/resources/META-INF/NOTICE @@ -10,9 +10,9 @@ This project bundles the following dependencies under the Apache Software Licens - com.amazonaws:aws-java-sdk-sts:1.12.779 - com.amazonaws:jmespath-java:1.12.779 - com.fasterxml.jackson.core:jackson-annotations:2.21 -- com.fasterxml.jackson.core:jackson-core:2.21.3 -- com.fasterxml.jackson.core:jackson-databind:2.21.3 -- com.fasterxml.jackson.dataformat:jackson-dataformat-cbor:2.21.3 +- com.fasterxml.jackson.core:jackson-core:2.21.4 +- com.fasterxml.jackson.core:jackson-databind:2.21.4 +- com.fasterxml.jackson.dataformat:jackson-dataformat-cbor:2.21.4 - com.fasterxml.woodstox:woodstox-core:5.3.0 - com.google.guava:failureaccess:1.0 - com.google.guava:guava:27.0-jre diff --git a/flink-filesystems/flink-s3-fs-presto/src/main/resources/META-INF/NOTICE b/flink-filesystems/flink-s3-fs-presto/src/main/resources/META-INF/NOTICE index e833b2c8c7cc48..fb3731b993da15 100644 --- a/flink-filesystems/flink-s3-fs-presto/src/main/resources/META-INF/NOTICE +++ b/flink-filesystems/flink-s3-fs-presto/src/main/resources/META-INF/NOTICE @@ -23,9 +23,9 @@ This project bundles the following dependencies under the Apache Software Licens - com.facebook.presto:presto-hive-metastore:0.294 - com.facebook.presto:presto-hdfs-core:0.294 - com.fasterxml.jackson.core:jackson-annotations:2.21 -- com.fasterxml.jackson.core:jackson-core:2.21.3 -- com.fasterxml.jackson.core:jackson-databind:2.21.3 -- com.fasterxml.jackson.dataformat:jackson-dataformat-cbor:2.21.3 +- com.fasterxml.jackson.core:jackson-core:2.21.4 +- com.fasterxml.jackson.core:jackson-databind:2.21.4 +- com.fasterxml.jackson.dataformat:jackson-dataformat-cbor:2.21.4 - com.fasterxml.woodstox:woodstox-core:5.3.0 - com.google.guava:guava:32.1.0-jre - com.google.guava:failureaccess:1.0.1 diff --git a/flink-formats/flink-sql-avro-confluent-registry/src/main/resources/META-INF/NOTICE b/flink-formats/flink-sql-avro-confluent-registry/src/main/resources/META-INF/NOTICE index 239d7f3100f9bd..8147ca2e5861e3 100644 --- a/flink-formats/flink-sql-avro-confluent-registry/src/main/resources/META-INF/NOTICE +++ b/flink-formats/flink-sql-avro-confluent-registry/src/main/resources/META-INF/NOTICE @@ -7,8 +7,8 @@ The Apache Software Foundation (http://www.apache.org/). This project bundles the following dependencies under the Apache Software License 2.0. (http://www.apache.org/licenses/LICENSE-2.0.txt) - com.fasterxml.jackson.core:jackson-annotations:2.21 -- com.fasterxml.jackson.core:jackson-core:2.21.3 -- com.fasterxml.jackson.core:jackson-databind:2.21.3 +- com.fasterxml.jackson.core:jackson-core:2.21.4 +- com.fasterxml.jackson.core:jackson-databind:2.21.4 - com.google.guava:guava:32.0.1-jre - commons-io:commons-io:2.15.1 - io.confluent:common-utils:7.5.3 diff --git a/flink-formats/flink-sql-avro/src/main/resources/META-INF/NOTICE b/flink-formats/flink-sql-avro/src/main/resources/META-INF/NOTICE index e32244b07abb65..8d900f35ce5e47 100644 --- a/flink-formats/flink-sql-avro/src/main/resources/META-INF/NOTICE +++ b/flink-formats/flink-sql-avro/src/main/resources/META-INF/NOTICE @@ -7,7 +7,7 @@ The Apache Software Foundation (http://www.apache.org/). This project bundles the following dependencies under the Apache Software License 2.0. (http://www.apache.org/licenses/LICENSE-2.0.txt) - org.apache.avro:avro:1.11.5 -- com.fasterxml.jackson.core:jackson-core:2.21.3 -- com.fasterxml.jackson.core:jackson-databind:2.21.3 +- com.fasterxml.jackson.core:jackson-core:2.21.4 +- com.fasterxml.jackson.core:jackson-databind:2.21.4 - com.fasterxml.jackson.core:jackson-annotations:2.21 - org.apache.commons:commons-compress:1.26.0 diff --git a/flink-kubernetes/src/main/resources/META-INF/NOTICE b/flink-kubernetes/src/main/resources/META-INF/NOTICE index 318ce6cd045dc8..eea4cfe5280d55 100644 --- a/flink-kubernetes/src/main/resources/META-INF/NOTICE +++ b/flink-kubernetes/src/main/resources/META-INF/NOTICE @@ -7,10 +7,10 @@ The Apache Software Foundation (http://www.apache.org/). This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt) - com.fasterxml.jackson.core:jackson-annotations:2.21 -- com.fasterxml.jackson.core:jackson-core:2.21.3 -- com.fasterxml.jackson.core:jackson-databind:2.21.3 -- com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:2.21.3 -- com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.21.3 +- com.fasterxml.jackson.core:jackson-core:2.21.4 +- com.fasterxml.jackson.core:jackson-databind:2.21.4 +- com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:2.21.4 +- com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.21.4 - com.squareup.okhttp3:logging-interceptor:3.14.9 - com.squareup.okhttp3:okhttp:3.14.9 - com.squareup.okio:okio:1.17.2 diff --git a/flink-models/flink-model-openai/src/main/resources/META-INF/NOTICE b/flink-models/flink-model-openai/src/main/resources/META-INF/NOTICE index f245bfdfa84eec..572fbb76e59546 100644 --- a/flink-models/flink-model-openai/src/main/resources/META-INF/NOTICE +++ b/flink-models/flink-model-openai/src/main/resources/META-INF/NOTICE @@ -7,11 +7,11 @@ The Apache Software Foundation (http://www.apache.org/). This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt) - com.fasterxml.jackson.core:jackson-annotations:2.21 -- com.fasterxml.jackson.core:jackson-core:2.21.3 -- com.fasterxml.jackson.core:jackson-databind:2.21.3 -- com.fasterxml.jackson.datatype:jackson-datatype-jdk8:2.21.3 -- com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.21.3 -- com.fasterxml.jackson.module:jackson-module-kotlin:2.21.3 +- com.fasterxml.jackson.core:jackson-core:2.21.4 +- com.fasterxml.jackson.core:jackson-databind:2.21.4 +- com.fasterxml.jackson.datatype:jackson-datatype-jdk8:2.21.4 +- com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.21.4 +- com.fasterxml.jackson.module:jackson-module-kotlin:2.21.4 - com.google.errorprone:error_prone_annotations:2.33.0 - com.openai:openai-java:1.6.1 - com.openai:openai-java-client-okhttp:1.6.1 diff --git a/flink-models/flink-model-triton/src/main/resources/META-INF/NOTICE b/flink-models/flink-model-triton/src/main/resources/META-INF/NOTICE index 9a789b1b238eeb..cb1537098eadce 100644 --- a/flink-models/flink-model-triton/src/main/resources/META-INF/NOTICE +++ b/flink-models/flink-model-triton/src/main/resources/META-INF/NOTICE @@ -7,8 +7,8 @@ The Apache Software Foundation (http://www.apache.org/). This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt) - com.fasterxml.jackson.core:jackson-annotations:2.21 -- com.fasterxml.jackson.core:jackson-core:2.21.3 -- com.fasterxml.jackson.core:jackson-databind:2.21.3 +- com.fasterxml.jackson.core:jackson-core:2.21.4 +- com.fasterxml.jackson.core:jackson-databind:2.21.4 - com.squareup.okhttp3:okhttp:4.12.0 - com.squareup.okio:okio:3.6.0 - com.squareup.okio:okio-jvm:3.6.0 diff --git a/flink-python/src/main/resources/META-INF/NOTICE b/flink-python/src/main/resources/META-INF/NOTICE index f8e52f6044bc37..af1e8232484208 100644 --- a/flink-python/src/main/resources/META-INF/NOTICE +++ b/flink-python/src/main/resources/META-INF/NOTICE @@ -7,9 +7,9 @@ The Apache Software Foundation (http://www.apache.org/). This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt) - com.fasterxml.jackson.core:jackson-annotations:2.21 -- com.fasterxml.jackson.core:jackson-core:2.21.3 -- com.fasterxml.jackson.core:jackson-databind:2.21.3 -- com.fasterxml.jackson.datatype:jackson-datatype-jdk8:2.21.3 +- com.fasterxml.jackson.core:jackson-core:2.21.4 +- com.fasterxml.jackson.core:jackson-databind:2.21.4 +- com.fasterxml.jackson.datatype:jackson-datatype-jdk8:2.21.4 - com.google.flatbuffers:flatbuffers-java:25.2.10 - joda-time:joda-time:2.5 - org.apache.arrow:arrow-format:19.0.0 diff --git a/pom.xml b/pom.xml index 1a02e56adf3434..d9409b6f9dfc95 100644 --- a/pom.xml +++ b/pom.xml @@ -151,7 +151,7 @@ under the License. 1.11.5 1.9.14.jdk17-redhat-00001 - 2.21.3 + 2.21.4 1.2.0 2.3.1 4.13.2 From b8b500328c45c372e55c129bfe001778daf21326 Mon Sep 17 00:00:00 2001 From: Purushottam Sinha Date: Wed, 8 Jul 2026 09:13:54 +0530 Subject: [PATCH 2/2] [FLINK-40071][build] Bump jackson-bom to 2.21.5 jackson-databind 2.21.4 still carried CVE-2026-54515, which had no released fix at the time. 2.21.5 is now released and fixes it (GHSA-5jmj-h7xm-6q6v: vulnerable range >= 2.19.0, < 2.21.5), so the 2.x line is now clear of all seven recently disclosed CVEs. Update the NOTICE files of the modules bundling non-shaded jackson. Generated-by: Claude Code (claude-fable-5) --- .../src/main/resources/META-INF/NOTICE | 2 +- .../src/main/resources/META-INF/NOTICE | 4 ++-- .../src/main/resources/META-INF/NOTICE | 8 ++++---- .../src/main/resources/META-INF/NOTICE | 6 +++--- .../src/main/resources/META-INF/NOTICE | 6 +++--- .../src/main/resources/META-INF/NOTICE | 4 ++-- .../flink-sql-avro/src/main/resources/META-INF/NOTICE | 4 ++-- flink-kubernetes/src/main/resources/META-INF/NOTICE | 8 ++++---- .../src/main/resources/META-INF/NOTICE | 10 +++++----- .../src/main/resources/META-INF/NOTICE | 4 ++-- flink-python/src/main/resources/META-INF/NOTICE | 6 +++--- pom.xml | 2 +- 12 files changed, 32 insertions(+), 32 deletions(-) diff --git a/flink-filesystems/flink-azure-fs-hadoop/src/main/resources/META-INF/NOTICE b/flink-filesystems/flink-azure-fs-hadoop/src/main/resources/META-INF/NOTICE index 7ac8dbb15ea9ac..cb00ef496257bc 100644 --- a/flink-filesystems/flink-azure-fs-hadoop/src/main/resources/META-INF/NOTICE +++ b/flink-filesystems/flink-azure-fs-hadoop/src/main/resources/META-INF/NOTICE @@ -6,7 +6,7 @@ The Apache Software Foundation (http://www.apache.org/). This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt) -- com.fasterxml.jackson.core:jackson-core:2.21.4 +- com.fasterxml.jackson.core:jackson-core:2.21.5 - com.google.guava:guava:20.0 - commons-codec:commons-codec:1.15 - commons-logging:commons-logging:1.1.3 diff --git a/flink-filesystems/flink-fs-hadoop-shaded/src/main/resources/META-INF/NOTICE b/flink-filesystems/flink-fs-hadoop-shaded/src/main/resources/META-INF/NOTICE index 4ce56d8ddbd3c1..e39721c1da0cf9 100644 --- a/flink-filesystems/flink-fs-hadoop-shaded/src/main/resources/META-INF/NOTICE +++ b/flink-filesystems/flink-fs-hadoop-shaded/src/main/resources/META-INF/NOTICE @@ -7,8 +7,8 @@ The Apache Software Foundation (http://www.apache.org/). This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt) - com.fasterxml.jackson.core:jackson-annotations:2.21 -- com.fasterxml.jackson.core:jackson-core:2.21.4 -- com.fasterxml.jackson.core:jackson-databind:2.21.4 +- com.fasterxml.jackson.core:jackson-core:2.21.5 +- com.fasterxml.jackson.core:jackson-databind:2.21.5 - com.fasterxml.woodstox:woodstox-core:5.3.0 - com.google.guava:failureaccess:1.0 - com.google.guava:guava:27.0-jre diff --git a/flink-filesystems/flink-gs-fs-hadoop/src/main/resources/META-INF/NOTICE b/flink-filesystems/flink-gs-fs-hadoop/src/main/resources/META-INF/NOTICE index 81a66d61af80c3..eb7a3462bf7b23 100644 --- a/flink-filesystems/flink-gs-fs-hadoop/src/main/resources/META-INF/NOTICE +++ b/flink-filesystems/flink-gs-fs-hadoop/src/main/resources/META-INF/NOTICE @@ -7,10 +7,10 @@ The Apache Software Foundation (http://www.apache.org/). This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt) - com.fasterxml.jackson.core:jackson-annotations:2.21 -- com.fasterxml.jackson.core:jackson-core:2.21.4 -- com.fasterxml.jackson.core:jackson-databind:2.21.4 -- com.fasterxml.jackson.dataformat:jackson-dataformat-xml:2.21.4 -- com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.21.4 +- com.fasterxml.jackson.core:jackson-core:2.21.5 +- com.fasterxml.jackson.core:jackson-databind:2.21.5 +- com.fasterxml.jackson.dataformat:jackson-dataformat-xml:2.21.5 +- com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.21.5 - com.fasterxml.woodstox:woodstox-core:7.0.0 - com.google.android:annotations:4.1.1.4 - com.google.api-client:google-api-client-jackson2:2.0.1 diff --git a/flink-filesystems/flink-s3-fs-hadoop/src/main/resources/META-INF/NOTICE b/flink-filesystems/flink-s3-fs-hadoop/src/main/resources/META-INF/NOTICE index be45a35767aa6c..3bbcbf0461c8fe 100644 --- a/flink-filesystems/flink-s3-fs-hadoop/src/main/resources/META-INF/NOTICE +++ b/flink-filesystems/flink-s3-fs-hadoop/src/main/resources/META-INF/NOTICE @@ -10,9 +10,9 @@ This project bundles the following dependencies under the Apache Software Licens - com.amazonaws:aws-java-sdk-sts:1.12.779 - com.amazonaws:jmespath-java:1.12.779 - com.fasterxml.jackson.core:jackson-annotations:2.21 -- com.fasterxml.jackson.core:jackson-core:2.21.4 -- com.fasterxml.jackson.core:jackson-databind:2.21.4 -- com.fasterxml.jackson.dataformat:jackson-dataformat-cbor:2.21.4 +- com.fasterxml.jackson.core:jackson-core:2.21.5 +- com.fasterxml.jackson.core:jackson-databind:2.21.5 +- com.fasterxml.jackson.dataformat:jackson-dataformat-cbor:2.21.5 - com.fasterxml.woodstox:woodstox-core:5.3.0 - com.google.guava:failureaccess:1.0 - com.google.guava:guava:27.0-jre diff --git a/flink-filesystems/flink-s3-fs-presto/src/main/resources/META-INF/NOTICE b/flink-filesystems/flink-s3-fs-presto/src/main/resources/META-INF/NOTICE index fb3731b993da15..dad2128c161be7 100644 --- a/flink-filesystems/flink-s3-fs-presto/src/main/resources/META-INF/NOTICE +++ b/flink-filesystems/flink-s3-fs-presto/src/main/resources/META-INF/NOTICE @@ -23,9 +23,9 @@ This project bundles the following dependencies under the Apache Software Licens - com.facebook.presto:presto-hive-metastore:0.294 - com.facebook.presto:presto-hdfs-core:0.294 - com.fasterxml.jackson.core:jackson-annotations:2.21 -- com.fasterxml.jackson.core:jackson-core:2.21.4 -- com.fasterxml.jackson.core:jackson-databind:2.21.4 -- com.fasterxml.jackson.dataformat:jackson-dataformat-cbor:2.21.4 +- com.fasterxml.jackson.core:jackson-core:2.21.5 +- com.fasterxml.jackson.core:jackson-databind:2.21.5 +- com.fasterxml.jackson.dataformat:jackson-dataformat-cbor:2.21.5 - com.fasterxml.woodstox:woodstox-core:5.3.0 - com.google.guava:guava:32.1.0-jre - com.google.guava:failureaccess:1.0.1 diff --git a/flink-formats/flink-sql-avro-confluent-registry/src/main/resources/META-INF/NOTICE b/flink-formats/flink-sql-avro-confluent-registry/src/main/resources/META-INF/NOTICE index 8147ca2e5861e3..bb4949a7184cfe 100644 --- a/flink-formats/flink-sql-avro-confluent-registry/src/main/resources/META-INF/NOTICE +++ b/flink-formats/flink-sql-avro-confluent-registry/src/main/resources/META-INF/NOTICE @@ -7,8 +7,8 @@ The Apache Software Foundation (http://www.apache.org/). This project bundles the following dependencies under the Apache Software License 2.0. (http://www.apache.org/licenses/LICENSE-2.0.txt) - com.fasterxml.jackson.core:jackson-annotations:2.21 -- com.fasterxml.jackson.core:jackson-core:2.21.4 -- com.fasterxml.jackson.core:jackson-databind:2.21.4 +- com.fasterxml.jackson.core:jackson-core:2.21.5 +- com.fasterxml.jackson.core:jackson-databind:2.21.5 - com.google.guava:guava:32.0.1-jre - commons-io:commons-io:2.15.1 - io.confluent:common-utils:7.5.3 diff --git a/flink-formats/flink-sql-avro/src/main/resources/META-INF/NOTICE b/flink-formats/flink-sql-avro/src/main/resources/META-INF/NOTICE index 8d900f35ce5e47..108e8e6fe92505 100644 --- a/flink-formats/flink-sql-avro/src/main/resources/META-INF/NOTICE +++ b/flink-formats/flink-sql-avro/src/main/resources/META-INF/NOTICE @@ -7,7 +7,7 @@ The Apache Software Foundation (http://www.apache.org/). This project bundles the following dependencies under the Apache Software License 2.0. (http://www.apache.org/licenses/LICENSE-2.0.txt) - org.apache.avro:avro:1.11.5 -- com.fasterxml.jackson.core:jackson-core:2.21.4 -- com.fasterxml.jackson.core:jackson-databind:2.21.4 +- com.fasterxml.jackson.core:jackson-core:2.21.5 +- com.fasterxml.jackson.core:jackson-databind:2.21.5 - com.fasterxml.jackson.core:jackson-annotations:2.21 - org.apache.commons:commons-compress:1.26.0 diff --git a/flink-kubernetes/src/main/resources/META-INF/NOTICE b/flink-kubernetes/src/main/resources/META-INF/NOTICE index eea4cfe5280d55..20fe68164c5ea2 100644 --- a/flink-kubernetes/src/main/resources/META-INF/NOTICE +++ b/flink-kubernetes/src/main/resources/META-INF/NOTICE @@ -7,10 +7,10 @@ The Apache Software Foundation (http://www.apache.org/). This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt) - com.fasterxml.jackson.core:jackson-annotations:2.21 -- com.fasterxml.jackson.core:jackson-core:2.21.4 -- com.fasterxml.jackson.core:jackson-databind:2.21.4 -- com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:2.21.4 -- com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.21.4 +- com.fasterxml.jackson.core:jackson-core:2.21.5 +- com.fasterxml.jackson.core:jackson-databind:2.21.5 +- com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:2.21.5 +- com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.21.5 - com.squareup.okhttp3:logging-interceptor:3.14.9 - com.squareup.okhttp3:okhttp:3.14.9 - com.squareup.okio:okio:1.17.2 diff --git a/flink-models/flink-model-openai/src/main/resources/META-INF/NOTICE b/flink-models/flink-model-openai/src/main/resources/META-INF/NOTICE index 572fbb76e59546..8b93b08bf29332 100644 --- a/flink-models/flink-model-openai/src/main/resources/META-INF/NOTICE +++ b/flink-models/flink-model-openai/src/main/resources/META-INF/NOTICE @@ -7,11 +7,11 @@ The Apache Software Foundation (http://www.apache.org/). This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt) - com.fasterxml.jackson.core:jackson-annotations:2.21 -- com.fasterxml.jackson.core:jackson-core:2.21.4 -- com.fasterxml.jackson.core:jackson-databind:2.21.4 -- com.fasterxml.jackson.datatype:jackson-datatype-jdk8:2.21.4 -- com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.21.4 -- com.fasterxml.jackson.module:jackson-module-kotlin:2.21.4 +- com.fasterxml.jackson.core:jackson-core:2.21.5 +- com.fasterxml.jackson.core:jackson-databind:2.21.5 +- com.fasterxml.jackson.datatype:jackson-datatype-jdk8:2.21.5 +- com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.21.5 +- com.fasterxml.jackson.module:jackson-module-kotlin:2.21.5 - com.google.errorprone:error_prone_annotations:2.33.0 - com.openai:openai-java:1.6.1 - com.openai:openai-java-client-okhttp:1.6.1 diff --git a/flink-models/flink-model-triton/src/main/resources/META-INF/NOTICE b/flink-models/flink-model-triton/src/main/resources/META-INF/NOTICE index cb1537098eadce..398c3dc68e83e0 100644 --- a/flink-models/flink-model-triton/src/main/resources/META-INF/NOTICE +++ b/flink-models/flink-model-triton/src/main/resources/META-INF/NOTICE @@ -7,8 +7,8 @@ The Apache Software Foundation (http://www.apache.org/). This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt) - com.fasterxml.jackson.core:jackson-annotations:2.21 -- com.fasterxml.jackson.core:jackson-core:2.21.4 -- com.fasterxml.jackson.core:jackson-databind:2.21.4 +- com.fasterxml.jackson.core:jackson-core:2.21.5 +- com.fasterxml.jackson.core:jackson-databind:2.21.5 - com.squareup.okhttp3:okhttp:4.12.0 - com.squareup.okio:okio:3.6.0 - com.squareup.okio:okio-jvm:3.6.0 diff --git a/flink-python/src/main/resources/META-INF/NOTICE b/flink-python/src/main/resources/META-INF/NOTICE index af1e8232484208..084d980bb4b07d 100644 --- a/flink-python/src/main/resources/META-INF/NOTICE +++ b/flink-python/src/main/resources/META-INF/NOTICE @@ -7,9 +7,9 @@ The Apache Software Foundation (http://www.apache.org/). This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt) - com.fasterxml.jackson.core:jackson-annotations:2.21 -- com.fasterxml.jackson.core:jackson-core:2.21.4 -- com.fasterxml.jackson.core:jackson-databind:2.21.4 -- com.fasterxml.jackson.datatype:jackson-datatype-jdk8:2.21.4 +- com.fasterxml.jackson.core:jackson-core:2.21.5 +- com.fasterxml.jackson.core:jackson-databind:2.21.5 +- com.fasterxml.jackson.datatype:jackson-datatype-jdk8:2.21.5 - com.google.flatbuffers:flatbuffers-java:25.2.10 - joda-time:joda-time:2.5 - org.apache.arrow:arrow-format:19.0.0 diff --git a/pom.xml b/pom.xml index d9409b6f9dfc95..e4d7911faaadd4 100644 --- a/pom.xml +++ b/pom.xml @@ -151,7 +151,7 @@ under the License. 1.11.5 1.9.14.jdk17-redhat-00001 - 2.21.4 + 2.21.5 1.2.0 2.3.1 4.13.2