NIFI-14112 bumped aws, gcp, azure and many other libraries for hygien…

…e or reported vulns such as Mina - ch.qos.logback 1.5.14 1.5.15 - com.aayushatharva.brotli4j 1.17.0 1.18.0 - com.hierynomus smbj 0.13.0. 0.14.0 - com.networknt json-schema-validator. 1.5.2 1.5.4 - com.nimbusds nimbus-jose-jwt 9.47 9.48 - com.rabbitmq amqp-client 5.23.0 5.24.0 - io.projectreactor.netty 1.2.0 1.2.1 - org.apache.lucene 10.0.0 10.1.0 - org.elasticsearch.client 8.16.1 8.17.0 - software.amazon.awssdk 2.29.35 2.29.40 - com.github.docker-java 3.4.0 3.4.1 - com.google.apis google-api-services-drive v3-rev20241027-2.0.0 v3-rev20241206-2.0.0 - com.hivemq 1.3.3 1.3.4 - com.unboundid 7.0.1 7.0.2 - io.projectreactor reactor-core/test 3.7.0 3.7.1 - net.java.dev.jna 5.15.0 5.16.0 - net.sf.py4j py4j 0.10.9.7 0.10.9.8 - org.apache.camel 4.8.1 4.8.2 - org.apache.mina 2.2.3 2.2.4 - org.eclipse.jgit 7.0.0.202409031743-r 7.1.0.202411261347-r - org.flywaydb 11.0.0 11.1.0 - org.jline 3.27.1 3.28.0 - org.springframework.boot 3.3.6 3.4.1 - org.springframework.integration 6.4.0 6.4.1 - org.springframework.retry 2.0.10 2.0.11 - com.google.cloud libraries-bom 26.50.0 26.52.0 - com.azure azure-sdk-bom 1.2.29 1.2.30 - spring-data-redis 3.4.0 3.4.1 - com.google.guava 33.3.1-jre 33.4.0-jre Signed-off-by: Pierre Villard <[email protected]> This closes #9597.
apache · Dec 27, 2024 · 2f73167 · 2f73167
1 parent b6bc6bf
commit 2f73167
Show file tree

Hide file tree

Showing 43 changed files with 61 additions and 61 deletions.
diff --git a/nifi-code-coverage/pom.xml b/nifi-code-coverage/pom.xml
@@ -89,7 +89,7 @@
             <dependency>
                 <groupId>io.projectreactor.netty</groupId>
                 <artifactId>reactor-netty-http</artifactId>
-                <version>1.2.0</version>
+                <version>1.2.1</version>
             </dependency>
             <!-- SSHD from Registry and other modules -->
             <dependency>

diff --git a/nifi-commons/pom.xml b/nifi-commons/pom.xml
@@ -72,7 +72,7 @@
     </modules>
     <properties>
         <gcp.sdk.version>26.38.0</gcp.sdk.version>
-        <guava.version>33.3.1-jre</guava.version>
+        <guava.version>33.4.0-jre</guava.version>
     </properties>
     <dependencyManagement>
         <dependencies>

diff --git a/nifi-extension-bundles/nifi-amqp-bundle/nifi-amqp-processors/pom.xml b/nifi-extension-bundles/nifi-amqp-bundle/nifi-amqp-processors/pom.xml
@@ -20,7 +20,7 @@ language governing permissions and limitations under the License. -->
     <packaging>jar</packaging>
 
     <properties>
-        <amqp-client.version>5.23.0</amqp-client.version>
+        <amqp-client.version>5.24.0</amqp-client.version>
     </properties>
 
     <dependencies>

diff --git a/nifi-extension-bundles/nifi-aws-bundle/pom.xml b/nifi-extension-bundles/nifi-aws-bundle/pom.xml
@@ -47,7 +47,7 @@
             <dependency>
                 <groupId>com.google.guava</groupId>
                 <artifactId>guava</artifactId>
-                <version>33.3.1-jre</version>
+                <version>33.4.0-jre</version>
             </dependency>
             <dependency>
                 <groupId>org.apache.nifi</groupId>

diff --git a/nifi-extension-bundles/nifi-azure-bundle/nifi-azure-processors/pom.xml b/nifi-extension-bundles/nifi-azure-bundle/nifi-azure-processors/pom.xml
@@ -111,7 +111,7 @@
         <dependency>
             <groupId>io.projectreactor</groupId>
             <artifactId>reactor-core</artifactId>
-            <version>3.7.0</version>
+            <version>3.7.1</version>
         </dependency>
         <dependency>
             <groupId>com.azure</groupId>
@@ -191,7 +191,7 @@
         <dependency>
             <groupId>io.projectreactor</groupId>
             <artifactId>reactor-test</artifactId>
-            <version>3.7.0</version>
+            <version>3.7.1</version>
             <scope>test</scope>
         </dependency>
     </dependencies>

diff --git a/nifi-extension-bundles/nifi-azure-bundle/pom.xml b/nifi-extension-bundles/nifi-azure-bundle/pom.xml
@@ -28,7 +28,7 @@
 
     <properties>
         <!-- when changing the Azure SDK version, also update msal4j to the version that is required by azure-identity -->
-        <azure.sdk.bom.version>1.2.29</azure.sdk.bom.version>
+        <azure.sdk.bom.version>1.2.30</azure.sdk.bom.version>
         <msal4j.version>1.17.2</msal4j.version>
         <qpid.proton.version>0.34.1</qpid.proton.version>
     </properties>
@@ -55,7 +55,7 @@
             <dependency>
                 <groupId>com.google.guava</groupId>
                 <artifactId>guava</artifactId>
-                <version>33.3.1-jre</version>
+                <version>33.4.0-jre</version>
             </dependency>
             <!-- Override Apache Qpid Proton J for Azure EventHubs to resolve PROTON-2347 -->
             <dependency>
@@ -73,7 +73,7 @@
             <dependency>
                 <groupId>com.nimbusds</groupId>
                 <artifactId>nimbus-jose-jwt</artifactId>
-                <version>9.47</version>
+                <version>9.48</version>
             </dependency>
         </dependencies>
     </dependencyManagement>

diff --git a/nifi-extension-bundles/nifi-compress-bundle/nifi-compress-processors/pom.xml b/nifi-extension-bundles/nifi-compress-bundle/nifi-compress-processors/pom.xml
@@ -43,7 +43,7 @@ language governing permissions and limitations under the License. -->
         <dependency>
             <groupId>com.aayushatharva.brotli4j</groupId>
             <artifactId>brotli4j</artifactId>
-            <version>1.17.0</version>
+            <version>1.18.0</version>
         </dependency>
         <dependency>
             <groupId>org.tukaani</groupId>

diff --git a/nifi-extension-bundles/nifi-elasticsearch-bundle/nifi-elasticsearch-test-utils/pom.xml b/nifi-extension-bundles/nifi-elasticsearch-bundle/nifi-elasticsearch-test-utils/pom.xml
@@ -34,7 +34,7 @@ language governing permissions and limitations under the License. -->
         <dependency>
             <groupId>com.github.docker-java</groupId>
             <artifactId>docker-java-api</artifactId>
-            <version>3.4.0</version>
+            <version>3.4.1</version>
         </dependency>
         <dependency>
             <groupId>org.apache.httpcomponents</groupId>

diff --git a/nifi-extension-bundles/nifi-elasticsearch-bundle/pom.xml b/nifi-extension-bundles/nifi-elasticsearch-bundle/pom.xml
@@ -33,7 +33,7 @@ language governing permissions and limitations under the License. -->
     </modules>
 
     <properties>
-        <elasticsearch.client.version>8.16.1</elasticsearch.client.version>
+        <elasticsearch.client.version>8.17.0</elasticsearch.client.version>
     </properties>
 
     <dependencyManagement>

diff --git a/nifi-extension-bundles/nifi-email-bundle/nifi-email-processors/pom.xml b/nifi-extension-bundles/nifi-email-bundle/nifi-email-processors/pom.xml
@@ -25,7 +25,7 @@
     <artifactId>nifi-email-processors</artifactId>
     <packaging>jar</packaging>
     <properties>
-        <spring.integration.version>6.4.0</spring.integration.version>
+        <spring.integration.version>6.4.1</spring.integration.version>
     </properties>
 
     <dependencies>

diff --git a/nifi-extension-bundles/nifi-evtx-bundle/nifi-evtx-processors/pom.xml b/nifi-extension-bundles/nifi-evtx-bundle/nifi-evtx-processors/pom.xml
@@ -31,7 +31,7 @@
         <dependency>
             <groupId>com.google.guava</groupId>
             <artifactId>guava</artifactId>
-            <version>33.3.1-jre</version>
+            <version>33.4.0-jre</version>
         </dependency>
         <dependency>
             <groupId>org.apache.nifi</groupId>

diff --git a/nifi-extension-bundles/nifi-extension-utils/nifi-hadoop-utils/pom.xml b/nifi-extension-bundles/nifi-extension-utils/nifi-hadoop-utils/pom.xml
@@ -114,7 +114,7 @@
         <dependency>
             <groupId>com.nimbusds</groupId>
             <artifactId>nimbus-jose-jwt</artifactId>
-            <version>9.47</version>
+            <version>9.48</version>
         </dependency>
     </dependencies>
     <build>

diff --git a/nifi-extension-bundles/nifi-gcp-bundle/nifi-gcp-processors/pom.xml b/nifi-extension-bundles/nifi-gcp-bundle/nifi-gcp-processors/pom.xml
@@ -127,7 +127,7 @@
         <dependency>
             <groupId>com.google.apis</groupId>
             <artifactId>google-api-services-drive</artifactId>
-            <version>v3-rev20241027-2.0.0</version>
+            <version>v3-rev20241206-2.0.0</version>
         </dependency>
         <dependency>
             <groupId>com.tdunning</groupId>

diff --git a/nifi-extension-bundles/nifi-gcp-bundle/pom.xml b/nifi-extension-bundles/nifi-gcp-bundle/pom.xml
@@ -25,7 +25,7 @@
     <packaging>pom</packaging>
 
     <properties>
-        <google.libraries.version>26.50.0</google.libraries.version>
+        <google.libraries.version>26.52.0</google.libraries.version>
     </properties>
 
     <dependencyManagement>
@@ -41,7 +41,7 @@
             <dependency>
                 <groupId>com.google.guava</groupId>
                 <artifactId>guava</artifactId>
-                <version>33.3.1-jre</version>
+                <version>33.4.0-jre</version>
             </dependency>
         </dependencies>
     </dependencyManagement>

diff --git a/nifi-extension-bundles/nifi-graph-bundle/nifi-graph-test-clients/pom.xml b/nifi-extension-bundles/nifi-graph-bundle/nifi-graph-test-clients/pom.xml
@@ -27,8 +27,8 @@
     <properties>
         <gremlin.version>3.7.3</gremlin.version>
         <janusgraph.version>1.2.0-20241120-125614.80ef1d9</janusgraph.version>
-        <guava.version>33.3.1-jre</guava.version>
-        <amqp-client.version>5.23.0</amqp-client.version>
+        <guava.version>33.4.0-jre</guava.version>
+        <amqp-client.version>5.24.0</amqp-client.version>
     </properties>
     <dependencyManagement>
         <dependencies>

diff --git a/nifi-extension-bundles/nifi-hadoop-bundle/nifi-hdfs-processors/pom.xml b/nifi-extension-bundles/nifi-hadoop-bundle/nifi-hdfs-processors/pom.xml
@@ -47,7 +47,7 @@
         <dependency>
             <groupId>com.google.guava</groupId>
             <artifactId>guava</artifactId>
-            <version>33.3.1-jre</version>
+            <version>33.4.0-jre</version>
         </dependency>
         <dependency>
             <groupId>org.apache.nifi</groupId>
@@ -166,7 +166,7 @@
         <dependency>
             <groupId>com.nimbusds</groupId>
             <artifactId>nimbus-jose-jwt</artifactId>
-            <version>9.47</version>
+            <version>9.48</version>
         </dependency>
     </dependencies>
 

diff --git a/nifi-extension-bundles/nifi-hadoop-libraries-bundle/pom.xml b/nifi-extension-bundles/nifi-hadoop-libraries-bundle/pom.xml
@@ -37,13 +37,13 @@
             <dependency>
                 <groupId>com.nimbusds</groupId>
                 <artifactId>nimbus-jose-jwt</artifactId>
-                <version>9.47</version>
+                <version>9.48</version>
             </dependency>
             <!-- Override Guava 27 -->
             <dependency>
                 <groupId>com.google.guava</groupId>
                 <artifactId>guava</artifactId>
-                <version>33.3.1-jre</version>
+                <version>33.4.0-jre</version>
             </dependency>
         </dependencies>
     </dependencyManagement>

diff --git a/nifi-extension-bundles/nifi-mqtt-bundle/nifi-mqtt-processors/pom.xml b/nifi-extension-bundles/nifi-mqtt-bundle/nifi-mqtt-processors/pom.xml
@@ -59,7 +59,7 @@
         <dependency>
             <groupId>com.hivemq</groupId>
             <artifactId>hivemq-mqtt-client</artifactId>
-            <version>1.3.3</version>
+            <version>1.3.4</version>
         </dependency>
         <dependency>
             <groupId>org.apache.commons</groupId>

diff --git a/nifi-extension-bundles/nifi-opentelemetry-bundle/pom.xml b/nifi-extension-bundles/nifi-opentelemetry-bundle/pom.xml
@@ -40,7 +40,7 @@
             <dependency>
                 <groupId>com.google.guava</groupId>
                 <artifactId>guava</artifactId>
-                <version>33.3.1-jre</version>
+                <version>33.4.0-jre</version>
             </dependency>
         </dependencies>
     </dependencyManagement>

diff --git a/nifi-extension-bundles/nifi-parquet-bundle/nifi-parquet-processors/pom.xml b/nifi-extension-bundles/nifi-parquet-bundle/nifi-parquet-processors/pom.xml
@@ -71,7 +71,7 @@
         <dependency>
             <groupId>com.nimbusds</groupId>
             <artifactId>nimbus-jose-jwt</artifactId>
-            <version>9.47</version>
+            <version>9.48</version>
         </dependency>
         <dependency>
             <groupId>org.bouncycastle</groupId>

diff --git a/nifi-extension-bundles/nifi-protobuf-bundle/nifi-protobuf-services/pom.xml b/nifi-extension-bundles/nifi-protobuf-bundle/nifi-protobuf-services/pom.xml
@@ -56,7 +56,7 @@
         <dependency>
             <groupId>com.google.guava</groupId>
             <artifactId>guava</artifactId>
-            <version>33.3.1-jre</version>
+            <version>33.4.0-jre</version>
         </dependency>
         <dependency>
             <groupId>com.google.protobuf</groupId>

diff --git a/nifi-extension-bundles/nifi-protobuf-bundle/pom.xml b/nifi-extension-bundles/nifi-protobuf-bundle/pom.xml
@@ -37,7 +37,7 @@
             <dependency>
                 <groupId>com.google.guava</groupId>
                 <artifactId>guava</artifactId>
-                <version>33.3.1-jre</version>
+                <version>33.4.0-jre</version>
             </dependency>
         </dependencies>
     </dependencyManagement>

diff --git a/nifi-extension-bundles/nifi-py4j-extension-bundle/nifi-py4j-bridge/pom.xml b/nifi-extension-bundles/nifi-py4j-extension-bundle/nifi-py4j-bridge/pom.xml
@@ -36,7 +36,7 @@
         <dependency>
             <groupId>net.sf.py4j</groupId>
             <artifactId>py4j</artifactId>
-            <version>0.10.9.7</version>
+            <version>0.10.9.8</version>
         </dependency>
         <!-- While we in general do not want direct dependency on logging implementations
         in this case we do have a coupling to the logback-classic/logback-core libraries

diff --git a/nifi-extension-bundles/nifi-redis-bundle/pom.xml b/nifi-extension-bundles/nifi-redis-bundle/pom.xml
@@ -25,7 +25,7 @@
     <packaging>pom</packaging>
 
     <properties>
-        <spring.data.redis.version>3.4.0</spring.data.redis.version>
+        <spring.data.redis.version>3.4.1</spring.data.redis.version>
         <jedis.version>5.2.0</jedis.version>
     </properties>
 

diff --git a/nifi-extension-bundles/nifi-salesforce-bundle/nifi-salesforce-processors/pom.xml b/nifi-extension-bundles/nifi-salesforce-bundle/nifi-salesforce-processors/pom.xml
@@ -42,7 +42,7 @@
         <dependency>
             <groupId>org.apache.camel</groupId>
             <artifactId>camel-salesforce</artifactId>
-            <version>4.8.1</version>
+            <version>4.8.2</version>
             <exclusions>
                 <exclusion>
                     <groupId>*</groupId>

diff --git a/nifi-extension-bundles/nifi-smb-bundle/pom.xml b/nifi-extension-bundles/nifi-smb-bundle/pom.xml
@@ -39,7 +39,7 @@
             <dependency>
                 <groupId>com.hierynomus</groupId>
                 <artifactId>smbj</artifactId>
-                <version>0.13.0</version>
+                <version>0.14.0</version>
                 <exclusions>
                     <exclusion>
                         <groupId>org.bouncycastle</groupId>

diff --git a/nifi-extension-bundles/nifi-sql-reporting-bundle/pom.xml b/nifi-extension-bundles/nifi-sql-reporting-bundle/pom.xml
@@ -23,7 +23,7 @@
     <artifactId>nifi-sql-reporting-bundle</artifactId>
     <packaging>pom</packaging>
     <properties>
-        <guava.version>33.3.1-jre</guava.version>
+        <guava.version>33.4.0-jre</guava.version>
     </properties>
     <modules>
         <module>nifi-sql-reporting-tasks</module>

diff --git a/nifi-extension-bundles/nifi-standard-bundle/nifi-standard-content-viewer/pom.xml b/nifi-extension-bundles/nifi-standard-bundle/nifi-standard-content-viewer/pom.xml
@@ -26,7 +26,7 @@
     <artifactId>nifi-standard-content-viewer</artifactId>
     <packaging>war</packaging>
     <properties>
-        <spring.boot.version>3.4.0</spring.boot.version>
+        <spring.boot.version>3.4.1</spring.boot.version>
         <standard-content-viewer.ui.working.dir>${project.build.directory}/standard-content-viewer-ui-working-directory</standard-content-viewer.ui.working.dir>
     </properties>
     <dependencies>

diff --git a/nifi-extension-bundles/nifi-standard-bundle/nifi-standard-processors/pom.xml b/nifi-extension-bundles/nifi-standard-bundle/nifi-standard-processors/pom.xml
@@ -27,7 +27,7 @@
         <dependency>
             <groupId>com.google.guava</groupId>
             <artifactId>guava</artifactId>
-            <version>33.3.1-jre</version>
+            <version>33.4.0-jre</version>
         </dependency>
         <dependency>
             <groupId>com.google.code.findbugs</groupId>
@@ -116,7 +116,7 @@
         <dependency>
             <groupId>org.apache.mina</groupId>
             <artifactId>mina-core</artifactId>
-            <version>2.2.3</version>
+            <version>2.2.4</version>
         </dependency>
         <dependency>
             <groupId>org.opentest4j</groupId>
@@ -353,7 +353,7 @@
         <dependency>
             <groupId>com.aayushatharva.brotli4j</groupId>
             <artifactId>brotli4j</artifactId>
-            <version>1.17.0</version>
+            <version>1.18.0</version>
         </dependency>
         <dependency>
             <groupId>org.tukaani</groupId>

diff --git a/nifi-extension-bundles/nifi-standard-bundle/pom.xml b/nifi-extension-bundles/nifi-standard-bundle/pom.xml
@@ -102,7 +102,7 @@
             <dependency>
                 <groupId>com.aayushatharva.brotli4j</groupId>
                 <artifactId>brotli4j</artifactId>
-                <version>1.17.0</version>
+                <version>1.18.0</version>
             </dependency>
             <dependency>
                 <groupId>org.tukaani</groupId>
@@ -221,12 +221,12 @@
             <dependency>
                 <groupId>com.google.guava</groupId>
                 <artifactId>guava</artifactId>
-                <version>33.3.1-jre</version>
+                <version>33.4.0-jre</version>
             </dependency>
             <dependency>
                 <groupId>com.networknt</groupId>
                 <artifactId>json-schema-validator</artifactId>
-                <version>1.5.2</version>
+                <version>1.5.4</version>
             </dependency>
         </dependencies>
     </dependencyManagement>

diff --git a/...s/nifi-standard-services/nifi-hadoop-dbcp-service-bundle/nifi-hadoop-dbcp-service/pom.xml b/...s/nifi-standard-services/nifi-hadoop-dbcp-service-bundle/nifi-hadoop-dbcp-service/pom.xml
@@ -92,7 +92,7 @@
         <dependency>
             <groupId>com.nimbusds</groupId>
             <artifactId>nimbus-jose-jwt</artifactId>
-            <version>9.47</version>
+            <version>9.48</version>
         </dependency>
     </dependencies>
     <build>

diff --git a/...extension-bundles/nifi-windows-event-log-bundle/nifi-windows-event-log-processors/pom.xml b/...extension-bundles/nifi-windows-event-log-bundle/nifi-windows-event-log-processors/pom.xml
@@ -21,7 +21,7 @@ language governing permissions and limitations under the License. -->
     <packaging>jar</packaging>
 
     <properties>
-        <jna.version>5.15.0</jna.version>
+        <jna.version>5.16.0</jna.version>
         <javassist.version>3.30.2-GA</javassist.version>
     </properties>
 

diff --git a/.../nifi-framework-extensions/nifi-ldap-iaa-providers-bundle/nifi-ldap-iaa-providers/pom.xml b/.../nifi-framework-extensions/nifi-ldap-iaa-providers-bundle/nifi-ldap-iaa-providers/pom.xml
@@ -88,7 +88,7 @@
         <dependency>
             <groupId>com.unboundid</groupId>
             <artifactId>unboundid-ldapsdk</artifactId>
-            <version>7.0.1</version>
+            <version>7.0.2</version>
             <scope>test</scope>
         </dependency>
         <dependency>

diff --git a/nifi-framework-bundle/nifi-framework-extensions/nifi-provenance-repository-bundle/pom.xml b/nifi-framework-bundle/nifi-framework-extensions/nifi-provenance-repository-bundle/pom.xml
@@ -27,7 +27,7 @@
         <module>nifi-provenance-repository-nar</module>
     </modules>
     <properties>
-        <lucene.version>10.0.0</lucene.version>
+        <lucene.version>10.1.0</lucene.version>
     </properties>
     <dependencyManagement>
         <dependencies>