This release fine-tunes the needed dependencies replacing haddop-client by hadoop-client-api at compile time and
hadoop-client-runtime and runtime. hadoop-client pulled many vulnerabilities that were not needed like netty
Security
- #81: Fix vulnerability CVE-2025-25193 in
io.netty:netty-common:jar:4.1.115.Final:runtime
Dependency Updates
Compile Dependency Updates
- Removed
dnsjava:dnsjava:3.6.2 - Removed
org.apache.avro:avro:1.12.0 - Removed
org.apache.commons:commons-configuration2:2.11.0 - Added
org.apache.hadoop:hadoop-client-api:3.4.1 - Removed
org.apache.hadoop:hadoop-client:3.4.1 - Updated
org.apache.parquet:parquet-hadoop:1.14.4to1.15.0 - Updated
org.scala-lang:scala-library:2.13.15to2.13.16 - Added
org.slf4j:slf4j-api:1.7.36
Runtime Dependency Updates
- Removed
io.netty:netty-transport-native-epoll:4.1.115.Final - Added
org.apache.hadoop:hadoop-client-runtime:3.4.1 - Added
org.slf4j:jcl-over-slf4j:1.7.36
Test Dependency Updates
- Updated
nl.jqno.equalsverifier:equalsverifier:3.17.3to3.19 - Updated
org.junit.jupiter:junit-jupiter:5.11.3to5.11.4 - Updated
org.mockito:mockito-core:5.14.2to5.15.2 - Updated
org.mockito:mockito-junit-jupiter:5.14.2to5.15.2 - Added
org.slf4j:slf4j-jdk14:1.7.36
Plugin Dependency Updates
- Updated
com.exasol:project-keeper-maven-plugin:4.4.0to4.5.0 - Updated
org.apache.maven.plugins:maven-deploy-plugin:3.1.2to3.1.3 - Updated
org.apache.maven.plugins:maven-failsafe-plugin:3.5.1to3.5.2 - Updated
org.apache.maven.plugins:maven-javadoc-plugin:3.10.1to3.11.1 - Updated
org.apache.maven.plugins:maven-site-plugin:3.9.1to3.21.0 - Updated
org.apache.maven.plugins:maven-surefire-plugin:3.5.1to3.5.2 - Updated
org.codehaus.mojo:versions-maven-plugin:2.17.1to2.18.0 - Updated
org.sonarsource.scanner.maven:sonar-maven-plugin:4.0.0.4121to5.0.0.4389