fix: java dependency vulnerabilities (#4460)

* fix: java dependency vulnerabilities * Upgrade org.hibernate:hibernate-validator (PLT-2)
datahub-project · Mar 22, 2022 · 4476356 · 4476356
1 parent 2013d5d
commit 4476356
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/build.gradle b/build.gradle
@@ -180,6 +180,9 @@ subprojects {
       testCompile externalDependency.testng
       constraints {
         implementation('io.netty:netty-all:4.1.44.Final')
+        implementation('org.apache.commons:commons-compress:1.21')
+        implementation('org.apache.velocity:velocity-engine-core:2.3')
+        implementation('org.hibernate:hibernate-validator:6.0.20.Final')
       }
     }
 

diff --git a/metadata-integration/java/spark-lineage/build.gradle b/metadata-integration/java/spark-lineage/build.gradle
@@ -145,6 +145,7 @@ shadowJar {
 
   relocate 'org.apache.http','datahub.spark2.shaded.http'
   relocate 'org.apache.commons.codec', 'datahub.spark2.shaded.o.a.c.codec'
+  relocate 'org.apache.commons.compress', 'datahub.spark2.shaded.o.a.c.compress'
   relocate 'mozilla', 'datahub.spark2.shaded.mozilla'
   relocate 'com.typesafe','datahub.spark2.shaded.typesafe'
   relocate 'io.opentracing','datahub.spark2.shaded.io.opentracing'