PL-211: update dependencies from dependabot (#589)

* update dependencies
confluentinc · Jun 20, 2023 · b720133 · b720133
1 parent 446fc91
commit b720133
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 18 deletions.
diff --git a/CHANGELOG.adoc b/CHANGELOG.adoc
@@ -24,6 +24,7 @@ endif::[]
 === Dependencies
 
 * PL-211: Update dependencies from dependabot, Add mvnw, use mvnw in jenkins (#583)
+* PL-211: Update dependencies from dependabot (#589)
 
 == 0.5.2.5
 

diff --git a/parallel-consumer-core/pom.xml b/parallel-consumer-core/pom.xml
@@ -26,13 +26,13 @@
         <dependency>
             <groupId>com.github.luben</groupId>
             <artifactId>zstd-jni</artifactId>
-            <version>1.5.2-4</version>
+            <version>1.5.5-4</version>
             <scope>compile</scope>
         </dependency>
         <dependency>
             <groupId>org.xerial.snappy</groupId>
             <artifactId>snappy-java</artifactId>
-            <version>1.1.8.4</version>
+            <version>1.1.10.1</version>
             <scope>compile</scope>
         </dependency>
 
@@ -85,7 +85,7 @@
         <dependency>
             <groupId>org.postgresql</groupId>
             <artifactId>postgresql</artifactId>
-            <version>42.5.1</version>
+            <version>42.6.0</version>
             <scope>test</scope>
         </dependency>
         <dependency>

diff --git a/pom.xml b/pom.xml
@@ -99,7 +99,7 @@
 
         <!-- core -->
         <slf4j.version>2.0.7</slf4j.version>
-        <kafka.version>3.3.0</kafka.version>
+        <kafka.version>3.5.0</kafka.version>
         <version.unij>0.1.3</version.unij>
 
         <!-- tests -->
@@ -109,7 +109,7 @@
         <junit.version>5.10.0-M1</junit.version>
         <junit.platform.version>1.10.0-M1</junit.platform.version>
         <testcontainers.version>1.18.3</testcontainers.version>
-        <truth.version>1.1.4</truth.version>
+        <truth.version>1.1.5</truth.version>
         <flogger.version>0.7.4</flogger.version>
         <mockito.version>5.4.0</mockito.version>
         <truth-generator-maven-plugin.version>0.1.1</truth-generator-maven-plugin.version>
@@ -302,7 +302,7 @@
         <dependency>
             <groupId>ch.qos.logback</groupId>
             <artifactId>logback-classic</artifactId>
-            <version>1.4.5</version>
+            <version>1.4.8</version>
             <scope>test</scope>
         </dependency>
         <dependency>
@@ -444,7 +444,7 @@
             <dependency>
                 <groupId>com.google.guava</groupId>
                 <artifactId>guava</artifactId>
-                <version>31.1-jre</version>
+                <version>32.0.1-jre</version>
             </dependency>
             <dependency>
                 <groupId>me.tongfei</groupId>
@@ -524,16 +524,6 @@
                 <configuration>
                     <scope>runtime</scope>
                     <fail>false</fail>
-                    <excludeCoordinates>
-                        <exclude>
-                            <!-- https://github.com/google/guava/issues/4011 -->
-                            <!-- CVE-2020-8908: Files::createTempDir local information disclosure vulnerability #4011 -->
-                            <!-- only used transitively from tests, and is a deprecated function -->
-                            <groupId>com.google.guava</groupId>
-                            <artifactId>guava</artifactId>
-                            <version>31.1-jre</version>
-                        </exclude>
-                    </excludeCoordinates>
                 </configuration>
                 <executions>
                     <execution>
@@ -925,7 +915,7 @@
                 <plugin>
                     <groupId>org.apache.maven.plugins</groupId>
                     <artifactId>maven-clean-plugin</artifactId>
-                    <version>3.2.0</version>
+                    <version>3.3.1</version>
                 </plugin>
                 <plugin>
                     <groupId>org.apache.maven.plugins</groupId>