Visitar URL original
[SPARK-54649][BUILD][3.5] Upgrade Jersey to 2.47 · apache/spark@91606de · GitHub
Skip to content

Commit 91606de

Browse files
pan3793zhengruifeng
authored andcommitted
[SPARK-54649][BUILD][3.5] Upgrade Jersey to 2.47
### What changes were proposed in this pull request? A dependency patch version upgrade for security. ### Why are the changes needed? To fix CVE-2025-12383. ### Does this PR introduce _any_ user-facing change? No. ### How was this patch tested? Pass GHA. ### Was this patch authored or co-authored using generative AI tooling? No. Closes #53404 from pan3793/SPARK-54649-3.5. Authored-by: Cheng Pan <chengpan@apache.org> Signed-off-by: Ruifeng Zheng <ruifengz@apache.org>
1 parent 1410b34 commit 91606de

2 files changed

Lines changed: 8 additions & 8 deletions

File tree

‎dev/deps/spark-deps-hadoop-3-hive-2.3‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -115,20 +115,20 @@ jakarta.validation-api/2.0.2//jakarta.validation-api-2.0.2.jar
115115
jakarta.ws.rs-api/2.1.6//jakarta.ws.rs-api-2.1.6.jar
116116
jakarta.xml.bind-api/2.3.2//jakarta.xml.bind-api-2.3.2.jar
117117
janino/3.1.9//janino-3.1.9.jar
118-
javassist/3.29.2-GA//javassist-3.29.2-GA.jar
118+
javassist/3.30.2-GA//javassist-3.30.2-GA.jar
119119
javax.jdo/3.2.0-m3//javax.jdo-3.2.0-m3.jar
120120
javolution/5.5.1//javolution-5.5.1.jar
121121
jaxb-api/2.2.11//jaxb-api-2.2.11.jar
122122
jaxb-runtime/2.3.2//jaxb-runtime-2.3.2.jar
123123
jcl-over-slf4j/2.0.7//jcl-over-slf4j-2.0.7.jar
124124
jdo-api/3.0.1//jdo-api-3.0.1.jar
125125
jdom2/2.0.6//jdom2-2.0.6.jar
126-
jersey-client/2.40//jersey-client-2.40.jar
127-
jersey-common/2.40//jersey-common-2.40.jar
128-
jersey-container-servlet-core/2.40//jersey-container-servlet-core-2.40.jar
129-
jersey-container-servlet/2.40//jersey-container-servlet-2.40.jar
130-
jersey-hk2/2.40//jersey-hk2-2.40.jar
131-
jersey-server/2.40//jersey-server-2.40.jar
126+
jersey-client/2.47//jersey-client-2.47.jar
127+
jersey-common/2.47//jersey-common-2.47.jar
128+
jersey-container-servlet-core/2.47//jersey-container-servlet-core-2.47.jar
129+
jersey-container-servlet/2.47//jersey-container-servlet-2.47.jar
130+
jersey-hk2/2.47//jersey-hk2-2.47.jar
131+
jersey-server/2.47//jersey-server-2.47.jar
132132
jettison/1.1//jettison-1.1.jar
133133
jetty-util-ajax/9.4.58.v20250814//jetty-util-ajax-9.4.58.v20250814.jar
134134
jetty-util/9.4.58.v20250814//jetty-util-9.4.58.v20250814.jar

‎pom.xml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -205,7 +205,7 @@
205205
Please don't upgrade the version to 3.0.0+,
206206
Because it transition Jakarta REST API from javax to jakarta package.
207207
-->
208-
<jersey.version>2.40</jersey.version>
208+
<jersey.version>2.47</jersey.version>
209209
<joda.version>2.12.5</joda.version>
210210
<jodd.version>3.5.2</jodd.version>
211211
<jsr305.version>3.0.0</jsr305.version>

0 commit comments

Comments
 (0)