SNOW-1826532 Fix Security Vulnerability (#176)

upgrade dependencies version
snowflakedb · Nov 26, 2024 · 9ae6cbf · 9ae6cbf
1 parent 9dc5eb2
commit 9ae6cbf
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 8 deletions.
diff --git a/fips-pom.xml b/fips-pom.xml
@@ -37,13 +37,13 @@
         <scala.version>2.12.18</scala.version>
         <scala.compat.version>2.12</scala.compat.version>
         <spec2.version>4.2.0</spec2.version>
-        <snowflake.jdbc.version>3.17.0</snowflake.jdbc.version>
+        <snowflake.jdbc.version>3.20.0</snowflake.jdbc.version>
         <version.scala.binary>${scala.compat.version}</version.scala.binary>
         <doctitle>Snowpark ${project.version}</doctitle>
         <bouncycastle.version>1.64</bouncycastle.version>
         <scalaPluginVersion>4.3.0</scalaPluginVersion>
-        <jackson.version>2.13.2</jackson.version>
-        <jackson.databind.version>2.13.4.2</jackson.databind.version>
+        <jackson.version>2.18.0</jackson.version>
+        <jackson.databind.version>2.18.0</jackson.databind.version>
     </properties>
 
     <dependencyManagement>
@@ -72,7 +72,7 @@
         <dependency>
             <groupId>commons-io</groupId>
             <artifactId>commons-io</artifactId>
-            <version>2.11.0</version>
+            <version>2.14.0</version>
         </dependency>
         <dependency>
             <groupId>javax.xml.bind</groupId>

diff --git a/pom.xml b/pom.xml
@@ -37,15 +37,15 @@
         <scala.version>2.12.18</scala.version>
         <scala.compat.version>2.12</scala.compat.version>
         <spec2.version>4.2.0</spec2.version>
-        <snowflake.jdbc.version>3.17.0</snowflake.jdbc.version>
+        <snowflake.jdbc.version>3.20.0</snowflake.jdbc.version>
         <version.scala.binary>${scala.compat.version}</version.scala.binary>
         <doctitle>Snowpark ${project.version}</doctitle>
         <scoverage.plugin.version>1.4.11</scoverage.plugin.version>
         <bouncycastle.version>1.64</bouncycastle.version>
         <scoverage.aggregate>true</scoverage.aggregate>
         <scalaPluginVersion>4.3.0</scalaPluginVersion>
-        <jackson.version>2.13.2</jackson.version>
-        <jackson.databind.version>2.13.4.2</jackson.databind.version>
+        <jackson.version>2.18.0</jackson.version>
+        <jackson.databind.version>2.18.0</jackson.databind.version>
 
     </properties>
     <dependencyManagement>
@@ -74,7 +74,7 @@
         <dependency>
             <groupId>commons-io</groupId>
             <artifactId>commons-io</artifactId>
-            <version>2.11.0</version>
+            <version>2.14.0</version>
         </dependency>
         <dependency>
             <groupId>javax.xml.bind</groupId>