From 9ae6cbfacf313d79630c22a93031b13be504a469 Mon Sep 17 00:00:00 2001
From: Bing Li <63471091+sfc-gh-bli@users.noreply.github.com>
Date: Tue, 26 Nov 2024 14:32:57 -0800
Subject: [PATCH] SNOW-1826532 Fix Security Vulnerability (#176)

upgrade dependencies version
---
 fips-pom.xml | 8 ++++----
 pom.xml      | 8 ++++----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/fips-pom.xml b/fips-pom.xml
index 0578782d..e1ad8d2d 100644
--- a/fips-pom.xml
+++ b/fips-pom.xml
@@ -37,13 +37,13 @@
         <scala.version>2.12.18</scala.version>
         <scala.compat.version>2.12</scala.compat.version>
         <spec2.version>4.2.0</spec2.version>
-        <snowflake.jdbc.version>3.17.0</snowflake.jdbc.version>
+        <snowflake.jdbc.version>3.20.0</snowflake.jdbc.version>
         <version.scala.binary>${scala.compat.version}</version.scala.binary>
         <doctitle>Snowpark ${project.version}</doctitle>
         <bouncycastle.version>1.64</bouncycastle.version>
         <scalaPluginVersion>4.3.0</scalaPluginVersion>
-        <jackson.version>2.13.2</jackson.version>
-        <jackson.databind.version>2.13.4.2</jackson.databind.version>
+        <jackson.version>2.18.0</jackson.version>
+        <jackson.databind.version>2.18.0</jackson.databind.version>
     </properties>
 
     <dependencyManagement>
@@ -72,7 +72,7 @@
         <dependency>
             <groupId>commons-io</groupId>
             <artifactId>commons-io</artifactId>
-            <version>2.11.0</version>
+            <version>2.14.0</version>
         </dependency>
         <dependency>
             <groupId>javax.xml.bind</groupId>
diff --git a/pom.xml b/pom.xml
index c0fafba3..8ebc94db 100644
--- a/pom.xml
+++ b/pom.xml
@@ -37,15 +37,15 @@
         <scala.version>2.12.18</scala.version>
         <scala.compat.version>2.12</scala.compat.version>
         <spec2.version>4.2.0</spec2.version>
-        <snowflake.jdbc.version>3.17.0</snowflake.jdbc.version>
+        <snowflake.jdbc.version>3.20.0</snowflake.jdbc.version>
         <version.scala.binary>${scala.compat.version}</version.scala.binary>
         <doctitle>Snowpark ${project.version}</doctitle>
         <scoverage.plugin.version>1.4.11</scoverage.plugin.version>
         <bouncycastle.version>1.64</bouncycastle.version>
         <scoverage.aggregate>true</scoverage.aggregate>
         <scalaPluginVersion>4.3.0</scalaPluginVersion>
-        <jackson.version>2.13.2</jackson.version>
-        <jackson.databind.version>2.13.4.2</jackson.databind.version>
+        <jackson.version>2.18.0</jackson.version>
+        <jackson.databind.version>2.18.0</jackson.databind.version>
 
     </properties>
     <dependencyManagement>
@@ -74,7 +74,7 @@
         <dependency>
             <groupId>commons-io</groupId>
             <artifactId>commons-io</artifactId>
-            <version>2.11.0</version>
+            <version>2.14.0</version>
         </dependency>
         <dependency>
             <groupId>javax.xml.bind</groupId>