From 4366cc30929f2043e8cef30bb41395968ecd9b88 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Wed, 18 Sep 2024 00:41:13 +0000
Subject: [PATCH] fix: upgrade multiple dependencies with Snyk

Snyk has created this PR to upgrade:
  - org.apache.hadoop:hadoop-client-api from 3.3.5 to 3.4.0.
    See this package in maven: https://mvnrepository.com/artifact/org.apache.hadoop/hadoop-client-api/
  - org.apache.hadoop:hadoop-client-runtime from 3.3.5 to 3.4.0.
    See this package in maven: https://mvnrepository.com/artifact/org.apache.hadoop/hadoop-client-runtime/
  - org.apache.hive:hive-exec from 2.3.9 to 2.3.10.
    See this package in maven: https://mvnrepository.com/artifact/org.apache.hive/hive-exec/
  - org.apache.hive:hive-metastore from 2.3.9 to 2.3.10.
    See this package in maven: https://mvnrepository.com/artifact/org.apache.hive/hive-metastore/
  - org.apache.spark:spark-core_2.12 from 3.5.0-SNAPSHOT to 3.5.2.
    See this package in maven: https://mvnrepository.com/artifact/org.apache.spark/spark-core_2.12/
  - org.apache.thrift:libthrift from 0.12.0 to 0.20.0.
    See this package in maven: https://mvnrepository.com/artifact/org.apache.thrift/libthrift/
  - org.eclipse.jetty:jetty-util from 9.4.51.v20230217 to 9.4.55.v20240627.
    See this package in maven: https://mvnrepository.com/artifact/org.eclipse.jetty/jetty-util/
  - org.eclipse.jetty:jetty-http from 9.4.51.v20230217 to 9.4.55.v20240627.
    See this package in maven: https://mvnrepository.com/artifact/org.eclipse.jetty/jetty-http/
  - org.eclipse.jetty:jetty-servlet from 9.4.51.v20230217 to 9.4.55.v20240627.
    See this package in maven: https://mvnrepository.com/artifact/org.eclipse.jetty/jetty-servlet/
  - org.eclipse.jetty:jetty-plus from 9.4.51.v20230217 to 9.4.55.v20240627.
    See this package in maven: https://mvnrepository.com/artifact/org.eclipse.jetty/jetty-plus/
  - org.eclipse.jetty:jetty-server from 9.4.51.v20230217 to 9.4.55.v20240627.
    See this package in maven: https://mvnrepository.com/artifact/org.eclipse.jetty/jetty-server/
  - org.eclipse.jetty:jetty-servlets from 9.4.51.v20230217 to 9.4.55.v20240627.
    See this package in maven: https://mvnrepository.com/artifact/org.eclipse.jetty/jetty-servlets/

See this project in Snyk:
https://app.snyk.io/org/shanxuecheng/project/4f53bd21-a31a-414d-9dec-0e55851c3ccb?utm_source=github&utm_medium=referral&page=upgrade-pr
---
 pom.xml | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/pom.xml b/pom.xml
index 1d69e295285d7..e154fd676b6ad 100644
--- a/pom.xml
+++ b/pom.xml
@@ -119,7 +119,7 @@
     <slf4j.version>2.0.7</slf4j.version>
     <log4j.version>2.20.0</log4j.version>
     <!-- make sure to update IsolatedClientLoader whenever this version is changed -->
-    <hadoop.version>3.3.5</hadoop.version>
+    <hadoop.version>3.4.0</hadoop.version>
     <!-- Protobuf version for building with Hadoop/Yarn dependencies -->
     <protobuf.hadoopDependency.version>2.5.0</protobuf.hadoopDependency.version>
     <!-- Actual Protobuf version in Spark modules like Spark Connect, protobuf connector, etc. -->
@@ -132,7 +132,7 @@
     <hive.group>org.apache.hive</hive.group>
     <hive.classifier>core</hive.classifier>
     <!-- Version used in Maven Hive dependency -->
-    <hive.version>2.3.9</hive.version>
+    <hive.version>2.3.10</hive.version>
     <hive23.version>2.3.9</hive23.version>
     <!-- Version used for internal directory structure -->
     <hive.version.short>2.3</hive.version.short>
@@ -143,7 +143,7 @@
     <parquet.version>1.13.0</parquet.version>
     <orc.version>1.8.3</orc.version>
     <orc.classifier>shaded-protobuf</orc.classifier>
-    <jetty.version>9.4.51.v20230217</jetty.version>
+    <jetty.version>9.4.55.v20240627</jetty.version>
     <jakartaservlet.version>4.0.3</jakartaservlet.version>
     <chill.version>0.10.0</chill.version>
     <ivy.version>2.5.1</ivy.version>
@@ -203,7 +203,7 @@
     <joda.version>2.12.2</joda.version>
     <jodd.version>3.5.2</jodd.version>
     <jsr305.version>3.0.0</jsr305.version>
-    <libthrift.version>0.12.0</libthrift.version>
+    <libthrift.version>0.20.0</libthrift.version>
     <!-- Please don't upgrade the version to 4.10+, it depends on JDK 11 -->
     <antlr4.version>4.9.3</antlr4.version>
     <jpam.version>1.1</jpam.version>
@@ -231,8 +231,8 @@
 
     <!-- Some UI tests require Chrome and Chrome driver installed so those tests are disabled by default. -->
     <test.default.exclude.tags>org.apache.spark.tags.ChromeUITest</test.default.exclude.tags>
-    <test.exclude.tags></test.exclude.tags>
-    <test.include.tags></test.include.tags>
+    <test.exclude.tags/>
+    <test.include.tags/>
 
     <test.jdwp.address>localhost:0</test.jdwp.address>
     <test.jdwp.suspend>y</test.jdwp.suspend>
@@ -297,7 +297,7 @@
       things breaking.
     -->
     <spark.test.home>${session.executionRootDirectory}</spark.test.home>
-    <spark.test.webdriver.chrome.driver></spark.test.webdriver.chrome.driver>
+    <spark.test.webdriver.chrome.driver/>
     <spark.test.docker.keepContainer>false</spark.test.docker.keepContainer>
     <spark.test.docker.removePulledImage>true</spark.test.docker.removePulledImage>
 
@@ -3369,7 +3369,7 @@
             </goals>
             <configuration>
               <target>
-                <mkdir dir="${project.build.directory}/tmp" />
+                <mkdir dir="${project.build.directory}/tmp"/>
               </target>
             </configuration>
           </execution>
@@ -3770,7 +3770,7 @@
                         </goals>
                       </pluginExecutionFilter>
                       <action>
-                        <ignore></ignore>
+                        <ignore/>
                       </action>
                     </pluginExecution>
                     <pluginExecution>
@@ -3783,7 +3783,7 @@
                         </goals>
                       </pluginExecutionFilter>
                       <action>
-                        <ignore></ignore>
+                        <ignore/>
                       </action>
                     </pluginExecution>
                     <pluginExecution>
@@ -3796,7 +3796,7 @@
                         </goals>
                       </pluginExecutionFilter>
                       <action>
-                        <ignore></ignore>
+                        <ignore/>
                       </action>
                     </pluginExecution>
                   </pluginExecutions>