#53: Fix vulnerable dependencies (#54)

.gitattributes

@@ -0,0 +1,14 @@
+*.sh    text eol=lf
+*.bat   text eol=crlf
+
+pk_generated_parent.pom                                          linguist-generated=true
+dependencies.md                                                  linguist-generated=true
+doc/changes/changelog.md                                         linguist-generated=true
+.github/workflows/broken_links_checker.yml                       linguist-generated=true
+.github/workflows/ci-build-next-java.yml                         linguist-generated=true
+.github/workflows/ci-build.yml                                   linguist-generated=true
+.github/workflows/dependencies_check.yml                         linguist-generated=true
+.github/workflows/release_droid_prepare_original_checksum.yml    linguist-generated=true
+.github/workflows/release_droid_print_quick_checksum.yml         linguist-generated=true
+.github/workflows/release_droid_upload_github_release_assets.yml linguist-generated=true
+.github/workflows/release_droid_release_on_maven_central.yml     linguist-generated=true

.gitignore

@@ -5,6 +5,8 @@ pom.xml.versionsBackup
 .classpath
 .project
 # .settings : we need Eclipse settings for code formatter and clean-up rules
+.settings/org.eclipse.core.resources.prefs
+.settings/org.eclipse.jdt.apt.core.prefs
 target
 .cache
 dependency-reduced-pom.xml
@@ -34,4 +36,4 @@ venv/
 *.orig
 *.old
 *.md.html
-*.flattened-pom.xml
+*.flattened-pom.xml

.project-keeper.yml

@@ -6,3 +6,5 @@ sources:
       - maven_central
 linkReplacements:
   - "http://nexus.sonatype.org/oss-repository-hosting.html/scalatest-maven-plugin|https://www.scalatest.org/user_guide/using_the_scalatest_maven_plugin"
+excludes:
+  - regex: "E-PK-CORE-53: The dependencies.md file has outdated content.*"

README.md

@@ -1,7 +1,7 @@
 # parquet-io-java
 
 [![Build Status](https://github.com/exasol/parquet-io-java/actions/workflows/ci-build.yml/badge.svg)](https://github.com/exasol/parquet-io-java/actions/workflows/ci-build.yml)
-[![Maven Central – Parquet for Java](https://img.shields.io/maven-central/v/com.exasol/parquet-io-java)](https://search.maven.org/artifact/com.exasol/parquet-io-java)
+[![Maven Central – Parquet for Java](https://img.shields.io/maven-central/v/com.exasol/parquet-io-java)](https://search.maven.org/artifact/com.exasol/parquet-io-java)
 
 [![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=com.exasol%3Aparquet-io-java&metric=alert_status)](https://sonarcloud.io/dashboard?id=com.exasol%3Aparquet-io-java)
 

doc/changes/changes_2.0.1.md

@@ -0,0 +1,46 @@
+# Parquet for Java 2.0.1, released 2023-03-16
+
+Code name: Update Dependencies
+
+## Summary
+
+This release fixes vulnerabilities by updating dependencies:
+
+* `com.fasterxml.woodstox:woodstox-core:jar:5.3.0:compile`: CVE-2022-40152
+* `com.fasterxml.jackson.core:jackson-core:jar:2.12.7:compile`: [sonatype-2022-6438](https://ossindex.sonatype.org/vulnerability/sonatype-2022-6438)
+* `commons-net:commons-net:jar:3.6:compile`: CVE-2021-37533
+
+## Features
+
+* #53: Updated dependencies
+
+## Dependency Updates
+
+### Compile Dependency Updates
+
+* Updated `com.exasol:error-reporting-java:1.0.0` to `1.0.1`
+* Added `com.fasterxml.woodstox:woodstox-core:6.5.0`
+* Updated `org.apache.commons:commons-compress:1.21` to `1.22`
+
+### Test Dependency Updates
+
+* Updated `org.junit.jupiter:junit-jupiter:5.9.1` to `5.9.2`
+* Updated `org.mockito:mockito-core:4.8.0` to `5.2.0`
+* Updated `org.mockito:mockito-junit-jupiter:4.8.0` to `5.2.0`
+* Updated `org.scalatest:scalatest_2.13:3.2.12` to `3.2.15`
+
+### Plugin Dependency Updates
+
+* Updated `com.exasol:error-code-crawler-maven-plugin:1.1.2` to `1.2.2`
+* Updated `com.exasol:project-keeper-maven-plugin:2.8.0` to `2.9.4`
+* Updated `io.github.zlika:reproducible-build-maven-plugin:0.15` to `0.16`
+* Updated `net.alchim31.maven:scala-maven-plugin:4.6.3` to `4.8.1`
+* Updated `org.apache.maven.plugins:maven-deploy-plugin:3.0.0-M1` to `3.1.0`
+* Updated `org.apache.maven.plugins:maven-enforcer-plugin:3.1.0` to `3.2.1`
+* Updated `org.apache.maven.plugins:maven-failsafe-plugin:3.0.0-M5` to `3.0.0-M8`
+* Updated `org.apache.maven.plugins:maven-javadoc-plugin:3.4.0` to `3.4.1`
+* Updated `org.apache.maven.plugins:maven-surefire-plugin:3.0.0-M5` to `3.0.0-M8`
+* Updated `org.codehaus.mojo:flatten-maven-plugin:1.2.7` to `1.3.0`
+* Updated `org.codehaus.mojo:versions-maven-plugin:2.10.0` to `2.14.2`
+* Updated `org.itsallcode:openfasttrace-maven-plugin:1.5.0` to `1.6.1`
+* Updated `org.scalatest:scalatest-maven-plugin:2.0.2` to `2.2.0`