From 0519b3fdd5ab0b94d39ee6989050272e6f3e5c78 Mon Sep 17 00:00:00 2001
From: Eric Fu <eric@risingwave-labs.com>
Date: Sun, 17 Nov 2024 16:40:45 +0800
Subject: [PATCH] chore: bump java dependencies (#19208)

---
 .../risingwave-connector-service/pom.xml      |  15 ++
 .../risingwave-sink-cassandra/pom.xml         |   4 +-
 .../risingwave-sink-deltalake-test/pom.xml    |  40 +++---
 .../risingwave-sink-deltalake/pom.xml         |   5 +-
 .../risingwave-sink-es-7/pom.xml              |  10 --
 .../risingwave-sink-iceberg/pom.xml           |   7 +-
 .../risingwave-sink-mock-flink/pom.xml        |   1 +
 .../pom.xml                                   |   2 +-
 .../risingwave-source-cdc-test/pom.xml        |   7 +-
 .../risingwave-source-cdc/pom.xml             |   4 +-
 java/connector-node/s3-common/pom.xml         |   2 +
 java/java-binding-benchmark/pom.xml           |   6 +-
 java/java-binding/pom.xml                     |   2 +-
 java/pom.xml                                  | 128 +++++-------------
 java/proto/pom.xml                            |   7 +-
 15 files changed, 97 insertions(+), 143 deletions(-)

diff --git a/java/connector-node/risingwave-connector-service/pom.xml b/java/connector-node/risingwave-connector-service/pom.xml
index 0a5e9f0b9d60..c2ce04c82691 100644
--- a/java/connector-node/risingwave-connector-service/pom.xml
+++ b/java/connector-node/risingwave-connector-service/pom.xml
@@ -73,6 +73,21 @@
             <artifactId>junit</artifactId>
             <scope>test</scope>
         </dependency>
+        <dependency>
+            <groupId>org.apache.logging.log4j</groupId>
+            <artifactId>log4j-api</artifactId>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.apache.logging.log4j</groupId>
+            <artifactId>log4j-core</artifactId>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.apache.logging.log4j</groupId>
+            <artifactId>log4j-slf4j2-impl</artifactId>
+            <scope>test</scope>
+        </dependency>
 
         <!-- Specific connectors dependencies managed by the assembly plugin, refer to
         assembly/pom.xml for more details -->
diff --git a/java/connector-node/risingwave-sink-cassandra/pom.xml b/java/connector-node/risingwave-sink-cassandra/pom.xml
index 9a36cb49284d..43ee5365791e 100644
--- a/java/connector-node/risingwave-sink-cassandra/pom.xml
+++ b/java/connector-node/risingwave-sink-cassandra/pom.xml
@@ -44,9 +44,9 @@
 
         <!-- cassandra drivers -->
         <dependency>
-            <groupId>com.datastax.oss</groupId>
+            <groupId>org.apache.cassandra</groupId>
             <artifactId>java-driver-core</artifactId>
-            <version>${datastax.version}</version>
+            <version>4.18.1</version>
         </dependency>
     </dependencies>
 
diff --git a/java/connector-node/risingwave-sink-deltalake-test/pom.xml b/java/connector-node/risingwave-sink-deltalake-test/pom.xml
index c677dd864c11..6ef03b14992b 100644
--- a/java/connector-node/risingwave-sink-deltalake-test/pom.xml
+++ b/java/connector-node/risingwave-sink-deltalake-test/pom.xml
@@ -20,7 +20,9 @@
     </description>
 
     <properties>
-        <iceberg.version>1.0.0</iceberg.version>
+        <!-- The versions of Spark and Delta must be compatible. See https://docs.delta.io/latest/releases.html -->
+        <spark.version>3.5.3</spark.version>
+        <delta.version>3.2.1</delta.version>
     </properties>
 
     <dependencies>
@@ -41,14 +43,14 @@
         </dependency>
         <dependency>
             <groupId>io.delta</groupId>
-            <artifactId>delta-core_2.12</artifactId>
-            <version>2.2.0</version>
+            <artifactId>delta-spark_2.12</artifactId>
+            <version>${delta.version}</version>
             <scope>test</scope>
         </dependency>
         <dependency>
             <groupId>io.delta</groupId>
             <artifactId>delta-standalone_2.12</artifactId>
-            <version>0.6.0</version>
+            <version>${delta.version}</version>
             <scope>test</scope>
         </dependency>
         <dependency>
@@ -71,32 +73,27 @@
             <artifactId>log4j-slf4j2-impl</artifactId>
             <scope>test</scope>
         </dependency>
+        <dependency>
+            <groupId>org.slf4j</groupId>
+            <artifactId>slf4j-api</artifactId>
+            <scope>test</scope>
+        </dependency>
         <dependency>
             <groupId>org.apache.hadoop</groupId>
             <artifactId>hadoop-client</artifactId>
             <scope>test</scope>
+            <version>3.3.4</version>
             <exclusions>
                 <exclusion>
-                    <groupId>org.slf4j</groupId>
-                    <artifactId>slf4j-reload4j</artifactId>
+                    <groupId>ch.qos.reload4j</groupId>
+                    <artifactId>reload4j</artifactId>
                 </exclusion>
             </exclusions>
         </dependency>
         <dependency>
             <groupId>org.apache.spark</groupId>
             <artifactId>spark-sql_2.12</artifactId>
-            <scope>test</scope>
-        </dependency>
-        <dependency>
-            <groupId>org.apache.iceberg</groupId>
-            <artifactId>iceberg-spark-3.2_2.12</artifactId>
-            <version>${iceberg.version}</version>
-            <scope>test</scope>
-        </dependency>
-        <dependency>
-            <groupId>org.apache.iceberg</groupId>
-            <artifactId>iceberg-arrow</artifactId>
-            <version>${iceberg.version}</version>
+            <version>${spark.version}</version>
             <scope>test</scope>
         </dependency>
         <dependency>
@@ -107,21 +104,20 @@
         <dependency>
             <groupId>org.assertj</groupId>
             <artifactId>assertj-core</artifactId>
-            <version>3.24.2</version>
             <scope>test</scope>
         </dependency>
 
-        <!-- Force using jackson-databind 2.13.5, as required by spark-3.2_2.12  -->
+        <!-- Force using jackson 2.15.x to escape from dependencyManagement as required by Spark -->
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-databind</artifactId>
-            <version>2.13.5</version>
+            <version>2.15.4</version>
             <scope>test</scope>
         </dependency>
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-core</artifactId>
-            <version>2.13.5</version>
+            <version>2.15.4</version>
             <scope>test</scope>
         </dependency>
 
diff --git a/java/connector-node/risingwave-sink-deltalake/pom.xml b/java/connector-node/risingwave-sink-deltalake/pom.xml
index 9a89853ff9f3..386ab0ad70fe 100644
--- a/java/connector-node/risingwave-sink-deltalake/pom.xml
+++ b/java/connector-node/risingwave-sink-deltalake/pom.xml
@@ -18,7 +18,7 @@
     <properties>
         <maven.compiler.source>11</maven.compiler.source>
         <maven.compiler.target>11</maven.compiler.target>
-        <parquet.version>1.14.0</parquet.version>
+        <parquet.version>1.14.4</parquet.version>
         <maven.javadoc.skip>true</maven.javadoc.skip>
     </properties>
 
@@ -44,7 +44,7 @@
         <dependency>
             <groupId>io.delta</groupId>
             <artifactId>delta-standalone_2.12</artifactId>
-            <version>0.6.0</version>
+            <version>3.2.1</version>
         </dependency>
         <dependency>
             <groupId>org.apache.parquet</groupId>
@@ -74,6 +74,7 @@
         <dependency>
             <groupId>org.apache.hadoop</groupId>
             <artifactId>hadoop-client</artifactId>
+            <version>${hadoop.version}</version>
         </dependency>
     </dependencies>
 </project>
diff --git a/java/connector-node/risingwave-sink-es-7/pom.xml b/java/connector-node/risingwave-sink-es-7/pom.xml
index e46ce06068f1..73209951ad77 100644
--- a/java/connector-node/risingwave-sink-es-7/pom.xml
+++ b/java/connector-node/risingwave-sink-es-7/pom.xml
@@ -34,27 +34,17 @@
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-databind</artifactId>
-            <version>${jackson.version}</version>
         </dependency>
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-core</artifactId>
-            <version>${jackson.version}</version>
         </dependency>
 
         <!-- ElasticSearch drivers -->
-        <dependency>
-            <groupId>org.elasticsearch</groupId>
-            <artifactId>elasticsearch</artifactId>
-        </dependency>
         <dependency>
             <groupId>org.elasticsearch.client</groupId>
             <artifactId>elasticsearch-rest-high-level-client</artifactId>
         </dependency>
-        <dependency>
-			<groupId>org.opensearch</groupId>
-			<artifactId>opensearch</artifactId>
-		</dependency>
 		<dependency>
 			<groupId>org.opensearch.client</groupId>
 			<artifactId>opensearch-rest-high-level-client</artifactId>
diff --git a/java/connector-node/risingwave-sink-iceberg/pom.xml b/java/connector-node/risingwave-sink-iceberg/pom.xml
index d8ef3d6db384..ac099739abad 100644
--- a/java/connector-node/risingwave-sink-iceberg/pom.xml
+++ b/java/connector-node/risingwave-sink-iceberg/pom.xml
@@ -77,23 +77,27 @@
         <dependency>
             <groupId>org.apache.parquet</groupId>
             <artifactId>parquet-avro</artifactId>
-            <version>1.12.3</version>
+            <version>1.14.3</version>
         </dependency>
         <dependency>
             <groupId>org.apache.hadoop</groupId>
             <artifactId>hadoop-common</artifactId>
+            <version>${hadoop.version}</version>
         </dependency>
         <dependency>
             <groupId>org.apache.hadoop</groupId>
             <artifactId>hadoop-mapreduce-client-core</artifactId>
+            <version>${hadoop.version}</version>
         </dependency>
         <dependency>
             <groupId>org.apache.hadoop</groupId>
             <artifactId>hadoop-mapreduce-client-common</artifactId>
+            <version>${hadoop.version}</version>
         </dependency>
         <dependency>
             <groupId>org.apache.hadoop</groupId>
             <artifactId>hadoop-mapreduce-client-jobclient</artifactId>
+            <version>${hadoop.version}</version>
         </dependency>
         <dependency>
             <groupId>org.apache.iceberg</groupId>
@@ -136,7 +140,6 @@
         <dependency>
             <groupId>org.assertj</groupId>
             <artifactId>assertj-core</artifactId>
-            <version>3.24.2</version>
             <scope>test</scope>
         </dependency>
     </dependencies>
diff --git a/java/connector-node/risingwave-sink-mock-flink/pom.xml b/java/connector-node/risingwave-sink-mock-flink/pom.xml
index 135abc7ec609..548fd9d78f44 100644
--- a/java/connector-node/risingwave-sink-mock-flink/pom.xml
+++ b/java/connector-node/risingwave-sink-mock-flink/pom.xml
@@ -21,6 +21,7 @@
     <name>risingwave-sink-dynamic</name>
 
     <properties>
+        <flink.version>1.18.0</flink.version>
         <maven.javadoc.skip>true</maven.javadoc.skip>
     </properties>
 
diff --git a/java/connector-node/risingwave-sink-mock-flink/risingwave-sink-mock-flink-http-sink/pom.xml b/java/connector-node/risingwave-sink-mock-flink/risingwave-sink-mock-flink-http-sink/pom.xml
index 65719be7a5dd..36741240134e 100644
--- a/java/connector-node/risingwave-sink-mock-flink/risingwave-sink-mock-flink-http-sink/pom.xml
+++ b/java/connector-node/risingwave-sink-mock-flink/risingwave-sink-mock-flink-http-sink/pom.xml
@@ -26,7 +26,7 @@
         <dependency>
             <groupId>com.getindata</groupId>
             <artifactId>flink-http-connector</artifactId>
-            <version>0.10.0</version>
+            <version>0.16.0</version>
         </dependency>
         <dependency>
             <groupId>com.risingwave</groupId>
diff --git a/java/connector-node/risingwave-source-cdc-test/pom.xml b/java/connector-node/risingwave-source-cdc-test/pom.xml
index e9e204a8e9b7..db7d207bb4a6 100644
--- a/java/connector-node/risingwave-source-cdc-test/pom.xml
+++ b/java/connector-node/risingwave-source-cdc-test/pom.xml
@@ -52,13 +52,12 @@
         <dependency>
             <groupId>org.assertj</groupId>
             <artifactId>assertj-core</artifactId>
-            <version>3.24.2</version>
             <scope>test</scope>
         </dependency>
         <dependency>
             <groupId>com.zaxxer</groupId>
             <artifactId>HikariCP</artifactId>
-            <version>5.0.1</version>
+            <version>6.0.0</version>
             <scope>test</scope>
         </dependency>
         <dependency>
@@ -81,18 +80,16 @@
         <dependency>
             <groupId>org.mongodb</groupId>
             <artifactId>mongodb-driver-sync</artifactId>
-            <version>4.11.1</version>
+            <version>5.2.0</version>
         </dependency>
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-databind</artifactId>
-            <version>${jackson.version}</version>
             <scope>test</scope>
         </dependency>
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-core</artifactId>
-            <version>${jackson.version}</version>
             <scope>test</scope>
         </dependency>
 
diff --git a/java/connector-node/risingwave-source-cdc/pom.xml b/java/connector-node/risingwave-source-cdc/pom.xml
index fb1519f6a183..26a2d5bf1edc 100644
--- a/java/connector-node/risingwave-source-cdc/pom.xml
+++ b/java/connector-node/risingwave-source-cdc/pom.xml
@@ -19,12 +19,10 @@
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-databind</artifactId>
-            <version>${jackson.version}</version>
         </dependency>
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-core</artifactId>
-            <version>${jackson.version}</version>
         </dependency>
         <dependency>
             <groupId>io.debezium</groupId>
@@ -61,7 +59,7 @@
             <groupId>com.zendesk</groupId>
             <artifactId>mysql-binlog-connector-java</artifactId>
             <!-- https://central.sonatype.com/artifact/com.zendesk/mysql-binlog-connector-java/versions -->
-            <version>0.29.0</version>
+            <version>0.30.1</version>
         </dependency>
         <dependency>
             <groupId>org.postgresql</groupId>
diff --git a/java/connector-node/s3-common/pom.xml b/java/connector-node/s3-common/pom.xml
index b1c8033fc1f8..de5e7a997ba0 100644
--- a/java/connector-node/s3-common/pom.xml
+++ b/java/connector-node/s3-common/pom.xml
@@ -22,10 +22,12 @@
         <dependency>
             <groupId>org.apache.hadoop</groupId>
             <artifactId>hadoop-common</artifactId>
+            <version>${hadoop.version}</version>
         </dependency>
         <dependency>
             <groupId>org.apache.hadoop</groupId>
             <artifactId>hadoop-aws</artifactId>
+            <version>${hadoop.version}</version>
         </dependency>
         <dependency>
             <groupId>com.risingwave</groupId>
diff --git a/java/java-binding-benchmark/pom.xml b/java/java-binding-benchmark/pom.xml
index 80303bc914e6..f6d848fdecb6 100644
--- a/java/java-binding-benchmark/pom.xml
+++ b/java/java-binding-benchmark/pom.xml
@@ -24,17 +24,17 @@
         <dependency>
             <groupId>org.openjdk.jmh</groupId>
             <artifactId>jmh-core</artifactId>
-            <version>1.33</version>
+            <version>1.37</version>
         </dependency>
         <dependency>
             <groupId>org.openjdk.jmh</groupId>
             <artifactId>jmh-generator-annprocess</artifactId>
-            <version>1.33</version>
+            <version>1.37</version>
         </dependency>
         <dependency>
             <groupId>junit</groupId>
             <artifactId>junit</artifactId>
-            <version>3.8.1</version>
+            <version>4.13.2</version>
             <scope>test</scope>
         </dependency>
         <dependency>
diff --git a/java/java-binding/pom.xml b/java/java-binding/pom.xml
index d53eaa26b2d5..8b7705ee46db 100644
--- a/java/java-binding/pom.xml
+++ b/java/java-binding/pom.xml
@@ -41,7 +41,7 @@
         <dependency>
             <groupId>junit</groupId>
             <artifactId>junit</artifactId>
-            <version>4.13.1</version>
+            <version>4.13.2</version>
             <scope>test</scope>
         </dependency>
     </dependencies>
diff --git a/java/pom.xml b/java/pom.xml
index 9157c7bce6a7..4f88d5e35f1e 100644
--- a/java/pom.xml
+++ b/java/pom.xml
@@ -60,37 +60,21 @@
     <properties>
         <maven.compiler.source>11</maven.compiler.source>
         <maven.compiler.target>11</maven.compiler.target>
+        <module.version>0.1.0-SNAPSHOT</module.version>
         <release.version>1.0.0</release.version>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
-        <protobuf.version>3.21.1</protobuf.version>
-        <grpc.version>1.64.0</grpc.version>
-        <gson.version>2.10</gson.version>
-        <module.version>0.1.0-SNAPSHOT</module.version>
-        <spotless.version>2.43.0</spotless.version>
-        <log4j.version>2.20.0</log4j.version>
-        <slf4j.version>2.0.9</slf4j.version>
-        <commons.cli.version>1.5.0</commons.cli.version>
-        <commons.io.version>2.14.0</commons.io.version>
-        <commons.text.version>1.10.0</commons.text.version>
-        <commons.lang3.version>3.12.0</commons.lang3.version>
+        <!-- dependency versions -->
+        <protobuf.version>3.25.5</protobuf.version> <!-- https://github.com/grpc/grpc-java/issues/11015 -->
+        <grpc.version>1.68.1</grpc.version>
+        <log4j.version>2.24.1</log4j.version>
+        <slf4j.version>2.0.16</slf4j.version>
         <debezium.version>2.6.2.Final</debezium.version>
-        <jackson.version>2.15.0</jackson.version>
-        <spark_sql.version>3.3.1</spark_sql.version>
-        <hadoop.version>3.4.0</hadoop.version>
-        <elasticsearch.version>7.17.23</elasticsearch.version>
-        <opensearch.version>2.11.1</opensearch.version>
-        <datastax.version>4.15.0</datastax.version>
-        <flink.version>1.18.0</flink.version>
-        <testcontainers.version>1.17.6</testcontainers.version>
-        <postgresql.version>42.5.5</postgresql.version>
-        <mysql.connector.java.version>8.3.0</mysql.connector.java.version>
-        <mongodb.driver.sync.version>4.11.1</mongodb.driver.sync.version>
-        <sqlite.version>3.45.0.0</sqlite.version>
-        <aws.version>2.21.42</aws.version>
-        <hive.version>3.1.3</hive.version>
-        <jetty.version>12.0.12</jetty.version>
-        <snappy.version>1.1.10.5</snappy.version>
+        <jackson.version>2.18.1</jackson.version>
+        <hadoop.version>3.4.1</hadoop.version>
+        <testcontainers.version>1.20.3</testcontainers.version>
+        <aws.version>2.29.2</aws.version>
+        <jetty.version>12.0.14</jetty.version>
     </properties>
 
     <dependencyManagement>
@@ -118,22 +102,22 @@
             <dependency>
                 <groupId>commons-cli</groupId>
                 <artifactId>commons-cli</artifactId>
-                <version>${commons.cli.version}</version>
+                <version>1.9.0</version>
             </dependency>
             <dependency>
                 <groupId>org.apache.commons</groupId>
                 <artifactId>commons-text</artifactId>
-                <version>${commons.text.version}</version>
+                <version>1.12.0</version>
             </dependency>
             <dependency>
                 <groupId>commons-io</groupId>
                 <artifactId>commons-io</artifactId>
-                <version>${commons.io.version}</version>
+                <version>2.17.0</version>
             </dependency>
             <dependency>
                 <groupId>org.apache.commons</groupId>
                 <artifactId>commons-lang3</artifactId>
-                <version>${commons.lang3.version}</version>
+                <version>3.17.0</version>
             </dependency>
             <dependency>
                 <groupId>com.fasterxml.jackson.core</groupId>
@@ -181,37 +165,27 @@
             <dependency>
                 <groupId>org.postgresql</groupId>
                 <artifactId>postgresql</artifactId>
-                <version>${postgresql.version}</version>
+                <version>42.7.4</version>
             </dependency>
             <dependency>
                 <groupId>com.mysql</groupId>
                 <artifactId>mysql-connector-j</artifactId>
-                <version>${mysql.connector.java.version}</version>
+                <version>9.1.0</version>
             </dependency>
             <dependency>
                 <groupId>org.mongodb</groupId>
                 <artifactId>mongodb-driver-sync</artifactId>
-                <version>${mongodb.driver.sync.version}</version>
-            </dependency>
-            <dependency>
-                <groupId>org.elasticsearch</groupId>
-                <artifactId>elasticsearch</artifactId>
-                <version>${elasticsearch.version}</version>
+                <version>4.11.5</version>
             </dependency>
             <dependency>
                 <groupId>org.elasticsearch.client</groupId>
                 <artifactId>elasticsearch-rest-high-level-client</artifactId>
-                <version>${elasticsearch.version}</version>
-            </dependency>
-            <dependency>
-                <groupId>org.opensearch</groupId>
-                <artifactId>opensearch</artifactId>
-                <version>${opensearch.version}</version>
+                <version>7.17.25</version>
             </dependency>
             <dependency>
                 <groupId>org.opensearch.client</groupId>
                 <artifactId>opensearch-rest-high-level-client</artifactId>
-                <version>${opensearch.version}</version>
+                <version>2.17.1</version>
                 <exclusions>
                     <exclusion>
                         <groupId>org.apache.httpcomponents</groupId>
@@ -241,27 +215,18 @@
                 <version>6.0.53</version>
                 <scope>provided</scope>
             </dependency>
-            <dependency>
-                <groupId>org.apache.hadoop</groupId>
-                <artifactId>hadoop-client</artifactId>
-                <version>${hadoop.version}</version>
-            </dependency>
-            <dependency>
-                <groupId>org.apache.hadoop</groupId>
-                <artifactId>hadoop-common</artifactId>
-                <version>${hadoop.version}</version>
-            </dependency>
-            <dependency>
-                <groupId>org.apache.hadoop</groupId>
-                <artifactId>hadoop-aws</artifactId>
-                <version>${hadoop.version}</version>
-            </dependency>
             <dependency>
                 <groupId>junit</groupId>
                 <artifactId>junit</artifactId>
                 <version>4.13.2</version>
                 <scope>test</scope>
             </dependency>
+            <dependency>
+                <groupId>org.assertj</groupId>
+                <artifactId>assertj-core</artifactId>
+                <version>3.26.3</version>
+                <scope>test</scope>
+            </dependency>
             <dependency>
                 <groupId>com.risingwave</groupId>
                 <artifactId>proto</artifactId>
@@ -345,27 +310,27 @@
             <dependency>
                 <groupId>com.google.code.gson</groupId>
                 <artifactId>gson</artifactId>
-                <version>${gson.version}</version>
+                <version>2.11.0</version>
             </dependency>
             <dependency>
                 <groupId>com.google.guava</groupId>
                 <artifactId>guava</artifactId>
-                <version>33.0.0-jre</version>
+                <version>33.3.1-jre</version>
             </dependency>
             <dependency>
                 <groupId>org.apache.httpcomponents</groupId>
                 <artifactId>httpclient</artifactId>
-                <version>4.5.13</version>
+                <version>4.5.14</version>
             </dependency>
             <dependency>
                 <groupId>io.prometheus</groupId>
                 <artifactId>simpleclient_httpserver</artifactId>
-                <version>0.5.0</version>
+                <version>0.16.0</version>
             </dependency>
             <dependency>
                 <groupId>org.xerial</groupId>
                 <artifactId>sqlite-jdbc</artifactId>
-                <version>${sqlite.version}</version>
+                <version>3.47.0.0</version>
             </dependency>
             <dependency>
                 <groupId>software.amazon.awssdk</groupId>
@@ -390,23 +355,9 @@
             <dependency>
                 <groupId>org.apache.hive</groupId>
                 <artifactId>hive-metastore</artifactId>
-                <version>${hive.version}</version>
-            </dependency>
-            <dependency>
-                <groupId>org.apache.hadoop</groupId>
-                <artifactId>hadoop-mapreduce-client-core</artifactId>
-                <version>${hadoop.version}</version>
-            </dependency>
-            <dependency>
-                <groupId>org.apache.hadoop</groupId>
-                <artifactId>hadoop-mapreduce-client-common</artifactId>
-                <version>${hadoop.version}</version>
-            </dependency>
-            <dependency>
-                <groupId>org.apache.hadoop</groupId>
-                <artifactId>hadoop-mapreduce-client-jobclient</artifactId>
-                <version>${hadoop.version}</version>
+                <version>4.0.1</version>
             </dependency>
+            <!-- Enforce jetty version to avoid security vulnerabilities -->
             <dependency>
                 <groupId>org.eclipse.jetty</groupId>
                 <artifactId>jetty-client</artifactId>
@@ -422,16 +373,11 @@
                 <artifactId>jetty-http</artifactId>
                 <version>${jetty.version}</version>
             </dependency>
+            <!-- Enforce snappy version to avoid security vulnerabilities -->
             <dependency>
                 <groupId>org.xerial.snappy</groupId>
                 <artifactId>snappy-java</artifactId>
-                <version>${snappy.version}</version>
-            </dependency>
-            <dependency>
-                <groupId>org.apache.spark</groupId>
-                <artifactId>spark-sql_2.12</artifactId>
-                <version>${spark_sql.version}</version>
-                <scope>test</scope>
+                <version>1.1.10.7</version>
             </dependency>
             <dependency>
                 <groupId>org.testcontainers</groupId>
@@ -466,7 +412,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-checkstyle-plugin</artifactId>
-                <version>3.1.2</version>
+                <version>3.6.0</version>
                 <dependencies>
                     <dependency>
                         <groupId>com.puppycrawl.tools</groupId>
@@ -497,7 +443,7 @@
             <plugin>
                 <groupId>com.diffplug.spotless</groupId>
                 <artifactId>spotless-maven-plugin</artifactId>
-                <version>${spotless.version}</version>
+                <version>2.43.0</version>
                 <configuration>
                     <java>
                         <googleJavaFormat>
diff --git a/java/proto/pom.xml b/java/proto/pom.xml
index f1b5dff96d0f..642b4d378018 100644
--- a/java/proto/pom.xml
+++ b/java/proto/pom.xml
@@ -34,6 +34,11 @@
             <groupId>org.apache.tomcat</groupId>
             <artifactId>annotations-api</artifactId>
         </dependency>
+        <dependency>
+            <groupId>com.google.protobuf</groupId>
+            <artifactId>protobuf-java</artifactId>
+            <version>${protobuf.version}</version>
+        </dependency>
     </dependencies>
 
     <build>
@@ -56,7 +61,7 @@
                     </protocArtifact>
                     <pluginId>grpc-java</pluginId>
                     <pluginArtifact>
-                        io.grpc:protoc-gen-grpc-java:1.49.0:exe:${os.detected.classifier}
+                        io.grpc:protoc-gen-grpc-java:${grpc.version}:exe:${os.detected.classifier}
                     </pluginArtifact>
                     <checkStaleness>true</checkStaleness>
                 </configuration>