[HBASE-23069] periodic dependency bump for Sep 2019

• Type: Improvement
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Fix Version/s: 3.0.0-alpha-1, 2.3.0
• Component/s: dependencies
• Hadoop Flags: Reviewed

Release Note

caffeine: 2.6.2 => 2.8.1
commons-codec: 1.10 => 1.13
commons-io: 2.5 => 2.6
disrupter: 3.3.6 => 3.4.2
httpcore: 4.4.6 => 4.4.13
jackson: 2.9.10 => 2.10.1
jackson.databind: 2.9.10.1 => 2.10.1
jetty: 9.3.27.v20190418 => 9.3.28.v20191105
protobuf.plugin: 0.5.0 => 0.6.1
zookeeper: 3.4.10 => 3.4.14
slf4j: 1.7.25 => 1.7.30
rat: 0.12 => 0.13
asciidoctor: 1.5.5 => 1.5.8
asciidoctor.pdf: 1.5.0-alpha.15 => 1.5.0-rc.2
error-prone: 2.3.3 => 2.3.4

• Assignee: Michael Stack
• Reporter: Sean Busbey
• Created: 24/Sep/19 16:49
• Updated: 24/Jun/22 17:55
• Resolved: 27/Jan/20 04:46

Description

we should do a pass to see if there are any dependencies we can bump. (also follow-on we should automate this check)

Issue Links

• relates to: HBASE-23075 Upgrade jackson to version 2.9.10 due to CVE-2019-16335 and CVE-2019-14540
• links to: GitHub Pull Request #1082

Sub-Tasks

• [hbase-thirdparty] Upgrade the dependencies for hbase-thirdparty: Closed