[OMID-252] Analyse and fix possible vulnerabilities for 1.1.1 release

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Done
• Assignee: Nihal Jain
• Reporter: Nihal Jain
• Created: 19/Oct/23 07:22
• Updated: 03/Jan/24 09:28
• Resolved: 03/Jan/24 09:28

Description

Here will try and analysis any vulnerabilities which can be fixed before 1.1.1 release. Will create sub tasks as i identiffy them!

CC: stoty rajeshbabu vjasani 

Issue Links

• relates to: OMID-259 Update commons-pool2 to 2.12.0
• relates to: OMID-260 Align mockito version with Hadoop and HBase
• relates to: OMID-261 Move to io.dropwizard.metrics:metrics-core from com.codahale.metrics:metrics-core
• relates to: OMID-262 Move from commons-configuration:commons-configuration to org.apache.commons:commons-configuration2
• relates to: OMID-263 Remove usage of TrustedPrefixesTagInspector as this will be dropped in Snakeyaml 2.1
• relates to: OMID-258 Bump maven plugins/dependencies to latest
• relates to: OMID-264 Fix deprecated WARNING in check-license stage

Sub-Tasks

• Upgrade Netty to 4.1.100.Final: Closed
• Upgrade guava to 32.1.3-jre: Closed
• Bump hbase and other dependencies to latest version: Closed
• Upgrade bouncycastle and move from jdk15on to latest jdk18on: Closed
• Upgrade to phoenix-thirdparty 2.1.0: Closed