[ORC-883] Dependency Audit and QA

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.8.0
• Fix Version/s: 1.8.0
• Component/s: Java
• Assignee: William Hyun
• Reporter: Dongjoon Hyun
• Created: 29/Jul/21 20:19
• Updated: 03/Sep/22 22:43
• Resolved: 09/Aug/22 06:00

Issue Links

• is related to: ORC-1248 Redefine Hadoop dependency for Apache ORC 1.8.0

Sub-Tasks

• Publish test-jar to maven central: Closed
• Enforce maven-dependency-plugin: Closed
• Pin scala-library to 2.12.10: Closed
• Pin protobuf-java to 2.5.0: Closed
• Bump auto-service from 1.0-rc7 to 1.0: Closed
• Spark bench objenesis should be the same as Spark.: Closed
• Upgrade objenesis to 3.2 in Spark benchmark: Closed
• Bump checkstyle to 10.3.2: Closed
• Bump avro.version to 1.11.1: Closed
• Downgrade org.jetbrains.annotations to 17.0.0: Closed
• Pin org.jetbrains.annotations dependency to 17.0.0: Closed
• Pin minimum support Hadoop version to 2.2.0: Closed
• Add dependabot: Closed
• Remove javax.xml.bind:jaxb-api dependency: Closed
• Remove commons-io 2.1 dependency: Closed
• Remove threetenbp dependency: Closed
• Pin gson to 2.2.4: Closed
• Pin jmh 1.20: Closed
• Pin maven-dependency-plugin to 3.1.2: Closed
• Bump slf4j.version from 1.7.30 to 1.7.32: Closed
• Bump jackson.version from 2.12.2 to 2.12.4: Closed
• Bump jettison from 1.1 to 1.4.1: Closed
• Bump opencsv from 3.9 to 5.5.1: Closed
• Bump kryo-shaded from 3.0.3 to 4.0.2: Closed
• Bump zookeeper from 3.6.2 to 3.7.0: Closed
• Bump objenesis from 3.1 to 3.2: Closed
• Bump guava version to 28.1-jre: Closed
• Bump mockito-core from 3.7.0 to 3.11.2: Closed
• Bump apache from 23 to 24: Closed
• Bump annotations from 17.0.0 to 21.0.1: Closed
• Bump annotations from 21.0.1 to 22.0.0: Closed
• Use junit.version and mockito.version property and bump junit to 5.7.2: Closed
• Bump threeten-extra from 1.5.0 to 1.7.0: Closed
• Bump junit-vintage-engine from 5.7.0 to 5.7.2: Closed
• Bump checkstyle from 8.44 to 8.45.1: Closed
• Bump byte-buddy from 1.10.19 to 1.11.12: Closed
• Bump commons-csv from 1.8 to 1.9.0: Closed
• Use snappy-java 1.1.8.4 in bench/core to support Apple Silicon: Closed
• Use Hadoop 3.3.1 in bench module: Closed
• Exclude Spark transitive avro/parquet dependency from Spark benchmark: Closed
• Remove janino dependency in favor of Spark's transitive dependency: Closed
• Remove orc-mapreduce build warnings due to overlapping resources: Closed
• Remove io.netty:netty from Spark benchmark: Closed
• Remove junit-vintage-engine from core module: Closed
• Remove junit-vintage-engine from `mapreduce/tools` module: Closed
• Remove hamcrest-core test dependency: Closed
• Bump netty-all from 4.1.42.Final to 4.1.66.Final: Closed
• Bump aircompressor to 0.20: Closed
• Unified json library: Closed
• Bump netty-all from 4.1.66.Final to 4.1.67.Final: Closed
• Bump maven-assembly-plugin to 3.4.1: Closed
• Bump checkstyle to 10.3.1: Closed
• Bump annotations from 22.0.0 to 23.0.0: Closed
• Remove commons-codec dependency and use java.util.Base64: Closed
• Bump commons-cli to 1.5: Closed