PRSP-3603 Bump org.xerial.snappy:snappy-java to latest version to add…

…ress CVEs (#164)

* Bump org.xerial.snappy:snappy-java from 1.1.8.4 to 1.1.10.5

* Add licenses

licenses.yaml

@@ -3115,7 +3115,7 @@ name: snappy-java
 license_category: binary
 module: hadoop-client
 license_name: Apache License version 2.0
-version: 1.0.4.1
+version: 1.1.10.5
 libraries:
   - org.xerial.snappy: snappy-java
 notices:
@@ -3565,7 +3565,7 @@ name: snappy-java
 license_category: binary
 module: extensions/druid-kafka-indexing-service
 license_name: Apache License version 2.0
-version: 1.1.8.4
+version: 1.1.10.5
 libraries:
   - org.xerial.snappy: snappy-java
 
@@ -4774,7 +4774,7 @@ libraries:
 
 name: snappy-java
 license_category: binary
-version: 1.1.8.4
+version: 1.1.10.5
 module: druid-ranger-security
 license_name: Apache License version 2.0
 libraries:

pom.xml

@@ -814,7 +814,7 @@
             <dependency>
                 <groupId>org.xerial.snappy</groupId>
                 <artifactId>snappy-java</artifactId>
-                <version>1.1.10.4</version>
+                <version>1.1.10.5</version>
             </dependency>
             <dependency>
                 <groupId>com.google.protobuf</groupId>