chore(deps): upgrade dependency io.netty:netty-all to address vulnera…

…bility (datahub-project#4840)
infobip · May 5, 2022 · b479491 · b479491
1 parent e5a9a52
commit b479491
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 2 deletions.
diff --git a/build.gradle b/build.gradle
@@ -186,7 +186,7 @@ subprojects {
     dependencies {
       testCompile externalDependency.testng
       constraints {
-        implementation('io.netty:netty-all:4.1.44.Final')
+        implementation('io.netty:netty-all:4.1.68.Final')
         implementation('org.apache.commons:commons-compress:1.21')
         implementation('org.apache.velocity:velocity-engine-core:2.3')
         implementation('org.hibernate:hibernate-validator:6.0.20.Final')

diff --git a/datahub-frontend/play.gradle b/datahub-frontend/play.gradle
@@ -25,7 +25,7 @@ dependencies {
     play('com.nimbusds:nimbus-jose-jwt:7.9')
     play('com.typesafe.akka:akka-actor_2.11:2.5.16')
     play('net.minidev:json-smart:2.4.1')
-    play('io.netty:netty-all:4.1.44.Final')
+    play('io.netty:netty-all:4.1.68.Final')
   }
   play project(":datahub-graphql-core")
   play project(":metadata-service:auth-api")

diff --git a/metadata-integration/java/spark-lineage/build.gradle b/metadata-integration/java/spark-lineage/build.gradle
@@ -149,6 +149,7 @@ shadowJar {
   relocate 'mozilla', 'datahub.spark2.shaded.mozilla'
   relocate 'com.typesafe','datahub.spark2.shaded.typesafe'
   relocate 'io.opentracing','datahub.spark2.shaded.io.opentracing'
+  relocate 'io.netty','datahub.spark2.shaded.io.netty'
   finalizedBy checkShadowJar
 }