Bump avro to 1.11.3

See CVE-2023-39410 for vulnerablity in avro 1.11.2 and below Signed-off-by: Boxuan Li <[email protected]> (cherry picked from commit a70df84) # Conflicts: # pom.xml
JanusGraph · Oct 5, 2023 · 0dd7138 · 0dd7138
1 parent 1f7b149
commit 0dd7138
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/pom.xml b/pom.xml
@@ -57,6 +57,7 @@
     <properties>
         <titan.compatible-versions>1.0.0,1.1.0-SNAPSHOT</titan.compatible-versions>
         <tinkerpop.version>3.5.7</tinkerpop.version>
+        <avro.version>1.11.3</avro.version>
         <junit-platform.version>1.10.0</junit-platform.version>
         <junit.version>5.10.0</junit.version>
         <mockito.version>4.11.0</mockito.version>
@@ -743,7 +744,7 @@
             <dependency>
                 <groupId>org.apache.avro</groupId>
                 <artifactId>avro</artifactId>
-                <version>1.11.1</version>
+                <version>${avro.version}</version>
             </dependency>
             <dependency>
                 <artifactId>jboss-logging</artifactId>