Dependency updates: asm 9.3 -> 9.4, bytebuddy 1.12.12 -> 1.12.18 (ope…

…nsearch-project#4889) Signed-off-by: Andriy Redko <[email protected]> Signed-off-by: Andriy Redko <[email protected]>
rursprung · Oct 25, 2022 · 2268af2 · 2268af2
1 parent 1a40bd5
commit 2268af2
Show file tree

Hide file tree

Showing 18 changed files with 14 additions and 11 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -71,8 +71,9 @@ Inspired from [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 - Exclude jettison version brought in with hadoop-minicluster. ([#4787](https://github.com/opensearch-project/OpenSearch/pull/4787))
 - Bump protobuf-java to 3.21.7 in repository-gcs and repository-hdfs ([#4790](https://github.com/opensearch-project/OpenSearch/pull/4790))
 - Bump reactor-netty-http to 1.0.24 in repository-azure ([#4880](https://github.com/opensearch-project/OpenSearch/pull/4880))
-- Bumps `protobuf-java` from 3.21.7 to 3.21.8
+- Bumps `protobuf-java` from 3.21.7 to 3.21.8 ([#4886](https://github.com/opensearch-project/OpenSearch/pull/4886))
 - Upgrade netty to 4.1.84.Final ([#4893](https://github.com/opensearch-project/OpenSearch/pull/4893))
+- Dependency updates: asm 9.3 -> 9.4, bytebuddy 1.12.12 -> 1.12.18 ([#4889](https://github.com/opensearch-project/OpenSearch/pull/4889))
 
 ### Changed
 - Dependency updates (httpcore, mockito, slf4j, httpasyncclient, commons-codec) ([#4308](https://github.com/opensearch-project/OpenSearch/pull/4308))

diff --git a/buildSrc/version.properties b/buildSrc/version.properties
@@ -14,9 +14,10 @@ jackson_databind  = 2.13.4.2
 snakeyaml         = 1.32
 icu4j             = 70.1
 supercsv          = 2.4.0
+# Update to 2.17.2+ is breaking OpenSearchJsonLayout (see https://issues.apache.org/jira/browse/LOG4J2-3562) 
 log4j             = 2.17.1
 slf4j             = 1.7.36
-asm               = 9.3
+asm               = 9.4
 jettison          = 1.5.1
 
 # when updating the JNA version, also update the version in buildSrc/build.gradle
@@ -45,9 +46,10 @@ bouncycastle=1.70
 randomizedrunner  = 2.7.1
 junit             = 4.13.2
 hamcrest          = 2.1
+# Update to 4.8.0 is using reflection without SecurityManager checks (fails with java.security.AccessControlException)
 mockito           = 4.7.0
 objenesis         = 3.2
-bytebuddy         = 1.12.12
+bytebuddy         = 1.12.18
 
 # benchmark dependencies
 jmh               = 1.35
diff --git a/modules/lang-expression/licenses/asm-9.3.jar.sha1 b/modules/lang-expression/licenses/asm-9.3.jar.sha1
diff --git a/modules/lang-expression/licenses/asm-9.4.jar.sha1 b/modules/lang-expression/licenses/asm-9.4.jar.sha1
@@ -0,0 +1 @@
+b4e0e2d2e023aa317b7cfcfc916377ea348e07d1
diff --git a/modules/lang-expression/licenses/asm-commons-9.3.jar.sha1 b/modules/lang-expression/licenses/asm-commons-9.3.jar.sha1
diff --git a/modules/lang-expression/licenses/asm-commons-9.4.jar.sha1 b/modules/lang-expression/licenses/asm-commons-9.4.jar.sha1
@@ -0,0 +1 @@
+8fc2810ddbcbbec0a8bbccb3f8eda58321839912
diff --git a/modules/lang-expression/licenses/asm-tree-9.3.jar.sha1 b/modules/lang-expression/licenses/asm-tree-9.3.jar.sha1
diff --git a/modules/lang-expression/licenses/asm-tree-9.4.jar.sha1 b/modules/lang-expression/licenses/asm-tree-9.4.jar.sha1
@@ -0,0 +1 @@
+a99175a17d7fdc18cbcbd0e8ea6a5d276844190a
diff --git a/modules/lang-painless/licenses/asm-9.3.jar.sha1 b/modules/lang-painless/licenses/asm-9.3.jar.sha1
diff --git a/modules/lang-painless/licenses/asm-9.4.jar.sha1 b/modules/lang-painless/licenses/asm-9.4.jar.sha1
@@ -0,0 +1 @@
+b4e0e2d2e023aa317b7cfcfc916377ea348e07d1
diff --git a/modules/lang-painless/licenses/asm-analysis-9.3.jar.sha1 b/modules/lang-painless/licenses/asm-analysis-9.3.jar.sha1
diff --git a/modules/lang-painless/licenses/asm-analysis-9.4.jar.sha1 b/modules/lang-painless/licenses/asm-analysis-9.4.jar.sha1
@@ -0,0 +1 @@
+0a5fec9dfc039448d4fd098fbaffcaf55373b223
diff --git a/modules/lang-painless/licenses/asm-commons-9.3.jar.sha1 b/modules/lang-painless/licenses/asm-commons-9.3.jar.sha1
diff --git a/modules/lang-painless/licenses/asm-commons-9.4.jar.sha1 b/modules/lang-painless/licenses/asm-commons-9.4.jar.sha1
@@ -0,0 +1 @@
+8fc2810ddbcbbec0a8bbccb3f8eda58321839912
diff --git a/modules/lang-painless/licenses/asm-tree-9.3.jar.sha1 b/modules/lang-painless/licenses/asm-tree-9.3.jar.sha1
diff --git a/modules/lang-painless/licenses/asm-tree-9.4.jar.sha1 b/modules/lang-painless/licenses/asm-tree-9.4.jar.sha1
@@ -0,0 +1 @@
+a99175a17d7fdc18cbcbd0e8ea6a5d276844190a
diff --git a/modules/lang-painless/licenses/asm-util-9.3.jar.sha1 b/modules/lang-painless/licenses/asm-util-9.3.jar.sha1
diff --git a/modules/lang-painless/licenses/asm-util-9.4.jar.sha1 b/modules/lang-painless/licenses/asm-util-9.4.jar.sha1
@@ -0,0 +1 @@
+ab1e0a84b72561dbaf1ee260321e72148ebf4b19