From 987004426bcbe52f91e970cf7a2396c473bae9ed Mon Sep 17 00:00:00 2001
From: "snyk-io[bot]" <141718529+snyk-io[bot]@users.noreply.github.com>
Date: Sun, 23 Nov 2025 22:58:58 +0000
Subject: [PATCH] fix: packaging/hudi-flink-bundle/pom.xml to reduce
 vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEDERBY-6069877
---
 packaging/hudi-flink-bundle/pom.xml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/packaging/hudi-flink-bundle/pom.xml b/packaging/hudi-flink-bundle/pom.xml
index 6a4764b34789e..fd056f6d21a24 100644
--- a/packaging/hudi-flink-bundle/pom.xml
+++ b/packaging/hudi-flink-bundle/pom.xml
@@ -37,7 +37,7 @@
     <javax.servlet.version>3.1.0</javax.servlet.version>
     <!-- override to be same with flink 1.15.x -->
     <parquet.version>${flink.format.parquet.version}</parquet.version>
-    <hive.version>2.3.4</hive.version>
+    <hive.version>4.2.0</hive.version>
     <thrift.version>0.9.3</thrift.version>
   </properties>
 
@@ -616,7 +616,7 @@
     <profile>
       <id>flink-bundle-shade-hive1</id>
       <properties>
-        <hive.version>1.1.0</hive.version>
+        <hive.version>4.2.0</hive.version>
         <thrift.version>0.9.2</thrift.version>
         <flink.bundle.hive.scope>compile</flink.bundle.hive.scope>
       </properties>
@@ -624,7 +624,7 @@
     <profile>
       <id>flink-bundle-shade-hive2</id>
       <properties>
-        <hive.version>2.3.1</hive.version>
+        <hive.version>4.2.0</hive.version>
         <flink.bundle.hive.scope>compile</flink.bundle.hive.scope>
       </properties>
       <dependencies>
@@ -639,7 +639,7 @@
     <profile>
       <id>flink-bundle-shade-hive3</id>
       <properties>
-        <hive.version>3.1.2</hive.version>
+        <hive.version>4.2.0</hive.version>
         <flink.bundle.hive.scope>compile</flink.bundle.hive.scope>
       </properties>
       <dependencies>