Commit 248a4f7
[NO-SNOW] Exclude vulnerable transitive deps from snowflake-jdbc-thin (#1148)
* Fix dependency issues: add hamcrest-core, exclude JDBC vulnerabilities
- Add hamcrest-core:1.3 as explicit test dependency (used by ported
tests: RestRequestTest, JdbcHttpUtilTest, SnowflakeConnectStringTest,
SecretDetectorTest)
- Exclude vulnerable transitive deps from snowflake-jdbc-thin in both
main pom and e2e-jar-test pom:
- grpc-netty-shaded (CVE-2025-55163, CVSS 8.7)
- commons-lang3 (CVE-2025-48924, CVSS 8.8)
- javax.servlet-api (license: CDDL-1.1/GPL-2.0)
- javax.annotation-api (license: CDDL-1.1/GPL-2.0)
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* Trigger CI
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* Update copyright year to 2026
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>1 parent 8ec7c2b commit 248a4f7
1 file changed
+1
-1
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | 1 | | |
2 | 2 | | |
3 | | - | |
| 3 | + | |
4 | 4 | | |
5 | 5 | | |
6 | 6 | | |
| |||
0 commit comments