upgrade commons-compress and poi (apache#5110)

* upgrade commons-compress and poi * upgrade deps * regen known dependencies
lxk000000 · Mar 27, 2024 · 436195c · 436195c
1 parent 562572a
commit 436195c
Show file tree

Hide file tree

Showing 4 changed files with 199 additions and 373 deletions.
diff --git a/linkis-commons/linkis-storage/pom.xml b/linkis-commons/linkis-storage/pom.xml
@@ -76,7 +76,12 @@
     <dependency>
       <groupId>com.github.pjfanning</groupId>
       <artifactId>excel-streaming-reader</artifactId>
-      <version>4.0.5</version>
+      <version>4.3.0</version>
+    </dependency>
+
+    <dependency>
+      <groupId>org.apache.commons</groupId>
+      <artifactId>commons-compress</artifactId>
     </dependency>
 
     <dependency>

diff --git a/linkis-dist/release-docs/LICENSE b/linkis-dist/release-docs/LICENSE
@@ -261,7 +261,7 @@ See licenses/ for text of these licenses.
     (Apache License, Version 2.0) Apache Commons Codec (commons-codec:commons-codec:1.10 - http://commons.apache.org/proper/commons-codec/)
     (Apache License, Version 2.0) Apache Commons Collections (commons-collections:commons-collections:3.2.2 - http://commons.apache.org/collections/)
     (Apache License, Version 2.0) Apache Commons Collections (org.apache.commons:commons-collections4:4.1 - http://commons.apache.org/proper/commons-collections/)
-    (Apache License, Version 2.0) Apache Commons Compress (org.apache.commons:commons-compress:1.20 - https://commons.apache.org/proper/commons-compress/)
+    (Apache License, Version 2.0) Apache Commons Compress (org.apache.commons:commons-compress:1.26.1 - https://commons.apache.org/proper/commons-compress/)
     (Apache License, Version 2.0) Apache Commons Exec (org.apache.commons:commons-exec:1.3 - http://commons.apache.org/proper/commons-exec/)
     (Apache License, Version 2.0) Apache Commons FileUpload (commons-fileupload:commons-fileupload:1.5 - http://commons.apache.org/proper/commons-fileupload/)
     (Apache License, Version 2.0) Apache Commons IO (commons-io:commons-io:2.7 - https://commons.apache.org/proper/commons-io/)
@@ -288,9 +288,9 @@ See licenses/ for text of these licenses.
     (Apache License, Version 2.0) Apache Log4j JUL Adapter (org.apache.logging.log4j:log4j-jul:2.17.1 - https://logging.apache.org/log4j/2.x/log4j-jul/)
     (Apache License, Version 2.0) Apache Log4j SLF4J Binding (org.apache.logging.log4j:log4j-slf4j-impl:2.17.1 - https://logging.apache.org/log4j/2.x/log4j-slf4j-impl/)
     (Apache License, Version 2.0) Apache Log4j Web (org.apache.logging.log4j:log4j-web:2.6.2 - http://logging.apache.org/log4j/2.x/log4j-web/)
-    (Apache License, Version 2.0) Apache POI (org.apache.poi:poi:5.2.3 - http://poi.apache.org/)
-    (Apache License, Version 2.0) Apache POI (org.apache.poi:poi-ooxml:5.2.3 - http://poi.apache.org/)
-    (Apache License, Version 2.0) Apache POI (org.apache.poi:poi-ooxml-lite:5.2.3 - http://poi.apache.org/)
+    (Apache License, Version 2.0) Apache POI (org.apache.poi:poi:5.2.5 - http://poi.apache.org/)
+    (Apache License, Version 2.0) Apache POI (org.apache.poi:poi-ooxml:5.2.5 - http://poi.apache.org/)
+    (Apache License, Version 2.0) Apache POI (org.apache.poi:poi-ooxml-lite:5.2.5 - http://poi.apache.org/)
     (Apache License, Version 2.0) Apache Velocity (org.apache.velocity:velocity:1.5 - http://velocity.apache.org/engine/releases/velocity-1.5/)
     (Apache License, Version 2.0) ApacheDS I18n (org.apache.directory.server:apacheds-i18n:2.0.0-M15 - http://directory.apache.org/apacheds/1.5/apacheds-i18n)
     (Apache License, Version 2.0) ApacheDS Protocol Kerberos Codec (org.apache.directory.server:apacheds-kerberos-codec:2.0.0-M15 - http://directory.apache.org/apacheds/1.5/apacheds-kerberos-codec)
@@ -420,12 +420,11 @@ See licenses/ for text of these licenses.
     (Apache License, Version 2.0) Spring Web MVC (org.springframework:spring-webmvc:5.2.2.RELEASE - https://github.com/spring-projects/spring-framework)
     (Apache License, Version 2.0) Spring WebFlux (org.springframework:spring-webflux:5.2.2.RELEASE - https://github.com/spring-projects/spring-framework)
     (Apache License, Version 2.0) StAX API (stax:stax-api:1.0.1 - http://stax.codehaus.org/)
-    (Apache License, Version 2.0) Streaming Excel reader (com.github.pjfanning:excel-streaming-reader:4.0.5 - https://github.com/pjfanning/excel-streaming-reader)
+    (Apache License, Version 2.0) Streaming Excel reader (com.github.pjfanning:excel-streaming-reader:4.3.0 - https://github.com/pjfanning/excel-streaming-reader)
     (Apache License, Version 2.0) Woodstox (com.fasterxml.woodstox:woodstox-core:5.2.1 - https://github.com/FasterXML/woodstox)
     (Apache License, Version 2.0) XML Commons Resolver Component (xml-resolver:xml-resolver:1.2 - http://xml.apache.org/commons/components/resolver/)
     (Apache License, Version 2.0) Xerces2 Java (com.rackspace.apache:xerces2-xsd11:2.11.1 - http://xerces.apache.org/xerces2-j/)
     (Apache License, Version 2.0) Xerces2 Java Parser (xerces:xercesImpl:2.9.1 - http://xerces.apache.org/xerces2-j)
-    (Apache License, Version 2.0) XmlBeans (org.apache.xmlbeans:xmlbeans:2.3.0 - http://xmlbeans.apache.org)
     (Apache License, Version 2.0) aircompressor (io.airlift:aircompressor:0.10 - http://github.com/airlift/aircompressor)
     (Apache License, Version 2.0) archaius-core (com.netflix.archaius:archaius-core:0.7.6 - https://github.com/Netflix/archaius)
     (Apache License, Version 2.0) eigenbase-properties (net.hydromatic:eigenbase-properties:1.1.5 - http://github.com/julianhyde/eigenbase-properties)
@@ -504,7 +503,7 @@ See licenses/ for text of these licenses.
     (Apache License, version 2.0) chill-java (com.twitter:chill-java:0.7.6 - https://github.com/twitter/chill)
     (Apache License, version 2.0) chill_2.11 (com.twitter:chill_2.11:0.7.6 - https://github.com/twitter/chill)
     (Apache License, version 2.0) druid (com.alibaba:druid:1.1.22 - https://github.com/alibaba/druid)
-    (Apache License, version 2.0) excel-streaming-reader (com.github.pjfanning:excel-streaming-reader:4.0.5 - https://github.com/pjfanning/excel-streaming-reader)
+    (Apache License, version 2.0) excel-streaming-reader (com.github.pjfanning:excel-streaming-reader:4.3.0 - https://github.com/pjfanning/excel-streaming-reader)
     (Apache License, version 2.0) failureaccess (com.google.guava:failureaccess:1.0.1)
     (Apache License, version 2.0) flink-connector-base (org.apache.flink:flink-connector-base:1.12.2 - https://flink.apache.org/)
     (Apache License, version 2.0) flink-connector-files (org.apache.flink:flink-connector-files:1.12.2 - https://flink.apache.org/)
@@ -561,9 +560,9 @@ See licenses/ for text of these licenses.
     (Apache License, version 2.0) okhttp:Square’s meticulous HTTP client for Java and Kotlin. (com.squareup.okhttp:okhttp:2.7.5 - https://square.github.io/okhttp/)
     (Apache License, version 2.0) okio:A modern I/O API for Java (com.squareup.okio:okio:1.6.0 - https://github.com/square/okio/)
     (Apache License, version 2.0) opencsv:A simple library for reading and writing CSV in Java (net.sf.opencsv:opencsv:2.3 - http://opencsv.sf.net)
-    (Apache License, version 2.0) POI Shared Strings Memory efficient Shared Strings Table implementation for POI streaming (com.github.pjfanning:poi-shared-strings:2.5.6 - https://github.com/pjfanning/poi-shared-strings)
+    (Apache License, version 2.0) POI Shared Strings Memory efficient Shared Strings Table implementation for POI streaming (com.github.pjfanning:poi-shared-strings:2.8.0 - https://github.com/pjfanning/poi-shared-strings)
     (Apache License, version 2.0) snappy-java: A fast compression/decompression library (org.xerial.snappy:snappy-java:1.1.7.7 - https://github.com/xerial/snappy-java)
-    (Apache License, version 2.0) SparseBitSet: An efficient sparse bitset implementation for Java (com.zaxxer:SparseBitSet:1.2 - https://github.com/brettwooldridge/SparseBitSet)
+    (Apache License, version 2.0) SparseBitSet: An efficient sparse bitset implementation for Java (com.zaxxer:SparseBitSet:1.3 - https://github.com/brettwooldridge/SparseBitSet)
     (Apache License, version 2.0) Spring Plugin - Core Core plugin infrastructure (org.springframework.plugin:spring-plugin-core:2.0.0.RELEASE - https://github.com/spring-projects/spring-plugin)
     (Apache License, version 2.0) Spring Plugin - Metadata Extension package for metadata based plugins (org.springframework.plugin:spring-plugin-metadata:2.0.0.RELEASE - https://github.com/spring-projects/spring-plugin)
     (Apache License, version 2.0) spring-security-crypto (org.springframework.security:spring-security-crypto:5.4.4 -  https://spring.io/projects/spring-security)
@@ -579,7 +578,7 @@ See licenses/ for text of these licenses.
     (Apache License, version 2.0) swagger-annotations (io.swagger:swagger-annotations:1.5.22 - https://github.com/swagger-api)
     (Apache License, version 2.0) swagger-models (io.swagger:swagger-models:1.5.22 - https://github.com/swagger-api)
     (Apache License, version 2.0) token-provider (org.apache.kerby:token-provider:1.0.1)
-    (Apache License, version 2.0) XmlBeans:XmlBeans main jar (org.apache.xmlbeans:xmlbeans:5.1:1 - https://xmlbeans.apache.org/)
+    (Apache License, version 2.0) XmlBeans:XmlBeans main jar (org.apache.xmlbeans:xmlbeans:5.2.0 - https://xmlbeans.apache.org/)
     (Apache License, version 2.0) XStream Core (com.thoughtworks.xstream:xstream:1.4.18)
     (Apache License, version 2.0) Apache ZooKeeper - Server (org.apache.zookeeper:zookeeper:3.4.6 - https://zookeeper.apache.org/)
     (Apache License, version 2.0) Apache twill (org.apache.twill:* - https://twill.apache.org/)
@@ -650,7 +649,7 @@ See licenses/ for text of these licenses.
     (The 2-Clause BSD License) AntLR Parser Generator (antlr:antlr:2.7.7 - http://www.antlr.org/)
     (The 2-Clause BSD License) JLine (jline:jline:2.12 - http://nexus.sonatype.org/oss-repository-hosting.html/jline)
     (The 2-Clause BSD License) Stax2 API (org.codehaus.woodstox:stax2-api:4.2 - http://github.com/FasterXML/stax2-api)
-    (The 2-Clause BSD License) curvesapi (com.github.virtuald:curvesapi:1.07 - https://github.com/virtuald/curvesapi)
+    (The 2-Clause BSD License) curvesapi (com.github.virtuald:curvesapi:1.08 - https://github.com/virtuald/curvesapi)
     (The 2-Clause BSD License) xmlenc Library (xmlenc:xmlenc:0.52 - http://xmlenc.sourceforge.net)
     (The 2-Clause BSD License) postgresql (org.postgresql:postgresql:42.3.1 - https://github.com/pgjdbc/pgjdbc/tree/REL42.3.1)
     (The 3-Clause BSD License) (WTFPL) Reflections (org.reflections:reflections:0.9.10 - http://github.com/ronmamo/reflections)

diff --git a/pom.xml b/pom.xml
@@ -169,7 +169,7 @@
 
     <knife4j.version>3.0.3</knife4j.version>
     <springfox.version>3.0.0</springfox.version>
-    <poi.version>5.2.3</poi.version>
+    <poi.version>5.2.5</poi.version>
     <reflections.version>0.9.12</reflections.version>
 
     <!-- dbs -->
@@ -190,7 +190,7 @@
     <commons-math3.version>3.6.1</commons-math3.version>
     <commons-io.version>2.11.0</commons-io.version>
     <commons-beanutils.version>1.9.4</commons-beanutils.version>
-    <commons-compress.version>1.21</commons-compress.version>
+    <commons-compress.version>1.26.1</commons-compress.version>
     <commons-configuration.version>1.10</commons-configuration.version>
     <commons-exec.version>1.3</commons-exec.version>
     <commons-fileupload.version>1.5</commons-fileupload.version>