apache / apache/linkis

[Feature][Linkis]Security Work Order - Basic Tool Library Dependency Version Upgrade

Open
#5,308 1 comment 0 reactions 0 assignees View on GitHub
feature
Dominant language
Java
Stars
3.4k
Forks
1.2k
PR merge metrics
No merged PRs in 30d

Description

### Search before asking


- [x] I had searched in the `https://github.com/apache/linkis/issues` and found no similar feature requirement.



### Problem Description


Linkis使用的基础工具库版本存在安全漏洞,需要升级Guava和Jackson到安全版本。

### Description


1. guava.version: 从32.0.0-jre升级到33.2.1-jre,修复已知安全漏洞
2. jackson-bom.version: 从2.13.4.20221013升级到2.15.0,修复已知安全漏洞
3. 确保升级后的依赖与现有代码兼容

### Use case


确保Linkis系统在生产环境中的安全性,修复已知的基础工具库漏洞。

### Solutions


1. 升级guava.version到33.2.1-jre
2. 升级jackson-bom.version到2.15.0
3. 验证所有依赖升级后的兼容性和稳定性
4. 进行全面的测试验证

### Anything else


none

### Are you willing to submit a PR?


- [x] Yes I am willing to submit a PR!

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.