Skip to content

Commit

Permalink
Bump calcite to 1.36.0, add json-path constraint (deephaven#5181)
Browse files Browse the repository at this point in the history
  • Loading branch information
devinrsmith authored Feb 21, 2024
1 parent a0a0e85 commit 57b5a13
Showing 1 changed file with 8 additions and 1 deletion.
9 changes: 8 additions & 1 deletion sql/build.gradle
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,14 @@ description = 'The Deephaven SQL parser'

dependencies {
api project(':qst')
implementation 'org.apache.calcite:calcite-core:1.34.0'
implementation 'org.apache.calcite:calcite-core:1.36.0'
constraints {
// This constraint can be removed once calcite-core has next release and we can
// pick up the fixed dependency transitively.
implementation('com.jayway.jsonpath:json-path:2.9.0') {
because 'json-path Out-of-bounds Write vulnerability, CVE-2023-51074'
}
}

Classpaths.inheritImmutables(project)

Expand Down

0 comments on commit 57b5a13

Please sign in to comment.