bump: avro 1.12.0 (was 1.11.3)

akka · Sep 30, 2024 · 33f74d9 · 33f74d9
1 parent 2bc2e96
commit 33f74d9
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/project/Dependencies.scala b/project/Dependencies.scala
@@ -180,7 +180,7 @@ object Dependencies {
     libraryDependencies ++= Seq(
         "org.apache.parquet" % "parquet-avro" % "1.14.2", //Apache2
         // override the version brought in by parquet-avro to fix CVE-2023-39410
-        "org.apache.avro" % "avro" % "1.11.3" //Apache2
+        "org.apache.avro" % "avro" % "1.12.0" //Apache2
       )
   )
 
@@ -249,7 +249,7 @@ object Dependencies {
     libraryDependencies ++= Seq(
         // https://github.com/googleapis/java-bigquerystorage/tree/master/proto-google-cloud-bigquerystorage-v1
         "com.google.api.grpc" % "proto-google-cloud-bigquerystorage-v1" % "1.23.2" % "protobuf-src", // ApacheV2
-        "org.apache.avro" % "avro" % "1.11.3" % "provided",
+        "org.apache.avro" % "avro" % "1.12.0" % "provided",
         "org.apache.arrow" % "arrow-vector" % "13.0.0" % "provided",
         "io.grpc" % "grpc-auth" % akka.grpc.gen.BuildInfo.grpcVersion, // ApacheV2
         "com.typesafe.akka" %% "akka-http-spray-json" % AkkaHttpVersion,