[SNOW-843760] Update pom.xml corresponding to Wiz vulnerability scan (#…

…546)

* update pom for vulns

* update pom

* use fasterxml version

* remove hadoop exclusion

* mvn install passes

* passes

* autoformatting

* remove dependency pom

* relocate parquet-hadoop

* dont relocate

* relocate just airlift not parquet-hadoop

pom.xml

@@ -45,7 +45,7 @@
  <commonstext.version>1.10.0</commonstext.version>
  <fasterxml.version>2.14.0</fasterxml.version>
  <guava.version>32.0.1-jre</guava.version>
- <hadoop.version>3.3.5</hadoop.version>
+ <hadoop.version>3.3.6</hadoop.version>
  <jacoco.skip.instrument>true</jacoco.skip.instrument>
  <jacoco.version>0.8.5</jacoco.version>
  <license.processing.dependencyJarsDir>${project.build.directory}/dependency-jars</license.processing.dependencyJarsDir>
@@ -56,9 +56,9 @@
  <maven.compiler.target>1.8</maven.compiler.target>
  <net.minidev.version>2.4.9</net.minidev.version>
  <netty.version>4.1.94.Final</netty.version>
- <nimbusds.version>9.9.3</nimbusds.version>
+ <nimbusds.version>9.31</nimbusds.version>
  <objenesis.version>3.1</objenesis.version>
- <parquet.version>1.12.3</parquet.version>
+ <parquet.version>1.13.1</parquet.version>
  <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
  <protobuf.version>3.19.6</protobuf.version>
  <shadeBase>net.snowflake.ingest.internal</shadeBase>
@@ -184,6 +184,10 @@
  <groupId>dnsjava</groupId>
  <artifactId>dnsjava</artifactId>
  </exclusion>
+ <exclusion>
+ <groupId>io.dropwizard.metrics</groupId>
+ <artifactId>metrics-core</artifactId>
+ </exclusion>
  <exclusion>
  <groupId>javax.activation</groupId>
  <artifactId>activation</artifactId>
@@ -1015,6 +1019,10 @@
  <pattern>javax.activation</pattern>
  <shadedPattern>${shadeBase}.javax.activation</shadedPattern>
  </relocation>
+ <relocation>
+ <pattern>io.airlift.compress</pattern>
+ <shadedPattern>${shadeBase}.io.airlift.compress</shadedPattern>
+ </relocation>
  </relocations>
  <filters>
  <filter>

scripts/process_licenses.py

@@ -56,6 +56,7 @@
  "org.apache.parquet:parquet-common": APACHE_LICENSE,
  "org.apache.parquet:parquet-format-structures": APACHE_LICENSE,
  "com.github.luben:zstd-jni": BSD_2_CLAUSE_LICENSE,
+ "io.airlift:aircompressor": APACHE_LICENSE,
 }