Move hadoop dependency management to parent pom.

1 files changed, 91 insertions, 0 deletions

diff --git a/parent/pom.xml b/parent/pom.xml
index afec99ee8c1..884b208d997 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -442,6 +442,7 @@
             </build>
         </profile>
     </profiles>
+
     <dependencyManagement>
         <dependencies>
             <!-- Please keep this list lexically sorted by groupId, then artifactId.-->
@@ -1084,6 +1085,89 @@
                 <artifactId>json-smart</artifactId>
                 <version>${json-smart.version}</version>
             </dependency>
+            <dependency>
+                <!-- Force fresh woodstox-core without security issue hadoop-3.3.4 -->
+                <groupId>com.fasterxml.woodstox</groupId>
+                <artifactId>woodstox-core</artifactId>
+                <version>${woodstox.version}</version>
+            </dependency>
+            <dependency>
+                <!-- Force fresh jersey-json without security issue hadoop-3.3.4 -->
+                <groupId>com.sun.jersey</groupId>
+                <artifactId>jersey-json</artifactId>
+                <version>${sun-jersey-json.version}</version>
+            </dependency>
+            <dependency>
+                <!-- Force fresh jettison without security issue hadoop-3.3.4 -->
+                <groupId>org.codehaus.jettison</groupId>
+                <artifactId>jettison</artifactId>
+                <version>${jettison.version}</version>
+            </dependency>
+            <dependency>
+                <!-- Transitive dependencies from pig-0.16 up-to-date -->
+                <groupId>tomcat</groupId>
+                <artifactId>jasper-runtime</artifactId>
+                <version>${tomcat-jasper.version}</version>
+            </dependency>
+            <dependency>
+                <!-- Transitive dependencies from pig-0.16 up-to-date -->
+                <groupId>tomcat</groupId>
+                <artifactId>jasper-compiler</artifactId>
+                <version>${tomcat-jasper.version}</version>
+            </dependency>
+            <!-- Hadoop dependencies -->
+            <dependency>
+                <groupId>org.apache.hadoop</groupId>
+                <artifactId>hadoop-common</artifactId>
+                <version>${hadoop.version}</version>
+                <exclusions>
+                    <exclusion>
+                        <groupId>log4j</groupId>
+                        <artifactId>log4j</artifactId>
+                    </exclusion>
+                    <exclusion>
+                        <groupId>org.slf4j</groupId>
+                        <artifactId>slf4j-log4j12</artifactId>
+                    </exclusion>
+                </exclusions>
+            </dependency>
+            <dependency>
+                <groupId>org.apache.hadoop</groupId>
+                <artifactId>hadoop-client</artifactId>
+                <version>${hadoop.version}</version>
+                <exclusions>
+                    <exclusion>
+                        <groupId>log4j</groupId>
+                        <artifactId>log4j</artifactId>
+                    </exclusion>
+                    <exclusion>
+                        <groupId>org.slf4j</groupId>
+                        <artifactId>slf4j-log4j12</artifactId>
+                    </exclusion>
+                </exclusions>
+            </dependency>
+            <dependency>
+                <groupId>org.apache.pig</groupId>
+                <artifactId>pig</artifactId>
+                <version>${pig.version}</version>
+                <classifier>h2</classifier>
+            </dependency>
+            <dependency>
+                <!-- Hadoop test dependency -->
+                <groupId>org.apache.hadoop</groupId>
+                <artifactId>hadoop-minicluster</artifactId>
+                <version>${hadoop.version}</version>
+                <exclusions>
+                    <exclusion>
+                        <groupId>log4j</groupId>
+                        <artifactId>log4j</artifactId>
+                    </exclusion>
+                    <exclusion>
+                        <groupId>org.slf4j</groupId>
+                        <artifactId>slf4j-log4j12</artifactId>
+                    </exclusion>
+                </exclusions>
+            </dependency>
         </dependencies>
     </dependencyManagement>
 
@@ -1117,7 +1201,10 @@
         <felix.version>7.0.1</felix.version>
         <felix.log.version>1.0.1</felix.log.version>
         <findbugs.version>3.0.2</findbugs.version> <!-- Should be kept in sync with guava -->
+        <groovy.version>3.0.13</groovy.version>
+        <hadoop.version>3.3.4</hadoop.version>
         <hdrhistogram.version>2.1.12</hdrhistogram.version>
+        <jettison.version>1.5.1</jettison.version>
         <jetty.version>9.4.49.v20220914</jetty.version>
         <jetty-alpn.version>1.1.3.v20160715</jetty-alpn.version>
         <jjwt.version>0.11.2</jjwt.version>
@@ -1149,11 +1236,15 @@
         <onnxruntime.version>1.12.1</onnxruntime.version> <!-- WARNING: sync cloud-tenant-base-dependencies-enforcer/pom.xml -->
         <org.json.version>20220320</org.json.version>
         <org.lz4.version>1.8.0</org.lz4.version>
+        <pig.version>0.16.0</pig.version>
         <prometheus.client.version>0.6.0</prometheus.client.version>
         <protobuf.version>3.21.7</protobuf.version>
         <spifly.version>1.3.5</spifly.version>
+        <sun-jersey-json.version>1.19.4</sun-jersey-json.version>
         <surefire.version>2.22.2</surefire.version>
+        <tomcat-jasper.version>5.5.23</tomcat-jasper.version>
         <wiremock.version>2.34.0</wiremock.version>
+        <woodstox.version>6.4.0</woodstox.version>
         <zookeeper.client.version>3.8.0</zookeeper.client.version>
 
         <doclint>all</doclint>