d8dd5719b4
## What changes were proposed in this pull request? Fixes a vulnerability from the GitHub Security Advisory Database: _Moderate severity vulnerability that affects com.puppycrawl.tools:checkstyle_ Checkstyle prior to 8.18 loads external DTDs by default, which can potentially lead to denial of service attacks or the leaking of confidential information. https://github.com/checkstyle/checkstyle/issues/6474 Affected versions: < 8.18 ## How was this patch tested? Ran checkstyle locally. Closes #25432 from Fokko/SPARK-28713. Authored-by: Fokko Driesprong <fokko@apache.org> Signed-off-by: Dongjoon Hyun <dhyun@apple.com>
63 lines
2.8 KiB
Scala
63 lines
2.8 KiB
Scala
/*
|
|
* Licensed to the Apache Software Foundation (ASF) under one or more
|
|
* contributor license agreements. See the NOTICE file distributed with
|
|
* this work for additional information regarding copyright ownership.
|
|
* The ASF licenses this file to You under the Apache License, Version 2.0
|
|
* (the "License"); you may not use this file except in compliance with
|
|
* the License. You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
|
|
addSbtPlugin("com.etsy" % "sbt-checkstyle-plugin" % "3.1.1")
|
|
|
|
// sbt-checkstyle-plugin uses an old version of checkstyle. Match it to Maven's.
|
|
libraryDependencies += "com.puppycrawl.tools" % "checkstyle" % "8.23"
|
|
|
|
// checkstyle uses guava 23.0.
|
|
libraryDependencies += "com.google.guava" % "guava" % "23.0"
|
|
|
|
// need to make changes to uptake sbt 1.0 support in "com.eed3si9n" % "sbt-assembly" % "1.14.5"
|
|
addSbtPlugin("com.eed3si9n" % "sbt-assembly" % "0.11.2")
|
|
|
|
addSbtPlugin("com.typesafe.sbteclipse" % "sbteclipse-plugin" % "5.2.4")
|
|
|
|
addSbtPlugin("net.virtual-void" % "sbt-dependency-graph" % "0.9.2")
|
|
|
|
addSbtPlugin("org.scalastyle" %% "scalastyle-sbt-plugin" % "1.0.0")
|
|
|
|
addSbtPlugin("com.typesafe" % "sbt-mima-plugin" % "0.3.0")
|
|
|
|
// sbt 1.0.0 support: https://github.com/AlpineNow/junit_xml_listener/issues/6
|
|
addSbtPlugin("com.alpinenow" % "junit_xml_listener" % "0.5.1")
|
|
|
|
// need to make changes to uptake sbt 1.0 support in "com.eed3si9n" % "sbt-unidoc" % "0.4.1"
|
|
addSbtPlugin("com.eed3si9n" % "sbt-unidoc" % "0.3.3")
|
|
|
|
// need to make changes to uptake sbt 1.0 support in "com.cavorite" % "sbt-avro-1-7" % "1.1.2"
|
|
addSbtPlugin("com.cavorite" % "sbt-avro" % "0.3.2")
|
|
|
|
addSbtPlugin("io.spray" % "sbt-revolver" % "0.9.1")
|
|
|
|
libraryDependencies += "org.ow2.asm" % "asm" % "7.1"
|
|
|
|
libraryDependencies += "org.ow2.asm" % "asm-commons" % "7.1"
|
|
|
|
// sbt 1.0.0 support: https://github.com/ihji/sbt-antlr4/issues/14
|
|
addSbtPlugin("com.simplytyped" % "sbt-antlr4" % "0.7.13")
|
|
|
|
// Spark uses a custom fork of the sbt-pom-reader plugin which contains a patch to fix issues
|
|
// related to test-jar dependencies (https://github.com/sbt/sbt-pom-reader/pull/14). The source for
|
|
// this fork is published at https://github.com/JoshRosen/sbt-pom-reader/tree/v1.0.0-spark
|
|
// and corresponds to commit b160317fcb0b9d1009635a7c5aa05d0f3be61936 in that repository.
|
|
// In the long run, we should try to merge our patch upstream and switch to an upstream version of
|
|
// the plugin; this is tracked at SPARK-14401.
|
|
|
|
addSbtPlugin("org.spark-project" % "sbt-pom-reader" % "1.0.0-spark")
|