Update Tika to 1.22; address security alerts. (#337)

- Update Tika to 1.22 - pom.xml surgery to get aut to build again with --packages
archivesunleashed · Aug 6, 2019 · 2d14b921e2438f79318e97e8fdf62631cd535471 · 2d14b92
1 parent 605afcc
commit 2d14b921e2438f79318e97e8fdf62631cd535471
Unified Split

Showing with 41 additions and 1 deletion.

+41 −1 pom.xml
diff --git a/pom.xml b/pom.xml
@@ -42,7 +42,7 @@
    <surefire.plugin.version>2.18.1</surefire.plugin.version>
    <jacoco.plugin.version>0.7.5.201505241946</jacoco.plugin.version>
    <versions.plugin.version>2.1</versions.plugin.version>
-  
-    <tika.version>1.20</tika.version>
+  
+    <tika.version>1.22</tika.version>
  </properties>
  <licenses>
@@ -660,6 +660,22 @@
          <groupId>javax.ws.rs</groupId>
          <artifactId>javax.ws.rs-api</artifactId>
        </exclusion>
+  
+        <exclusion>
+  
+          <groupId>com.google.guava</groupId>
+  
+          <artifactId>guava</artifactId>
+  
+        </exclusion>
+  
+        <exclusion>
+  
+          <groupId>org.apache.ant</groupId>
+  
+          <artifactId>ant</artifactId>
+  
+        </exclusion>
+  
+        <exclusion>
+  
+          <groupId>com.google.protobuf</groupId>
+  
+          <artifactId>protobuf-java</artifactId>
+  
+        </exclusion>
+  
+        <exclusion>
+  
+          <groupId>com.sun.activation</groupId>
+  
+          <artifactId>jakarta.activation</artifactId>
+  
+        </exclusion>
      </exclusions>
    </dependency>
    <dependency>
@@ -671,6 +687,14 @@
          <groupId>com.optimaize.languagedetector</groupId>
          <artifactId>language-detector</artifactId>
        </exclusion>
+  
+        <exclusion>
+  
+          <groupId>com.google.guava</groupId>
+  
+          <artifactId>guava</artifactId>
+  
+        </exclusion>
+  
+        <exclusion>
+  
+          <groupId>com.sun.activation</groupId>
+  
+          <artifactId>jakarta.activation</artifactId>
+  
+        </exclusion>
      </exclusions>
    </dependency>
    <dependency>
@@ -701,6 +725,16 @@
    </dependency>
    <!--END pull #321-->
    <!--START issue #113-->
+  
+    <dependency>
+  
+      <groupId>joda-time</groupId>
+  
+      <artifactId>joda-time</artifactId>
+  
+      <version>2.10.3</version>
+  
+    </dependency>
+  
+    <dependency>
+  
+      <groupId>jakarta.activation</groupId>
+  
+      <artifactId>jakarta.activation-api</artifactId>
+  
+      <version>1.2.1</version>
+  
+    </dependency>
    <dependency>
      <groupId>org.apache.commons</groupId>
      <artifactId>commons-compress</artifactId>
@@ -744,6 +778,12 @@
      <groupId>org.apache.hadoop</groupId>
      <artifactId>hadoop-aws</artifactId>
      <version>${hadoop.version}</version>
+  
+      <exclusions>
+  
+        <exclusion>
+  
+          <groupId>com.fasterxml.jackson.core</groupId>
+  
+          <artifactId>jackson-databind</artifactId>
+  
+        </exclusion>
+  
+      </exclusions>
    </dependency>
  </dependencies>