From 36cacb19c5bd3d29a2e23e66503a41c3240f10fe Mon Sep 17 00:00:00 2001
From: Raghav Aggarwal <raghavaggarwal03.ra@gmail.com>
Date: Mon, 27 Apr 2026 12:25:31 +0530
Subject: [PATCH] TEZ-4713: Sync 3rd party dependency with Hadoop-3.5.0

- Update BouncyCastle to 1.82
- Update Guava to 33.4.8-jre
- Update RoaringBitmap to 1.3.0
- Add Jackson 2.18.6 and jackson-bom
- Add Reload4j 1.2.22
- Remove jsr305 dependency version
---
 pom.xml | 21 +++++++++++++++++----
 1 file changed, 17 insertions(+), 4 deletions(-)

diff --git a/pom.xml b/pom.xml
index d576ddbb46..2d6bc8f3dd 100644
--- a/pom.xml
+++ b/pom.xml
@@ -59,7 +59,7 @@
 
     <!--dependency versions in alphabetical order-->
     <asynchttpclient.version>2.12.4</asynchttpclient.version>
-    <bouncycastle.version>1.79</bouncycastle.version>
+    <bouncycastle.version>1.82</bouncycastle.version>
     <build-helper-maven-plugin.version>1.8</build-helper-maven-plugin.version>
     <buildnumber-maven-plugin.version>1.1</buildnumber-maven-plugin.version>
     <checkstyle.version>13.3.0</checkstyle.version>
@@ -75,11 +75,11 @@
     <spotbugs-maven-plugin.version>4.9.3.0</spotbugs-maven-plugin.version>
     <plexus-velocity.version>2.3.0</plexus-velocity.version>
     <frontend-maven-plugin.version>1.15.0</frontend-maven-plugin.version>
-    <guava.version>32.0.1-jre</guava.version>
+    <guava.version>33.4.8-jre</guava.version>
     <hadoop.version>3.4.2</hadoop.version>
+    <jackson.version>2.18.6</jackson.version>
     <jersey.version>1.19.4</jersey.version>
     <jettison.version>1.5.4</jettison.version>
-    <jsr305.version>3.0.0</jsr305.version>
     <junit.version>4.13.2</junit.version>
     <leveldbjni-all.version>1.8</leveldbjni-all.version>
     <lifecycle-mapping.version>1.0.0</lifecycle-mapping.version>
@@ -90,8 +90,9 @@
     <protobuf.version>3.25.5</protobuf.version>
     <protoc-jar-maven-plugin.version>3.11.4</protoc-jar-maven-plugin.version>
     <protoc.path>${env.PROTOC_PATH}</protoc.path>
+    <reload4j.version>1.2.22</reload4j.version>
     <restrict-imports.enforcer.version>3.0.0</restrict-imports.enforcer.version>
-    <roaringbitmap.version>1.2.1</roaringbitmap.version>
+    <roaringbitmap.version>1.3.0</roaringbitmap.version>
     <scm.url>scm:git:https://gitbox.apache.org/repos/asf/tez.git</scm.url>
     <servlet-api.version>3.1.0</servlet-api.version>
     <slf4j.version>1.7.36</slf4j.version>
@@ -268,6 +269,18 @@
         <artifactId>slf4j-api</artifactId>
         <version>${slf4j.version}</version>
       </dependency>
+      <dependency>
+        <groupId>ch.qos.reload4j</groupId>
+        <artifactId>reload4j</artifactId>
+        <version>${reload4j.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>com.fasterxml.jackson</groupId>
+        <artifactId>jackson-bom</artifactId>
+        <version>${jackson.version}</version>
+        <scope>import</scope>
+        <type>pom</type>
+      </dependency>
       <dependency>
         <groupId>org.asynchttpclient</groupId>
         <artifactId>async-http-client</artifactId>