Fix security vulnerabilities and upgrade KC version to 1.6.9 (#498)

* [SNOW-643653] Fix Citi Blackduck vulnerabilities  (#497)

* avro 1.8.1 -> 1.11.0, kakfa-clients -> 2.8.2

* vulnerabilities fixed?

* fixed all vuln

* update kc version

* update utils.java

pom.xml

@@ -12,7 +12,7 @@
 
  <groupId>com.snowflake</groupId>
  <artifactId>snowflake-kafka-connector</artifactId>
- <version>1.6.8</version>
+ <version>1.6.9</version>
  <packaging>jar</packaging>
  <name>Snowflake Kafka Connector</name>
  <description>Snowflake Kafka Connect Sink Connector</description>
@@ -290,7 +290,7 @@
  <dependency>
  <groupId>org.apache.kafka</groupId>
  <artifactId>connect-api</artifactId>
- <version>2.8.1</version>
+ <version>3.2.3</version>
  <scope>provided</scope>
  <exclusions>
  <exclusion>
@@ -326,7 +326,7 @@
  <dependency>
  <groupId>org.apache.avro</groupId>
  <artifactId>avro</artifactId>
- <version>1.9.0</version>
+ <version>1.11.1</version>
  <exclusions>
  <exclusion>
  <groupId>com.fasterxml.jackson.core</groupId>

pom_confluent.xml

@@ -13,7 +13,7 @@
 
  <groupId>com.snowflake</groupId>
  <artifactId>snowflake-kafka-connector</artifactId>
- <version>1.6.8</version>
+ <version>1.6.9</version>
  <packaging>jar</packaging>
  <name>Snowflake Kafka Connector</name>
  <description>Snowflake Kafka Connect Sink Connector</description>
@@ -338,7 +338,7 @@
  <dependency>
  <groupId>org.apache.kafka</groupId>
  <artifactId>connect-api</artifactId>
- <version>2.8.1</version>
+ <version>3.2.3</version>
  <scope>provided</scope>
  <exclusions>
  <exclusion>
@@ -374,7 +374,7 @@
  <dependency>
  <groupId>org.apache.avro</groupId>
  <artifactId>avro</artifactId>
- <version>1.9.0</version>
+ <version>1.11.1</version>
  <exclusions>
  <exclusion>
  <groupId>com.fasterxml.jackson.core</groupId>

src/main/java/com/snowflake/kafka/connector/Utils.java

@@ -46,7 +46,7 @@
 public class Utils {
 
  // Connector version, change every release
- public static final String VERSION = "1.6.8";
+ public static final String VERSION = "1.6.9";
 
  // connector parameter list
  public static final String NAME = "name";

test/perf_test/pom.xml

@@ -25,7 +25,7 @@
  <dependency>
  <groupId>io.confluent</groupId>
  <artifactId>kafka-avro-serializer</artifactId>
- <version>5.1.2</version>
+ <version>7.2.1</version>
  </dependency>
 
  <!-- https://mvnrepository.com/artifact/net.snowflake/snowflake-jdbc -->
@@ -37,7 +37,7 @@
  <dependency>
  <groupId>org.apache.kafka</groupId>
  <artifactId>kafka-clients</artifactId>
- <version>2.2.1</version>
+ <version>2.8.2</version>
  </dependency>
  <dependency>
  <groupId>org.bouncycastle</groupId>
@@ -54,7 +54,7 @@
  <dependency>
  <groupId>org.apache.avro</groupId>
  <artifactId>avro</artifactId>
- <version>1.8.1</version>
+ <version>1.11.1</version>
  </dependency>
  </dependencies>
 
@@ -63,7 +63,7 @@
  <plugin>
  <groupId>org.apache.avro</groupId>
  <artifactId>avro-maven-plugin</artifactId>
- <version>1.8.1</version>
+ <version>1.11.1</version>
  <executions>
  <execution>
  <phase>generate-sources</phase>