Control versions of indirect dependencies from hadoop (which is neede…

[ChrisJohnNOAA]

…d for parquet at least for now).

The parquet org is working on separating the read/write logic from hadoop, but that has been an ongoing project for years, and is still not completed. Eventually we should be able to remove the hadoop dependency.

Fixes: Security vulnerabilities due to indirect hadoop dependencies.

Type of change

Please delete options that are not relevant.

• Bug fix (non-breaking change which fixes an issue)

Checklist before requesting a review

• I have performed a self-review of my code
• My code follows the style guidelines of this project
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• My changes generate no new warnings
• I have added tests that prove my fix is effective or that my feature works
• New and existing unit tests pass locally with my changes