From 0546c49b8f557179d44e5a5396d4b9bb3f3e7910 Mon Sep 17 00:00:00 2001
From: Piotr Bulawa <piotr.bulawa@snowflake.com>
Date: Thu, 22 Aug 2024 10:52:15 +0200
Subject: [PATCH] SNOW-1625000: Upgrade threeten-bp to 1.6.9 (#1870)

---
 parent-pom.xml      | 2 +-
 thin_public_pom.xml | 7 +++++++
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/parent-pom.xml b/parent-pom.xml
index 2bffe312c..ea999032b 100644
--- a/parent-pom.xml
+++ b/parent-pom.xml
@@ -76,7 +76,7 @@
     <slf4j.version>2.0.6</slf4j.version>
     <snowflake.common.version>5.1.4</snowflake.common.version>
     <testCategory>net.snowflake.client.category.AllTestCategory</testCategory>
-    <threeten.version>1.6.8</threeten.version>
+    <threeten.version>1.6.9</threeten.version>
     <tika.version>2.4.1</tika.version>
     <tukaani.version>1.9</tukaani.version>
     <version.maven>3.6.3</version.maven>
diff --git a/thin_public_pom.xml b/thin_public_pom.xml
index 715a42878..2f53b4b19 100644
--- a/thin_public_pom.xml
+++ b/thin_public_pom.xml
@@ -63,6 +63,7 @@
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
     <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
     <slf4j.version>2.0.6</slf4j.version>
+    <threeten.version>1.6.9</threeten.version>
   </properties>
 
   <dependencyManagement>
@@ -149,6 +150,12 @@
       <artifactId>gax</artifactId>
       <version>${google.gax.version}</version>
     </dependency>
+    <!-- It's google gax transitive dependency, we bump it to avoid vulnerability reported for version 1.6.8 -->
+    <dependency>
+      <groupId>org.threeten</groupId>
+      <artifactId>threetenbp</artifactId>
+      <version>${threeten.version}</version>
+    </dependency>
     <dependency>
       <groupId>com.google.auth</groupId>
       <artifactId>google-auth-library-oauth2-http</artifactId>