Updated Apache Parquet to version 1.15.1 to resolve CVE-2025-30065

Author: cwensel

CHANGES.txt

@@ -2,6 +2,8 @@ Cascading Change Log
 
 4.6.0 [unreleased]
 
+  Updated Apache Parquet to version 1.15.1 to resolve CVE-2025-30065.
+
   Fixed issue in c.s.u.DelimitedParser where the joiner would not properly quote fields with escaped quotes on write.
 
   Fixed issue where c.t.p.BasePartitionTap would not forward some methods to the parent c.t.Tap instance.
@@ -12,8 +14,6 @@ Cascading Change Log
 
   Fixed issue where c.t.l.h.LocalHfsAdaptor would not copy back applied properties during source/sink init phase.
 
-  Updated Apache Parquet to version 1.13.1.
-
   Added c.t.p.TypedParquetScheme to support reading and writing Parquet files while honoring type information.
   Deprecated c.t.p.ParquetScheme and c.t.p.ParquetTBaseScheme.
 

cascading-hadoop3-parquet/build.gradle

@@ -28,7 +28,7 @@ dependencies {
   implementation project( ':cascading-hadoop3-io' )
   implementation project( ':cascading-nested-json' )
 
-  def parquetVersion = '1.13.1'
+  def parquetVersion = '1.15.1'
   implementation group: 'org.apache.parquet', name: 'parquet-common', version: parquetVersion
   implementation group: 'org.apache.parquet', name: 'parquet-column', version: parquetVersion
   implementation group: 'org.apache.parquet', name: 'parquet-hadoop', version: parquetVersion