From 9b948812f49cff71cd774b11b270c4ee6dfbe1e1 Mon Sep 17 00:00:00 2001
From: mateczagany <czmate10@gmail.com>
Date: Wed, 19 Nov 2025 08:50:09 +0100
Subject: [PATCH 1/7] [FLINK-38694][Build/Shaded] Update Curator to 5.9.0

---
 .../flink-shaded-zookeeper-35/pom.xml                       | 4 ++--
 .../src/main/resources/META-INF/NOTICE                      | 6 +++---
 .../flink-shaded-zookeeper-36/pom.xml                       | 4 ++--
 .../src/main/resources/META-INF/NOTICE                      | 6 +++---
 .../flink-shaded-zookeeper-37/pom.xml                       | 4 ++--
 .../src/main/resources/META-INF/NOTICE                      | 6 +++---
 .../flink-shaded-zookeeper-38/pom.xml                       | 4 ++--
 .../src/main/resources/META-INF/NOTICE                      | 6 +++---
 8 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-35/pom.xml b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-35/pom.xml
index 6e25450d..da029bb1 100644
--- a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-35/pom.xml
+++ b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-35/pom.xml
@@ -34,7 +34,7 @@ under the License.
 
     <properties>
         <zookeeper.version>3.5.10</zookeeper.version>
-        <curator.version>5.4.0</curator.version>
+        <curator.version>5.9.0</curator.version>
     </properties>
 
     <dependencies>
@@ -139,4 +139,4 @@ under the License.
             </properties>
         </profile>
     </profiles>
-</project>
\ No newline at end of file
+</project>
diff --git a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-35/src/main/resources/META-INF/NOTICE b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-35/src/main/resources/META-INF/NOTICE
index fc05ca18..6fa1de87 100644
--- a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-35/src/main/resources/META-INF/NOTICE
+++ b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-35/src/main/resources/META-INF/NOTICE
@@ -16,8 +16,8 @@ This project bundles the following dependencies under the Apache Software Licens
 - io.netty:netty-transport-native-epoll:4.2.6.Final
 - io.netty:netty-transport-native-unix-common:4.2.6.Final
 - io.netty:netty-transport:4.2.6.Final
-- org.apache.curator:curator-client:5.4.0
-- org.apache.curator:curator-framework:5.4.0
-- org.apache.curator:curator-recipes:5.4.0
+- org.apache.curator:curator-client:5.9.0
+- org.apache.curator:curator-framework:5.9.0
+- org.apache.curator:curator-recipes:5.9.0
 - org.apache.zookeeper:zookeeper-jute:3.5.10
 - org.apache.zookeeper:zookeeper:3.5.10
diff --git a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-36/pom.xml b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-36/pom.xml
index 15a7cdca..90b4952d 100644
--- a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-36/pom.xml
+++ b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-36/pom.xml
@@ -34,7 +34,7 @@ under the License.
 
     <properties>
         <zookeeper.version>3.6.4</zookeeper.version>
-        <curator.version>5.4.0</curator.version>
+        <curator.version>5.9.0</curator.version>
     </properties>
 
     <dependencies>
@@ -164,4 +164,4 @@ under the License.
             </properties>
         </profile>
     </profiles>
-</project>
\ No newline at end of file
+</project>
diff --git a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-36/src/main/resources/META-INF/NOTICE b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-36/src/main/resources/META-INF/NOTICE
index 391e23da..91e39fb8 100644
--- a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-36/src/main/resources/META-INF/NOTICE
+++ b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-36/src/main/resources/META-INF/NOTICE
@@ -17,8 +17,8 @@ This project bundles the following dependencies under the Apache Software Licens
 - io.netty:netty-transport-native-epoll:4.2.6.Final
 - io.netty:netty-transport-native-unix-common:4.2.6.Final
 - io.netty:netty-transport:4.2.6.Final
-- org.apache.curator:curator-client:5.4.0
-- org.apache.curator:curator-framework:5.4.0
-- org.apache.curator:curator-recipes:5.4.0
+- org.apache.curator:curator-client:5.9.0
+- org.apache.curator:curator-framework:5.9.0
+- org.apache.curator:curator-recipes:5.9.0
 - org.apache.zookeeper:zookeeper-jute:3.6.4
 - org.apache.zookeeper:zookeeper:3.6.4
diff --git a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-37/pom.xml b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-37/pom.xml
index b0c56a06..56102d95 100644
--- a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-37/pom.xml
+++ b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-37/pom.xml
@@ -34,7 +34,7 @@ under the License.
 
     <properties>
         <zookeeper.version>3.7.2</zookeeper.version>
-        <curator.version>5.4.0</curator.version>
+        <curator.version>5.9.0</curator.version>
     </properties>
 
     <dependencies>
@@ -149,4 +149,4 @@ under the License.
             </properties>
         </profile>
     </profiles>
-</project>
\ No newline at end of file
+</project>
diff --git a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-37/src/main/resources/META-INF/NOTICE b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-37/src/main/resources/META-INF/NOTICE
index 94745616..0781dc7c 100644
--- a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-37/src/main/resources/META-INF/NOTICE
+++ b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-37/src/main/resources/META-INF/NOTICE
@@ -17,8 +17,8 @@ This project bundles the following dependencies under the Apache Software Licens
 - io.netty:netty-transport-native-epoll:4.2.6.Final
 - io.netty:netty-transport-native-unix-common:4.2.6.Final
 - io.netty:netty-transport:4.2.6.Final
-- org.apache.curator:curator-client:5.4.0
-- org.apache.curator:curator-framework:5.4.0
-- org.apache.curator:curator-recipes:5.4.0
+- org.apache.curator:curator-client:5.9.0
+- org.apache.curator:curator-framework:5.9.0
+- org.apache.curator:curator-recipes:5.9.0
 - org.apache.zookeeper:zookeeper-jute:3.7.2
 - org.apache.zookeeper:zookeeper:3.7.2
diff --git a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/pom.xml b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/pom.xml
index eca5e0d5..3b74f916 100644
--- a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/pom.xml
+++ b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/pom.xml
@@ -34,7 +34,7 @@ under the License.
 
     <properties>
         <zookeeper.version>3.8.4</zookeeper.version>
-        <curator.version>5.4.0</curator.version>
+        <curator.version>5.9.0</curator.version>
     </properties>
 
     <dependencies>
@@ -153,4 +153,4 @@ under the License.
             </properties>
         </profile>
     </profiles>
-</project>
\ No newline at end of file
+</project>
diff --git a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/src/main/resources/META-INF/NOTICE b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/src/main/resources/META-INF/NOTICE
index 99a3f7dc..d46d0f87 100644
--- a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/src/main/resources/META-INF/NOTICE
+++ b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/src/main/resources/META-INF/NOTICE
@@ -18,8 +18,8 @@ This project bundles the following dependencies under the Apache Software Licens
 - io.netty:netty-transport-native-epoll:4.2.6.Final
 - io.netty:netty-transport-native-unix-common:4.2.6.Final
 - io.netty:netty-transport:4.2.6.Final
-- org.apache.curator:curator-client:5.4.0
-- org.apache.curator:curator-framework:5.4.0
-- org.apache.curator:curator-recipes:5.4.0
+- org.apache.curator:curator-client:5.9.0
+- org.apache.curator:curator-framework:5.9.0
+- org.apache.curator:curator-recipes:5.9.0
 - org.apache.zookeeper:zookeeper-jute:3.8.4
 - org.apache.zookeeper:zookeeper:3.8.4

From 1de9063ec63cc94143f53579db829d05772ab24c Mon Sep 17 00:00:00 2001
From: mateczagany <czmate10@gmail.com>
Date: Wed, 19 Nov 2025 08:50:58 +0100
Subject: [PATCH 2/7] [FLINK-38694][Build/Shaded] Update Zookeeper to 3.8.5

---
 .../flink-shaded-zookeeper-38/pom.xml                       | 2 +-
 .../src/main/resources/META-INF/NOTICE                      | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/pom.xml b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/pom.xml
index 3b74f916..fc4de4bc 100644
--- a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/pom.xml
+++ b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/pom.xml
@@ -33,7 +33,7 @@ under the License.
     <version>${zookeeper.version}-21.0</version>
 
     <properties>
-        <zookeeper.version>3.8.4</zookeeper.version>
+        <zookeeper.version>3.8.5</zookeeper.version>
         <curator.version>5.9.0</curator.version>
     </properties>
 
diff --git a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/src/main/resources/META-INF/NOTICE b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/src/main/resources/META-INF/NOTICE
index d46d0f87..337ad145 100644
--- a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/src/main/resources/META-INF/NOTICE
+++ b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/src/main/resources/META-INF/NOTICE
@@ -7,7 +7,7 @@ The Apache Software Foundation (http://www.apache.org/).
 This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt)
 
 - com.google.guava:guava:33.4.0-jre
-- commons-io:commons-io:2.11.0
+- commons-io:commons-io:2.17.0
 - io.dropwizard.metrics:metrics-core:4.1.12.1
 - io.netty:netty-buffer:4.2.6.Final
 - io.netty:netty-codec-base:4.2.6.Final
@@ -21,5 +21,5 @@ This project bundles the following dependencies under the Apache Software Licens
 - org.apache.curator:curator-client:5.9.0
 - org.apache.curator:curator-framework:5.9.0
 - org.apache.curator:curator-recipes:5.9.0
-- org.apache.zookeeper:zookeeper-jute:3.8.4
-- org.apache.zookeeper:zookeeper:3.8.4
+- org.apache.zookeeper:zookeeper-jute:3.8.5
+- org.apache.zookeeper:zookeeper:3.8.5

From 2c2a864abf0a8b206f9f71ebb0c1f6d93aa9924c Mon Sep 17 00:00:00 2001
From: mateczagany <czmate10@gmail.com>
Date: Wed, 19 Nov 2025 08:55:51 +0100
Subject: [PATCH 3/7] [FLINK-38694][Build/Shaded] Update json-path to 2.10.0

---
 flink-shaded-jackson-parent/flink-shaded-jsonpath/pom.xml     | 4 ++--
 .../flink-shaded-jsonpath/src/main/resources/META-INF/NOTICE  | 2 +-
 pom.xml                                                       | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/flink-shaded-jackson-parent/flink-shaded-jsonpath/pom.xml b/flink-shaded-jackson-parent/flink-shaded-jsonpath/pom.xml
index f38d4c93..8677b7af 100644
--- a/flink-shaded-jackson-parent/flink-shaded-jsonpath/pom.xml
+++ b/flink-shaded-jackson-parent/flink-shaded-jsonpath/pom.xml
@@ -31,7 +31,7 @@ under the License.
     <artifactId>flink-shaded-jsonpath</artifactId>
     <name>flink-shaded-jsonpath</name>
     <!-- override version to jsonpath version -->
-    <version>2.9.0-21.0</version>
+    <version>2.10.0-21.0</version>
 
     <dependencies>
         <dependency>
@@ -74,4 +74,4 @@ under the License.
             </plugin>
         </plugins>
     </build>
-</project>
\ No newline at end of file
+</project>
diff --git a/flink-shaded-jackson-parent/flink-shaded-jsonpath/src/main/resources/META-INF/NOTICE b/flink-shaded-jackson-parent/flink-shaded-jsonpath/src/main/resources/META-INF/NOTICE
index cd020560..9c0ca8c8 100644
--- a/flink-shaded-jackson-parent/flink-shaded-jsonpath/src/main/resources/META-INF/NOTICE
+++ b/flink-shaded-jackson-parent/flink-shaded-jsonpath/src/main/resources/META-INF/NOTICE
@@ -6,4 +6,4 @@ The Apache Software Foundation (http://www.apache.org/).
 
 This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt)
 
-- com.jayway.jsonpath:json-path:2.9.0
+- com.jayway.jsonpath:json-path:2.10.0
diff --git a/pom.xml b/pom.xml
index 46bc2430..2090ba07 100644
--- a/pom.xml
+++ b/pom.xml
@@ -64,7 +64,7 @@ under the License.
         <shading.prefix>org.apache.flink.shaded</shading.prefix>
         <netty.version>4.2.6.Final</netty.version>
         <jackson.version>2.18.2</jackson.version>
-        <jsonpath.version>2.9.0</jsonpath.version>
+        <jsonpath.version>2.10.0</jsonpath.version>
         <guava.version>33.4.0-jre</guava.version>
         <!-- The license check requires the artifactId to match the directory that the module resides in.
              This is not the case for several modules in flink-shaded for legacy reasons.

From cb56a37bbab041dccd0497110436e38fde3e1637 Mon Sep 17 00:00:00 2001
From: mateczagany <czmate10@gmail.com>
Date: Wed, 19 Nov 2025 09:00:30 +0100
Subject: [PATCH 4/7] [FLINK-38694][Build/Shaded] Update Jackson to 2.20.1

---
 .../flink-shaded-jackson-2/pom.xml             |  4 ++--
 .../src/main/resources/META-INF/NOTICE         | 18 +++++++++---------
 .../pom.xml                                    |  4 ++--
 .../src/main/resources/META-INF/NOTICE         | 10 +++++-----
 .../flink-shaded-jsonpath/pom.xml              |  2 +-
 flink-shaded-jackson-parent/pom.xml            |  4 ++--
 flink-shaded-swagger/pom.xml                   |  4 ++--
 .../src/main/resources/META-INF/NOTICE         |  8 ++++----
 pom.xml                                        |  2 +-
 9 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/flink-shaded-jackson-parent/flink-shaded-jackson-2/pom.xml b/flink-shaded-jackson-parent/flink-shaded-jackson-2/pom.xml
index ec6a7403..e755e71a 100644
--- a/flink-shaded-jackson-parent/flink-shaded-jackson-2/pom.xml
+++ b/flink-shaded-jackson-parent/flink-shaded-jackson-2/pom.xml
@@ -25,7 +25,7 @@ under the License.
     <parent>
         <groupId>org.apache.flink</groupId>
         <artifactId>flink-shaded-jackson-parent</artifactId>
-        <version>2.18.2-21.0</version>
+        <version>2.20.1-21.0</version>
     </parent>
 
     <artifactId>flink-shaded-jackson${flink.ci.license.suffix}</artifactId>
@@ -110,4 +110,4 @@ under the License.
             </plugin>
         </plugins>
     </build>
-</project>
\ No newline at end of file
+</project>
diff --git a/flink-shaded-jackson-parent/flink-shaded-jackson-2/src/main/resources/META-INF/NOTICE b/flink-shaded-jackson-parent/flink-shaded-jackson-2/src/main/resources/META-INF/NOTICE
index 68ed0a40..32e81032 100644
--- a/flink-shaded-jackson-parent/flink-shaded-jackson-2/src/main/resources/META-INF/NOTICE
+++ b/flink-shaded-jackson-parent/flink-shaded-jackson-2/src/main/resources/META-INF/NOTICE
@@ -6,12 +6,12 @@ The Apache Software Foundation (http://www.apache.org/).
 
 This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt)
 
-- com.fasterxml.jackson.core:jackson-annotations:2.18.2
-- com.fasterxml.jackson.core:jackson-core:2.18.2
-- com.fasterxml.jackson.core:jackson-databind:2.18.2
-- com.fasterxml.jackson.dataformat:jackson-dataformat-csv:2.18.2
-- com.fasterxml.jackson.dataformat:jackson-dataformat-smile:2.18.2
-- com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:2.18.2
-- com.fasterxml.jackson.datatype:jackson-datatype-jdk8:2.18.2
-- com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.18.2
-- org.yaml:snakeyaml:2.3
+- com.fasterxml.jackson.core:jackson-annotations:2.20
+- com.fasterxml.jackson.core:jackson-core:2.20.1
+- com.fasterxml.jackson.core:jackson-databind:2.20.1
+- com.fasterxml.jackson.dataformat:jackson-dataformat-csv:2.20.1
+- com.fasterxml.jackson.dataformat:jackson-dataformat-smile:2.20.1
+- com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:2.20.1
+- com.fasterxml.jackson.datatype:jackson-datatype-jdk8:2.20.1
+- com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.20.1
+- org.yaml:snakeyaml:2.4
diff --git a/flink-shaded-jackson-parent/flink-shaded-jackson-module-jsonSchema-2/pom.xml b/flink-shaded-jackson-parent/flink-shaded-jackson-module-jsonSchema-2/pom.xml
index 68d5cee4..ef23b4e4 100644
--- a/flink-shaded-jackson-parent/flink-shaded-jackson-module-jsonSchema-2/pom.xml
+++ b/flink-shaded-jackson-parent/flink-shaded-jackson-module-jsonSchema-2/pom.xml
@@ -25,7 +25,7 @@ under the License.
     <parent>
         <groupId>org.apache.flink</groupId>
         <artifactId>flink-shaded-jackson-parent</artifactId>
-        <version>2.18.2-21.0</version>
+        <version>2.20.1-21.0</version>
     </parent>
 
     <artifactId>flink-shaded-jackson-module-jsonSchema${flink.ci.license.suffix}</artifactId>
@@ -92,4 +92,4 @@ under the License.
             </plugin>
         </plugins>
     </build>
-</project>
\ No newline at end of file
+</project>
diff --git a/flink-shaded-jackson-parent/flink-shaded-jackson-module-jsonSchema-2/src/main/resources/META-INF/NOTICE b/flink-shaded-jackson-parent/flink-shaded-jackson-module-jsonSchema-2/src/main/resources/META-INF/NOTICE
index a17b7862..492d8084 100644
--- a/flink-shaded-jackson-parent/flink-shaded-jackson-module-jsonSchema-2/src/main/resources/META-INF/NOTICE
+++ b/flink-shaded-jackson-parent/flink-shaded-jackson-module-jsonSchema-2/src/main/resources/META-INF/NOTICE
@@ -6,8 +6,8 @@ The Apache Software Foundation (http://www.apache.org/).
 
 This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt)
 
-- com.fasterxml.jackson.core:jackson-annotations:2.18.2
-- com.fasterxml.jackson.core:jackson-core:2.18.2
-- com.fasterxml.jackson.core:jackson-databind:2.18.2
-- com.fasterxml.jackson.module:jackson-module-jsonSchema:2.18.2
-- javax.validation:validation-api:1.1.0.Final
\ No newline at end of file
+- com.fasterxml.jackson.core:jackson-annotations:2.20
+- com.fasterxml.jackson.core:jackson-core:2.20.1
+- com.fasterxml.jackson.core:jackson-databind:2.20.1
+- com.fasterxml.jackson.module:jackson-module-jsonSchema:2.20.1
+- javax.validation:validation-api:1.1.0.Final
diff --git a/flink-shaded-jackson-parent/flink-shaded-jsonpath/pom.xml b/flink-shaded-jackson-parent/flink-shaded-jsonpath/pom.xml
index 8677b7af..b57d3d36 100644
--- a/flink-shaded-jackson-parent/flink-shaded-jsonpath/pom.xml
+++ b/flink-shaded-jackson-parent/flink-shaded-jsonpath/pom.xml
@@ -25,7 +25,7 @@ under the License.
     <parent>
         <groupId>org.apache.flink</groupId>
         <artifactId>flink-shaded-jackson-parent</artifactId>
-        <version>2.18.2-21.0</version>
+        <version>2.20.1-21.0</version>
     </parent>
 
     <artifactId>flink-shaded-jsonpath</artifactId>
diff --git a/flink-shaded-jackson-parent/pom.xml b/flink-shaded-jackson-parent/pom.xml
index 2180a443..7ddcdf2c 100644
--- a/flink-shaded-jackson-parent/pom.xml
+++ b/flink-shaded-jackson-parent/pom.xml
@@ -31,7 +31,7 @@ under the License.
     <artifactId>flink-shaded-jackson-parent</artifactId>
     <name>flink-shaded-jackson-parent</name>
     <packaging>pom</packaging>
-    <version>2.18.2-21.0</version>
+    <version>2.20.1-21.0</version>
 
     <modules>
         <module>flink-shaded-jackson-2</module>
@@ -88,4 +88,4 @@ under the License.
         </plugins>
     </build>
 
-</project>
\ No newline at end of file
+</project>
diff --git a/flink-shaded-swagger/pom.xml b/flink-shaded-swagger/pom.xml
index baf6f902..ff98d6b0 100644
--- a/flink-shaded-swagger/pom.xml
+++ b/flink-shaded-swagger/pom.xml
@@ -51,7 +51,7 @@ under the License.
             <dependency>
                 <groupId>org.yaml</groupId>
                 <artifactId>snakeyaml</artifactId>
-                <version>2.1</version>
+                <version>2.4</version>
             </dependency>
             <dependency>
                 <groupId>com.fasterxml.jackson</groupId>
@@ -99,4 +99,4 @@ under the License.
         </plugins>
     </build>
 
-</project>
\ No newline at end of file
+</project>
diff --git a/flink-shaded-swagger/src/main/resources/META-INF/NOTICE b/flink-shaded-swagger/src/main/resources/META-INF/NOTICE
index 09fa3960..4dc9f382 100644
--- a/flink-shaded-swagger/src/main/resources/META-INF/NOTICE
+++ b/flink-shaded-swagger/src/main/resources/META-INF/NOTICE
@@ -6,16 +6,16 @@ The Apache Software Foundation (http://www.apache.org/).
 
 This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt)
 
-- com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:2.18.2
-- com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.18.2
+- com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:2.20.1
+- com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.20.1
 - io.swagger.core.v3:swagger-annotations:2.2.19
 - io.swagger.core.v3:swagger-core:2.2.19
 - io.swagger.core.v3:swagger-models:2.2.19
 - jakarta.validation:jakarta.validation-api:2.0.2
 - org.apache.commons:commons-lang3:3.13.0
-- org.yaml:snakeyaml:2.1
+- org.yaml:snakeyaml:2.4
 
 This project bundles the following dependencies under the Eclipse Distribution License 1.0 (https://www.eclipse.org/org/documents/edl-v10.php)
 
 - jakarta.activation:jakarta.activation-api:1.2.1
-- jakarta.xml.bind:jakarta.xml.bind-api:2.3.2
\ No newline at end of file
+- jakarta.xml.bind:jakarta.xml.bind-api:2.3.2
diff --git a/pom.xml b/pom.xml
index 2090ba07..d1adb01c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -63,7 +63,7 @@ under the License.
     <properties>
         <shading.prefix>org.apache.flink.shaded</shading.prefix>
         <netty.version>4.2.6.Final</netty.version>
-        <jackson.version>2.18.2</jackson.version>
+        <jackson.version>2.20.1</jackson.version>
         <jsonpath.version>2.10.0</jsonpath.version>
         <guava.version>33.4.0-jre</guava.version>
         <!-- The license check requires the artifactId to match the directory that the module resides in.

From fe3686bc1a54802edaa6b5a2be7608e1179214d5 Mon Sep 17 00:00:00 2001
From: mateczagany <czmate10@gmail.com>
Date: Wed, 19 Nov 2025 09:07:16 +0100
Subject: [PATCH 5/7] [FLINK-38694][Build/Shaded] Update Swagger to 2.2.41

---
 flink-shaded-swagger/pom.xml                         |  6 +++++-
 .../src/main/resources/META-INF/NOTICE               | 12 ++++++------
 2 files changed, 11 insertions(+), 7 deletions(-)

diff --git a/flink-shaded-swagger/pom.xml b/flink-shaded-swagger/pom.xml
index ff98d6b0..beec0033 100644
--- a/flink-shaded-swagger/pom.xml
+++ b/flink-shaded-swagger/pom.xml
@@ -32,11 +32,15 @@ under the License.
     <artifactId>flink-shaded-swagger</artifactId>
     <name>flink-shaded-swagger</name>
 
+    <properties>
+        <swagger.core.version>2.2.41</swagger.core.version>
+    </properties>
+
     <dependencies>
         <dependency>
             <groupId>io.swagger.core.v3</groupId>
             <artifactId>swagger-core</artifactId>
-            <version>2.2.19</version>
+            <version>${swagger.core.version}</version>
             <exclusions>
                 <exclusion>
                     <groupId>org.slf4j</groupId>
diff --git a/flink-shaded-swagger/src/main/resources/META-INF/NOTICE b/flink-shaded-swagger/src/main/resources/META-INF/NOTICE
index 4dc9f382..ba7a9e45 100644
--- a/flink-shaded-swagger/src/main/resources/META-INF/NOTICE
+++ b/flink-shaded-swagger/src/main/resources/META-INF/NOTICE
@@ -8,14 +8,14 @@ This project bundles the following dependencies under the Apache Software Licens
 
 - com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:2.20.1
 - com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.20.1
-- io.swagger.core.v3:swagger-annotations:2.2.19
-- io.swagger.core.v3:swagger-core:2.2.19
-- io.swagger.core.v3:swagger-models:2.2.19
+- io.swagger.core.v3:swagger-annotations:2.2.41
+- io.swagger.core.v3:swagger-core:2.2.41
+- io.swagger.core.v3:swagger-models:2.2.41
 - jakarta.validation:jakarta.validation-api:2.0.2
-- org.apache.commons:commons-lang3:3.13.0
+- org.apache.commons:commons-lang3:3.18.0
 - org.yaml:snakeyaml:2.4
 
 This project bundles the following dependencies under the Eclipse Distribution License 1.0 (https://www.eclipse.org/org/documents/edl-v10.php)
 
-- jakarta.activation:jakarta.activation-api:1.2.1
-- jakarta.xml.bind:jakarta.xml.bind-api:2.3.2
+- jakarta.activation:jakarta.activation-api:1.2.2
+- jakarta.xml.bind:jakarta.xml.bind-api:2.3.3

From bcf6076b450c658877381b04dff5a50c2dbf6ac8 Mon Sep 17 00:00:00 2001
From: mateczagany <czmate10@gmail.com>
Date: Wed, 19 Nov 2025 09:09:32 +0100
Subject: [PATCH 6/7] [FLINK-38694][Build/Shaded] Update ASM to 9.9.1

---
 flink-shaded-asm-9/pom.xml                            | 2 +-
 flink-shaded-asm-9/src/main/resources/META-INF/NOTICE | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/flink-shaded-asm-9/pom.xml b/flink-shaded-asm-9/pom.xml
index 5d577272..fce8b18c 100644
--- a/flink-shaded-asm-9/pom.xml
+++ b/flink-shaded-asm-9/pom.xml
@@ -35,7 +35,7 @@ under the License.
 
     <properties>
         <asm.major.version>9</asm.major.version>
-        <asm.version>${asm.major.version}.8</asm.version>
+        <asm.version>${asm.major.version}.9.1</asm.version>
     </properties>
 
     <dependencies>
diff --git a/flink-shaded-asm-9/src/main/resources/META-INF/NOTICE b/flink-shaded-asm-9/src/main/resources/META-INF/NOTICE
index df00c293..22cc5363 100644
--- a/flink-shaded-asm-9/src/main/resources/META-INF/NOTICE
+++ b/flink-shaded-asm-9/src/main/resources/META-INF/NOTICE
@@ -7,7 +7,7 @@ The Apache Software Foundation (http://www.apache.org/).
 This project bundles the following dependencies under the BSD license.
 See bundled license files for details.
 
-- org.ow2.asm:asm-analysis:9.8
-- org.ow2.asm:asm-commons:9.8
-- org.ow2.asm:asm-tree:9.8
-- org.ow2.asm:asm:9.8
+- org.ow2.asm:asm-analysis:9.9.1
+- org.ow2.asm:asm-commons:9.9.1
+- org.ow2.asm:asm-tree:9.9.1
+- org.ow2.asm:asm:9.9.1

From b7ec6701655ff1532e7596fd04c1e21682620d94 Mon Sep 17 00:00:00 2001
From: mateczagany <czmate10@gmail.com>
Date: Wed, 19 Nov 2025 09:15:32 +0100
Subject: [PATCH 7/7] [FLINK-38694][Build/Shaded] Update Guava to 33.5.0-jre

---
 flink-shaded-guava-33/src/main/resources/META-INF/NOTICE      | 4 ++--
 .../flink-shaded-zookeeper-35/pom.xml                         | 4 ++++
 .../src/main/resources/META-INF/NOTICE                        | 2 +-
 .../flink-shaded-zookeeper-36/pom.xml                         | 4 ++++
 .../src/main/resources/META-INF/NOTICE                        | 2 +-
 .../flink-shaded-zookeeper-37/pom.xml                         | 4 ++++
 .../src/main/resources/META-INF/NOTICE                        | 2 +-
 .../flink-shaded-zookeeper-38/pom.xml                         | 4 ++++
 .../src/main/resources/META-INF/NOTICE                        | 2 +-
 pom.xml                                                       | 2 +-
 10 files changed, 23 insertions(+), 7 deletions(-)

diff --git a/flink-shaded-guava-33/src/main/resources/META-INF/NOTICE b/flink-shaded-guava-33/src/main/resources/META-INF/NOTICE
index c863e5a9..72d010ee 100644
--- a/flink-shaded-guava-33/src/main/resources/META-INF/NOTICE
+++ b/flink-shaded-guava-33/src/main/resources/META-INF/NOTICE
@@ -6,5 +6,5 @@ The Apache Software Foundation (http://www.apache.org/).
 
 This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt)
 
-- com.google.guava:guava:33.4.0-jre
-- com.google.guava:failureaccess:1.0.2
\ No newline at end of file
+- com.google.guava:guava:33.5.0-jre
+- com.google.guava:failureaccess:1.0.3
diff --git a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-35/pom.xml b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-35/pom.xml
index da029bb1..7fcade39 100644
--- a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-35/pom.xml
+++ b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-35/pom.xml
@@ -84,6 +84,10 @@ under the License.
                     <groupId>com.google.guava</groupId>
                     <artifactId>listenablefuture</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>org.jspecify</groupId>
+                    <artifactId>jspecify</artifactId>
+                </exclusion>
                 <exclusion>
                     <!-- not relevant at runtime -->
                     <groupId>com.google.j2objc</groupId>
diff --git a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-35/src/main/resources/META-INF/NOTICE b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-35/src/main/resources/META-INF/NOTICE
index 6fa1de87..a03933d1 100644
--- a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-35/src/main/resources/META-INF/NOTICE
+++ b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-35/src/main/resources/META-INF/NOTICE
@@ -6,7 +6,7 @@ The Apache Software Foundation (http://www.apache.org/).
 
 This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt)
 
-- com.google.guava:guava:33.4.0-jre
+- com.google.guava:guava:33.5.0-jre
 - io.netty:netty-buffer:4.2.6.Final
 - io.netty:netty-codec-base:4.2.6.Final
 - io.netty:netty-common:4.2.6.Final
diff --git a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-36/pom.xml b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-36/pom.xml
index 90b4952d..65dd8c86 100644
--- a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-36/pom.xml
+++ b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-36/pom.xml
@@ -109,6 +109,10 @@ under the License.
                     <groupId>com.google.guava</groupId>
                     <artifactId>listenablefuture</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>org.jspecify</groupId>
+                    <artifactId>jspecify</artifactId>
+                </exclusion>
                 <exclusion>
                     <!-- not relevant at runtime -->
                     <groupId>com.google.j2objc</groupId>
diff --git a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-36/src/main/resources/META-INF/NOTICE b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-36/src/main/resources/META-INF/NOTICE
index 91e39fb8..bcf6295e 100644
--- a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-36/src/main/resources/META-INF/NOTICE
+++ b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-36/src/main/resources/META-INF/NOTICE
@@ -6,7 +6,7 @@ The Apache Software Foundation (http://www.apache.org/).
 
 This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt)
 
-- com.google.guava:guava:33.4.0-jre
+- com.google.guava:guava:33.5.0-jre
 - io.dropwizard.metrics:metrics-core:3.2.5
 - io.netty:netty-buffer:4.2.6.Final
 - io.netty:netty-codec-base:4.2.6.Final
diff --git a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-37/pom.xml b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-37/pom.xml
index 56102d95..7cac3b20 100644
--- a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-37/pom.xml
+++ b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-37/pom.xml
@@ -94,6 +94,10 @@ under the License.
                     <groupId>com.google.guava</groupId>
                     <artifactId>listenablefuture</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>org.jspecify</groupId>
+                    <artifactId>jspecify</artifactId>
+                </exclusion>
                 <exclusion>
                     <!-- not relevant at runtime -->
                     <groupId>com.google.j2objc</groupId>
diff --git a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-37/src/main/resources/META-INF/NOTICE b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-37/src/main/resources/META-INF/NOTICE
index 0781dc7c..9577fdd0 100644
--- a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-37/src/main/resources/META-INF/NOTICE
+++ b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-37/src/main/resources/META-INF/NOTICE
@@ -6,7 +6,7 @@ The Apache Software Foundation (http://www.apache.org/).
 
 This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt)
 
-- com.google.guava:guava:33.4.0-jre
+- com.google.guava:guava:33.5.0-jre
 - io.dropwizard.metrics:metrics-core:4.1.12.1
 - io.netty:netty-buffer:4.2.6.Final
 - io.netty:netty-codec-base:4.2.6.Final
diff --git a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/pom.xml b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/pom.xml
index fc4de4bc..c1deec63 100644
--- a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/pom.xml
+++ b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/pom.xml
@@ -98,6 +98,10 @@ under the License.
                     <groupId>com.google.guava</groupId>
                     <artifactId>listenablefuture</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>org.jspecify</groupId>
+                    <artifactId>jspecify</artifactId>
+                </exclusion>
                 <exclusion>
                     <!-- not relevant at runtime -->
                     <groupId>com.google.j2objc</groupId>
diff --git a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/src/main/resources/META-INF/NOTICE b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/src/main/resources/META-INF/NOTICE
index 337ad145..abb4dcb1 100644
--- a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/src/main/resources/META-INF/NOTICE
+++ b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/src/main/resources/META-INF/NOTICE
@@ -6,7 +6,7 @@ The Apache Software Foundation (http://www.apache.org/).
 
 This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt)
 
-- com.google.guava:guava:33.4.0-jre
+- com.google.guava:guava:33.5.0-jre
 - commons-io:commons-io:2.17.0
 - io.dropwizard.metrics:metrics-core:4.1.12.1
 - io.netty:netty-buffer:4.2.6.Final
diff --git a/pom.xml b/pom.xml
index d1adb01c..eaba2340 100644
--- a/pom.xml
+++ b/pom.xml
@@ -65,7 +65,7 @@ under the License.
         <netty.version>4.2.6.Final</netty.version>
         <jackson.version>2.20.1</jackson.version>
         <jsonpath.version>2.10.0</jsonpath.version>
-        <guava.version>33.4.0-jre</guava.version>
+        <guava.version>33.5.0-jre</guava.version>
         <!-- The license check requires the artifactId to match the directory that the module resides in.
              This is not the case for several modules in flink-shaded for legacy reasons.
              This property can be used by modules to add a suffix to the artifactId to match the directory name on CI