From 76390f6f3bb9f638aa19eb9b0eb37a6022f372df Mon Sep 17 00:00:00 2001
From: Edward Guy Capriolo <edlinuxguru@gmail.com>
Date: Thu, 2 Apr 2026 19:47:25 -0400
Subject: [PATCH] HADOOP-19786 dependcy-check-version update

---
 pom.xml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index e04edf9eefd6a..685f783e0448e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -118,7 +118,7 @@ xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/x
     <lifecycle-mapping.version>1.0.0</lifecycle-mapping.version>
     <maven-checkstyle-plugin.version>3.6.0</maven-checkstyle-plugin.version>
     <checkstyle.version>11.1.0</checkstyle.version>
-    <dependency-check-maven.version>7.1.1</dependency-check-maven.version>
+    <dependency-check-maven.version>12.2.0</dependency-check-maven.version>
     <spotbugs.version>4.9.7</spotbugs.version>
     <spotbugs-maven-plugin.version>4.9.7.0</spotbugs-maven-plugin.version>
     <jsonschema2pojo-maven-plugin.version>1.1.1</jsonschema2pojo-maven-plugin.version>
@@ -526,6 +526,12 @@ xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/x
           <groupId>org.owasp</groupId>
           <artifactId>dependency-check-maven</artifactId>
           <version>${dependency-check-maven.version}</version>
+          <configuration>
+            <!-- often misidentied native binaries as .net native binaries then looks for .Net tooling to scan them -->
+            <assemblyAnalyzerEnabled>false</assemblyAnalyzerEnabled>
+            <!-- requires separate sonatype account and sometimes fails if not present -->
+            <ossindexAnalyzerEnabled>false</ossindexAnalyzerEnabled>
+          </configuration>
         </plugin>
         <plugin>
           <groupId>com.github.spotbugs</groupId>