benchmark-thrift issues

Bump snakeyaml from 1.23 to 1.32

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.yaml:snakeyaml&package-manager=maven&previous-version=1.23&new-version=1.32)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`....

dependabot[bot]

dependencies

Bump fastjson from 1.2.58 to 1.2.83

Bumps [fastjson](https://github.com/alibaba/fastjson) from 1.2.58 to 1.2.83. Release notes Sourced from fastjson's releases. FASTJSON 1.2.83版本发布（安全修复）这是一个安全修复版本，修复最近收到在特定场景下可以绕过autoType关闭限制的漏洞，建议fastjson用户尽快采取安全措施保障系统安全。安全修复方案：https://github.com/alibaba/fastjson/wiki/security_update_20220523 Issues 安全加固修复JDK17下setAccessible报错的问题 #4077 下载 https://repo1.maven.org/maven2/com/alibaba/fastjson/1.2.83/ 文档 https://github.com/alibaba/fastjson/wiki/%E5%B8%B8%E8%A7%81%E9%97%AE%E9%A2%98 源码 https://github.com/alibaba/fastjson/tree/1.2.83 fastjson 1.2.79版本发布，BUG修复这又是一个bug...

dependabot[bot]

dependencies

Bump log4j-core from 2.11.2 to 2.16.0

Bumps log4j-core from 2.11.2 to 2.16.0. [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.logging.log4j:log4j-core&package-manager=maven&previous-version=2.11.2&new-version=2.16.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...

dependabot[bot]

dependencies

Bump log4j-api from 2.11.2 to 2.16.0

Bumps log4j-api from 2.11.2 to 2.16.0. [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.logging.log4j:log4j-api&package-manager=maven&previous-version=2.11.2&new-version=2.16.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...

dependabot[bot]

dependencies

Bump guava from 28.1-jre to 29.0-jre

Bumps [guava](https://github.com/google/guava) from 28.1-jre to 29.0-jre. Release notes Sourced from guava's releases. 29.0 Maven <dependency> <groupId>com.google.guava</groupId> <artifactId>guava</artifactId> <version>29.0-jre</version>  <version>29.0-android</version> </dependency> Javadoc 29.0-jre 29.0-android JDiff 29.0-jre...

dependabot[bot]

dependencies

Bump libthrift from 0.11.0 to 0.14.0

Bumps [libthrift](https://github.com/apache/thrift) from 0.11.0 to 0.14.0. Release notes Sourced from libthrift's releases. Version 0.14.0 For release 0.14.0 head over to the official release download source: http://thrift.apache.org/download The assets below are...

dependabot[bot]

dependencies