From 70e81277e790fb6430f1c8a08aad5028238eec90 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 13 Feb 2026 21:18:45 +0000
Subject: [PATCH] Bump org.apache.avro:avro from 1.8.2 to 1.11.5

Bumps org.apache.avro:avro from 1.8.2 to 1.11.5.

---
updated-dependencies:
- dependency-name: org.apache.avro:avro
  dependency-version: 1.11.5
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 flink-connectors/flink-connector-hive/pom.xml           | 2 +-
 flink-connectors/flink-sql-connector-hive-3.1.3/pom.xml | 2 +-
 pom.xml                                                 | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/flink-connectors/flink-connector-hive/pom.xml b/flink-connectors/flink-connector-hive/pom.xml
index eaa17dae5ee9f..6271174e61982 100644
--- a/flink-connectors/flink-connector-hive/pom.xml
+++ b/flink-connectors/flink-connector-hive/pom.xml
@@ -38,7 +38,7 @@ under the License.
 		<hiverunner.version>4.0.0</hiverunner.version>
 		<reflections.version>0.9.8</reflections.version>
 		<derby.version>10.10.2.0</derby.version>
-		<hive.avro.version>1.8.2</hive.avro.version>
+		<hive.avro.version>1.11.5</hive.avro.version>
 		<!--
 		Hive requires Hadoop 2 to avoid
 		java.lang.NoClassDefFoundError: org/apache/hadoop/metrics/Updater errors
diff --git a/flink-connectors/flink-sql-connector-hive-3.1.3/pom.xml b/flink-connectors/flink-sql-connector-hive-3.1.3/pom.xml
index 98d493da6a613..31fd49f96c1d6 100644
--- a/flink-connectors/flink-sql-connector-hive-3.1.3/pom.xml
+++ b/flink-connectors/flink-sql-connector-hive-3.1.3/pom.xml
@@ -132,7 +132,7 @@ under the License.
 		<dependency>
 			<groupId>org.apache.avro</groupId>
 			<artifactId>avro</artifactId>
-			<version>1.8.2</version>
+			<version>1.11.5</version>
 			<optional>${flink.markBundledAsOptional}</optional>
 		</dependency>
 
diff --git a/pom.xml b/pom.xml
index d819f4eca31dd..1fbb161f45e4b 100644
--- a/pom.xml
+++ b/pom.xml
@@ -147,7 +147,7 @@ under the License.
 		<!-- Project `flink-benchmarks` uses zk testing server in `curator-test` for performance
 		benchmark, please confirm it will not affect the benchmarks when the version is bumped. -->
 		<curator.version>5.4.0</curator.version>
-		<avro.version>1.11.4</avro.version>
+		<avro.version>1.11.5</avro.version>
 		<!-- Version for transitive Jackson dependencies that are not used within Flink itself.-->
 		<jackson-bom.version>2.15.3</jackson-bom.version>
 		<javax.activation.api.version>1.2.0</javax.activation.api.version>