From dc9c75b8e636d7bae3be7785cd4d7091d586627f Mon Sep 17 00:00:00 2001
From: Cheng Pan <chengpan@apache.org>
Date: Tue, 5 Aug 2025 16:58:59 +0800
Subject: [PATCH] [KYUUBI #7162] Bump kafka-clients 3.9.1

### Why are the changes needed?

https://kafka.apache.org/cve-list.html

### How was this patch tested?

Pass GHA.

### Was this patch authored or co-authored using generative AI tooling?

No.

Closes #7162 from pan3793/kafka-3.9.1.

Closes #7162

108e5690b [Cheng Pan] Bump kafka-clients 3.9.1

Authored-by: Cheng Pan <chengpan@apache.org>
Signed-off-by: Cheng Pan <chengpan@apache.org>
---
 dev/dependencyList | 2 +-
 pom.xml            | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/dependencyList b/dev/dependencyList
index 68df87867..bf636c8b9 100644
--- a/dev/dependencyList
+++ b/dev/dependencyList
@@ -97,7 +97,7 @@ jetty-util-ajax/9.4.57.v20241219//jetty-util-ajax-9.4.57.v20241219.jar
 jetty-util/9.4.57.v20241219//jetty-util-9.4.57.v20241219.jar
 jline/2.14.6//jline-2.14.6.jar
 jul-to-slf4j/1.7.36//jul-to-slf4j-1.7.36.jar
-kafka-clients/3.5.2//kafka-clients-3.5.2.jar
+kafka-clients/3.9.1//kafka-clients-3.9.1.jar
 kubernetes-client-api/6.13.5//kubernetes-client-api-6.13.5.jar
 kubernetes-client/6.13.5//kubernetes-client-6.13.5.jar
 kubernetes-httpclient-okhttp/6.13.5//kubernetes-httpclient-okhttp-6.13.5.jar
diff --git a/pom.xml b/pom.xml
index cb1b97787..2a5ad6856 100644
--- a/pom.xml
+++ b/pom.xml
@@ -172,7 +172,7 @@
         <jetty.version>9.4.57.v20241219</jetty.version>
         <jline.version>2.14.6</jline.version>
         <junit.version>4.13.2</junit.version>
-        <kafka.version>3.5.2</kafka.version>
+        <kafka.version>3.9.1</kafka.version>
         <kubernetes-client.version>6.13.5</kubernetes-client.version>
         <kyuubi-relocated.version>0.6.0</kyuubi-relocated.version>
         <kyuubi-relocated-zookeeper.artifacts>kyuubi-relocated-zookeeper-34</kyuubi-relocated-zookeeper.artifacts>