[POAE7-2396] bump junit and checkstyle to meet github security scan (#435)

Author: xieqi

Makefile

@@ -57,6 +57,7 @@ build-common:
 	@sed -i "s/velox\/substrait\/proto\///g" ${CPP_SOURCE_DIR}/thirdparty/velox/velox/substrait/proto/substrait/parameterized_types.proto
 	@sed -i "s/velox\/substrait\/proto\///g" ${CPP_SOURCE_DIR}/thirdparty/velox/velox/substrait/proto/substrait/plan.proto
 	@sed -i "s/velox\/substrait\/proto\///g" ${CPP_SOURCE_DIR}/thirdparty/velox/velox/substrait/proto/substrait/type_expressions.proto
+	@sed -i 's|"https://.*arrow.*tar.gz"|"https://github.com/apache/arrow/archive/refs/tags/apache-arrow-8.0.0.tar.gz"|g' ${CPP_SOURCE_DIR}/thirdparty/velox/third_party/CMakeLists.txt
 
 	@mkdir -p ${CPP_BUILD_DIR}
 	@cd ${CPP_BUILD_DIR} && \

jvm/pom.xml

@@ -60,7 +60,7 @@
     <scalatest.version>3.0.8</scalatest.version>
     <scalacheck.version>1.14.2</scalacheck.version>
     <slf4j.version>1.7.30</slf4j.version>
-    <junit.version>4.12</junit.version>
+    <junit.version>4.13.1</junit.version>
     <hadoop.deps.scope>provided</hadoop.deps.scope>
     <spark.deps.scope>provided</spark.deps.scope>
     <checkstyle.failOnViolation>true</checkstyle.failOnViolation>
@@ -118,7 +118,7 @@
             <dependency>
               <groupId>com.puppycrawl.tools</groupId>
               <artifactId>checkstyle</artifactId>
-              <version>8.19</version>
+              <version>8.29</version>
             </dependency>
             <dependency>
               <groupId>org.slf4j</groupId>