Worked on security-focused maintenance for the apache/parquet-java repository, addressing a critical vulnerability by updating the aircompressor dependency to remediate CVE-2025-67721. The approach centered on disciplined dependency management and security vulnerability mitigation, ensuring the update introduced no changes to the API surface. All changes were clearly linked to the relevant issue and pull request, providing full traceability and auditability. The work was implemented using XML for dependency configuration and validated through the existing test suite. This update reduced the risk of exploit for downstream consumers, maintaining compliance and protecting data processing pipelines without disrupting client deployments or workflows.