mirror of https://github.com/apache/kafka.git
In [KAFKA-19359](https://issues.apache.org/jira/browse/KAFKA-19359), the commons-beanutils transitive dependency was force bumped in the project to avoid related CVEs. The commons-validator already has a new release, which solves this problem: https://github.com/apache/commons-validator/tags The workaround could be deleted as part of the version bump. Reviewers: Chia-Ping Tsai <chia7712@gmail.com>
This commit is contained in:
parent
c2aeec46a2
commit
3c0843961b
|
@ -211,7 +211,7 @@ License Version 2.0:
|
|||
- commons-digester-2.1
|
||||
- commons-lang3-3.18.0
|
||||
- commons-logging-1.3.5
|
||||
- commons-validator-1.9.0
|
||||
- commons-validator-1.10.0
|
||||
- hash4j-0.22.0
|
||||
- jackson-annotations-2.19.0
|
||||
- jackson-core-2.19.0
|
||||
|
|
|
@ -193,8 +193,6 @@ allprojects {
|
|||
// ensure we have a single version in the classpath despite transitive dependencies
|
||||
libs.scalaLibrary,
|
||||
libs.scalaReflect,
|
||||
// Workaround before `commons-validator` has new release. See KAFKA-19359.
|
||||
libs.commonsBeanutils,
|
||||
libs.jacksonAnnotations,
|
||||
libs.commonsLang
|
||||
)
|
||||
|
|
|
@ -57,9 +57,8 @@ versions += [
|
|||
caffeine: "3.2.0",
|
||||
bndlib: "7.1.0",
|
||||
checkstyle: project.hasProperty('checkstyleVersion') ? checkstyleVersion : "10.20.2",
|
||||
commonsBeanutils: "1.11.0",
|
||||
commonsLang: "3.18.0",
|
||||
commonsValidator: "1.9.0",
|
||||
commonsValidator: "1.10.0",
|
||||
classgraph: "4.8.179",
|
||||
gradle: "8.14.3",
|
||||
grgit: "4.1.1",
|
||||
|
@ -151,7 +150,6 @@ libs += [
|
|||
bndlib:"biz.aQute.bnd:biz.aQute.bndlib:$versions.bndlib",
|
||||
caffeine: "com.github.ben-manes.caffeine:caffeine:$versions.caffeine",
|
||||
classgraph: "io.github.classgraph:classgraph:$versions.classgraph",
|
||||
commonsBeanutils: "commons-beanutils:commons-beanutils:$versions.commonsBeanutils",
|
||||
commonsLang: "org.apache.commons:commons-lang3:$versions.commonsLang",
|
||||
commonsValidator: "commons-validator:commons-validator:$versions.commonsValidator",
|
||||
jacksonAnnotations: "com.fasterxml.jackson.core:jackson-annotations:$versions.jackson",
|
||||
|
|
Loading…
Reference in New Issue