liko9 commented on code in PR #13561:
URL: https://github.com/apache/iceberg/pull/13561#discussion_r2210793342
##########
kafka-connect/build.gradle:
##########
@@ -64,9 +64,14 @@
project(':iceberg-kafka-connect:iceberg-kafka-connect-runtime') {
configurations {
hive {
extendsFrom runtimeClasspath
+ // force upgrades for dependencies with known vulnerabilities...
+ resolutionStrategy {
+ force 'commons-beanutils:commons-beanutils:1.11.0'
Review Comment:
My thinking was that we didn't want/need this for the "all" target because
that's a Hive dependency. That said, moving it here didn't include it in the
non-hive distZip build so I've done as you asked.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscr...@iceberg.apache.org
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@iceberg.apache.org
For additional commands, e-mail: issues-h...@iceberg.apache.org
