liko9 commented on code in PR #13561:
URL: https://github.com/apache/iceberg/pull/13561#discussion_r2211034266
##########
kafka-connect/build.gradle:
##########
@@ -64,9 +64,14 @@
project(':iceberg-kafka-connect:iceberg-kafka-connect-runtime') {
configurations {
hive {
extendsFrom runtimeClasspath
+ // force upgrades for dependencies with known vulnerabilities...
+ resolutionStrategy {
+ force 'commons-beanutils:commons-beanutils:1.11.0'
+ }
}
all {
exclude group: 'javax.activation', module: 'activation'
+ exclude group: 'commons-beanutils'
Review Comment:
My goal here is to not include it when not building for hive. But I'll file
a separate issue for that and work on that for a future release. We don't need
these hadoop deps for the non-Hive build. I'll update my PR shortly.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscr...@iceberg.apache.org
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@iceberg.apache.org
For additional commands, e-mail: issues-h...@iceberg.apache.org
