Skip to content

Commit

Permalink
Bump to confluent version 7.6.0 (#5179)
Browse files Browse the repository at this point in the history
https://docs.confluent.io/platform/7.6/release-notes/index.html

Fixes CVE-2023-3635, a transitive dependency against a vulnerable okio-jvm version.
  • Loading branch information
devinrsmith committed Feb 21, 2024
1 parent 261fd5a commit a0a0e85
Showing 1 changed file with 3 additions and 3 deletions.
6 changes: 3 additions & 3 deletions extensions/kafka/build.gradle
Original file line number Diff line number Diff line change
Expand Up @@ -15,9 +15,9 @@ dependencies {
// Using io.confluent dependencies requires code in the toplevel build.gradle to add their maven repository.
// Note: the -ccs flavor is provided by confluent as their community edition. It is equivalent to the maven central
// version, but has a different version to make it easier to keep confluent dependencies aligned.
api 'org.apache.kafka:kafka-clients:7.4.0-ccs'
api 'io.confluent:kafka-avro-serializer:7.4.0'
api 'io.confluent:kafka-protobuf-serializer:7.4.0'
api 'org.apache.kafka:kafka-clients:7.6.0-ccs'
api 'io.confluent:kafka-avro-serializer:7.6.0'
api 'io.confluent:kafka-protobuf-serializer:7.6.0'

// When updating the kafka implementation, it may be useful to test out the minimum kafka version that our code
// compiles, tests, and runs with. If we want to offer more strict guarantees in these regards in the future, at
Expand Down

0 comments on commit a0a0e85

Please sign in to comment.