Skip to content

Commit 630269c

Browse files
authored
Update hypertrace-kafka version to 0.6.4 (#87)
* Update hypertrace-kafka version to 0.6.4 * select at.yark.lz4:lz4-java:1.8.1 when org.lz4:lz4-java:1.8.1 redirects to it. * spotless-apply xhanges
1 parent 1c3208b commit 630269c

File tree

2 files changed

+12
-1
lines changed

2 files changed

+12
-1
lines changed

gradle/libs.versions.toml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ protoc = "3.25.8"
33
grpc = "1.75.0"
44
hypertrace-framework = "0.1.91"
55
hypertrace-grpcutils = "0.13.17"
6-
hypertrace-kafka = "0.6.3"
6+
hypertrace-kafka = "0.6.4"
77
hypertrace-bom = "+"
88
hypertrace-attributeservice = "0.14.35"
99
hypertrace-gatewayservice = "0.3.9"

test-consumer/build.gradle.kts

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -82,3 +82,14 @@ tasks.register("verifyResolution") {
8282
tasks.check {
8383
dependsOn("verifyResolution")
8484
}
85+
86+
// Handle lz4-java redirect capability conflict:
87+
// Sonatype added a redirect from org.lz4:lz4-java:1.8.1 -> at.yawk.lz4:lz4-java:1.8.1 to address CVE-2025-12183.
88+
// Both artifacts declare the same capability, causing a conflict when upgrading from Kafka's org.lz4:lz4-java:1.8.0.
89+
// This resolution strategy tells Gradle to automatically select the highest version when this conflict occurs.
90+
configurations.all {
91+
resolutionStrategy.capabilitiesResolution.withCapability("org.lz4:lz4-java") {
92+
select("at.yawk.lz4:lz4-java:1.8.1")
93+
because("Both org.lz4 and at.yawk.lz4 provide lz4-java due to Sonatype redirect")
94+
}
95+
}

0 commit comments

Comments
 (0)