File tree Expand file tree Collapse file tree 2 files changed +12
-1
lines changed
Expand file tree Collapse file tree 2 files changed +12
-1
lines changed Original file line number Diff line number Diff line change @@ -3,7 +3,7 @@ protoc = "3.25.8"
33grpc = " 1.75.0"
44hypertrace-framework = " 0.1.91"
55hypertrace-grpcutils = " 0.13.17"
6- hypertrace-kafka = " 0.6.3 "
6+ hypertrace-kafka = " 0.6.4 "
77hypertrace-bom = " +"
88hypertrace-attributeservice = " 0.14.35"
99hypertrace-gatewayservice = " 0.3.9"
Original file line number Diff line number Diff line change @@ -82,3 +82,14 @@ tasks.register("verifyResolution") {
8282tasks.check {
8383 dependsOn(" verifyResolution" )
8484}
85+
86+ // Handle lz4-java redirect capability conflict:
87+ // Sonatype added a redirect from org.lz4:lz4-java:1.8.1 -> at.yawk.lz4:lz4-java:1.8.1 to address CVE-2025-12183.
88+ // Both artifacts declare the same capability, causing a conflict when upgrading from Kafka's org.lz4:lz4-java:1.8.0.
89+ // This resolution strategy tells Gradle to automatically select the highest version when this conflict occurs.
90+ configurations.all {
91+ resolutionStrategy.capabilitiesResolution.withCapability(" org.lz4:lz4-java" ) {
92+ select(" at.yawk.lz4:lz4-java:1.8.1" )
93+ because(" Both org.lz4 and at.yawk.lz4 provide lz4-java due to Sonatype redirect" )
94+ }
95+ }
You can’t perform that action at this time.
0 commit comments