address gradle's conflict due to org.lz4:lz4-java:1.8.1 being pointed to at.yawk.lz4:lz4-java:1.8.1

DibyojyotiS · DibyojyotiS · commit 78aef6a6ce56 · 2025-12-11T13:32:12.000+05:30
diff --git a/build.gradle.kts b/build.gradle.kts
@@ -27,6 +27,16 @@ subprojects {
       apply(plugin = "org.hypertrace.code-style-plugin")
     }
   }
+
+  // Handle lz4-java redirect capability conflict:
+  // Sonatype added a redirect from org.lz4:lz4-java:1.8.1 -> at.yawk.lz4:lz4-java:1.8.1 to address CVE-2025-12183.
+  // Both artifacts declare the same capability, causing a conflict when upgrading from Kafka's org.lz4:lz4-java:1.8.0.
+  // This resolution strategy tells Gradle to automatically select the highest version when this conflict occurs.
+  configurations.all {
+    resolutionStrategy.capabilitiesResolution.withCapability("org.lz4:lz4-java") {
+      selectHighestVersion()
+    }
+  }
 }
 
 dependencyCheck {

Original file line number	Diff line number	Diff line change
`@@ -27,6 +27,16 @@ subprojects {`
`27`	`27`	`apply(plugin = "org.hypertrace.code-style-plugin")`
`28`	`28`	`}`
`29`	`29`	`}`
	`30`	`+`
	`31`	`+ // Handle lz4-java redirect capability conflict:`
	`32`	`+ // Sonatype added a redirect from org.lz4:lz4-java:1.8.1 -> at.yawk.lz4:lz4-java:1.8.1 to address CVE-2025-12183.`
	`33`	`+ // Both artifacts declare the same capability, causing a conflict when upgrading from Kafka's org.lz4:lz4-java:1.8.0.`
	`34`	`+ // This resolution strategy tells Gradle to automatically select the highest version when this conflict occurs.`
	`35`	`+ configurations.all {`
	`36`	`+ resolutionStrategy.capabilitiesResolution.withCapability("org.lz4:lz4-java") {`
	`37`	`+ selectHighestVersion()`
	`38`	`+ }`
	`39`	`+ }`
`30`	`40`	`}`
`31`	`41`
`32`	`42`	`dependencyCheck {`