Skip to content

Commit fd1dbc9

Browse files
committed
update constraint
1 parent d400735 commit fd1dbc9

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

build.gradle.kts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@ subprojects {
3535
// This resolution strategy tells Gradle to automatically select the highest version when this conflict occurs.
3636
configurations.all {
3737
resolutionStrategy.capabilitiesResolution.withCapability("org.lz4:lz4-java") {
38-
select("at.yawk.lz4:lz4-java:1.8.1")
38+
select("at.yawk.lz4:lz4-java:1.10.1")
3939
because("Both org.lz4 and at.yawk.lz4 provide lz4-java due to Sonatype redirect")
4040
}
4141
}

kafka-bom/build.gradle.kts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ dependencies {
2727
}
2828
api("at.yawk.lz4:lz4-java:1.10.1") {
2929
because("[https://nvd.nist.gov/vuln/detail/CVE-2025-66566] in at.yawk.lz4:lz4-java (lz4-java-1.8.1.jar)")
30-
because("CVE-2025-66566 is fixed in 1.8.1")
30+
because("CVE-2025-66566 is fixed in 1.10.1")
3131
}
3232

3333
api("io.confluent:kafka-streams-avro-serde:$confluentVersion")

0 commit comments

Comments
 (0)