Skip to content

Commit c782cee

Browse files
averemee-simimaison
authored andcommitted
KAFKA-20373: Bump maven artifact to 3.9.15 (#21911)
Bump maven-artifact to resolve plexus-utils CVE: [CVE-2025-67030](https://www.cve.org/CVERecord?id=CVE-2025-67030). Reviewers: Chia-Ping Tsai <chia7712@gmail.com>, Mickael Maison <mickael.maison@gmail.com>
1 parent e291546 commit c782cee

2 files changed

Lines changed: 3 additions & 3 deletions

File tree

LICENSE-binary

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -243,10 +243,10 @@ License Version 2.0:
243243
- log4j-slf4j-impl-2.25.3
244244
- log4j-1.2-api-2.25.3
245245
- lz4-java-1.10.1
246-
- maven-artifact-3.9.6
246+
- maven-artifact-3.9.15
247247
- metrics-core-2.2.0
248248
- opentelemetry-proto-1.3.2-alpha
249-
- plexus-utils-3.5.1
249+
- plexus-utils-3.6.1
250250
- rocksdbjni-10.1.3
251251
- scala-library-2.13.17
252252
- scala-logging_2.13-3.9.6

gradle/dependencies.gradle

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -113,7 +113,7 @@ versions += [
113113
// https://github.com/apache/kafka/blob/trunk/clients/src/main/java/org/apache/kafka/common/record/CompressionType.java#L73-L74
114114
// https://github.com/yawkat/lz4-java/blob/main/src/java/net/jpountz/lz4/LZ4Constants.java#L23-L24
115115
lz4: "1.10.1",
116-
mavenArtifact: "3.9.6",
116+
mavenArtifact: "3.9.15",
117117
metrics: "2.2.0",
118118
mockito: "5.20.0",
119119
opentelemetryProto: "1.3.2-alpha",

0 commit comments

Comments
 (0)