Skip to content

Commit

Permalink
remove-configruations2-from-stripped-jar (#226)
Browse files Browse the repository at this point in the history
- hadoop-client brings in a version of commons-configuration w/ vulnerabilities
- we strip hadoop-client in the jar that goes to confluenthub
- add stripping commons-configuration2 as well so we can publish to confluent-hub
  • Loading branch information
tabmatfournier authored Mar 27, 2024
1 parent cdd54f3 commit 5ab5c53
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions kafka-connect-runtime/build.gradle
Original file line number Diff line number Diff line change
Expand Up @@ -33,6 +33,7 @@ dependencies {
exclude group: "org.apache.zookeeper"
exclude group: "org.apache.kerby"
exclude group: "org.apache.hadoop", module: "hadoop-auth"
exclude group: "org.apache.commons", module: "commons-configuration2"
exclude group: "org.apache.hadoop.thirdparty", module: "hadoop-shaded-protobuf_3_7"
exclude group: "org.eclipse.jetty"
}
Expand Down

0 comments on commit 5ab5c53

Please sign in to comment.