From 51b39b519afa09f6774a3f74a7b244f434be814d Mon Sep 17 00:00:00 2001 From: Artem Bilan Date: Mon, 8 Apr 2024 13:24:01 -0400 Subject: [PATCH] Upgrade to the latest Debezium * Manage some vulnerable transitive dependencies for the `spring-debezium-supplier` --- dependencies.gradle | 2 +- supplier/spring-debezium-supplier/build.gradle | 7 ++++++- 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/dependencies.gradle b/dependencies.gradle index 4347af62..244d86f2 100644 --- a/dependencies.gradle +++ b/dependencies.gradle @@ -3,7 +3,7 @@ ext { springCloudVersion = '2023.0.1' springCloudAwsVersion = '3.0.4' - debeziumVersion = '2.5.4.Final' + debeziumVersion = '2.6.0.Final' djlVersion = '0.26.0' djlSpringVersion = '0.26' diff --git a/supplier/spring-debezium-supplier/build.gradle b/supplier/spring-debezium-supplier/build.gradle index 14e82958..324c22d7 100644 --- a/supplier/spring-debezium-supplier/build.gradle +++ b/supplier/spring-debezium-supplier/build.gradle @@ -4,6 +4,12 @@ repositories { dependencies { api project(':spring-debezium-autoconfigure') + + // TODO until Debezium upgrades them to non-vulnerable versions + api 'org.apache.commons:commons-compress:1.26.1' + api 'org.apache.avro:avro:1.11.3' + api 'org.json:json:20240303' + api 'org.springframework.integration:spring-integration-debezium' api 'io.debezium:debezium-connector-mysql' api 'io.debezium:debezium-connector-mongodb' @@ -13,7 +19,6 @@ dependencies { api 'io.debezium:debezium-connector-db2' api 'io.debezium:debezium-connector-vitess' api 'io.debezium:debezium-connector-spanner' - api 'io.debezium:debezium-connector-spanner' testImplementation 'com.zaxxer:HikariCP' testImplementation 'org.springframework:spring-jdbc'