From 0c99d1e6e2622e37e22459420640432d03445c6b Mon Sep 17 00:00:00 2001 From: David Venable Date: Fri, 8 Dec 2023 11:48:25 -0600 Subject: [PATCH] Require Mozilla Rhino 1.7.12 to fix SNYK-JAVA-ORGMOZILLA-1314295. Signed-off-by: David Venable --- data-prepper-plugins/kafka-plugins/build.gradle | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/data-prepper-plugins/kafka-plugins/build.gradle b/data-prepper-plugins/kafka-plugins/build.gradle index 1e3bf9581d..ad9a627bb9 100644 --- a/data-prepper-plugins/kafka-plugins/build.gradle +++ b/data-prepper-plugins/kafka-plugins/build.gradle @@ -63,6 +63,15 @@ dependencies { testImplementation libs.protobuf.util testImplementation libs.commons.io testImplementation libs.armeria.grpc + + constraints { + implementation('org.mozilla:rhino') { + version { + require '1.7.12' + } + because 'Fixes SNYK-JAVA-ORGMOZILLA-1314295.' + } + } }