lhotari opened a new pull request, #25784:
URL: https://github.com/apache/pulsar/pull/25784

   ### Motivation
   
   There are GitHub Dependabot security alerts about Jetty 9. The source of 
them is this build logic:
   
   
https://github.com/apache/pulsar/blob/a1613bc2e5fd26cc16fc95b4a3c61bc5e1ae090d/pulsar-client/build.gradle.kts#L90-L104
   
   This is used in pulsar-client's build to generate avro classes from the 
schema for tests.
   
   The dependency enforcement solution in the Pulsar Gradle build doesn't apply 
to all Gradle configurations. It's only applied to `implementation` (and 
configurations extending `implementation`). `avroTools` is an independent 
configuration.
   
   ### Modifications
   
   Exclude `jetty-server` dependency since it's not needed at all.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to