mirror of
https://github.com/google/nomulus
synced 2025-12-23 06:15:42 +00:00
Upgrade to Beam 2.34.0 (#1472)
This version of Beam does not have an explicit dependency on log4j. There are a couple of other things that need to change due to the upgrade. 1) The new version pulls in a dependency that is not on Maven Central but on packages.confluent.io, so we need to explicitly add this repo. 2) The new version has a dependency on flogger 0.6 anb above , which removed the LoggerConfig class (see google/flogger#142). We therefore backported the class. In the long term we should do what was suggested in the issue and use the normal JDK Logger config directly. 3) The intSqlPipeline dependency graph also needs to be updated. <!-- Reviewable:start --> --- This change is [<img src="https://reviewable.io/review_button.svg" height="34" align="absmiddle" alt="Reviewable"/>](https://reviewable.io/reviews/google/nomulus/1472) <!-- Reviewable:end -->
This commit is contained in:
@@ -63,11 +63,6 @@ configurations {
|
||||
// See https://issues.apache.org/jira/browse/BEAM-8862
|
||||
it.exclude group: 'org.mockito', module: 'mockito-core'
|
||||
}
|
||||
all.each {
|
||||
// log4j has high-profile security vulnerabilities. It's a transitive dependency used by some
|
||||
// Apache Beam packages. Excluding it does not impact our troubleshooting needs.
|
||||
it.exclude group: 'org.apache.logging.log4j'
|
||||
}
|
||||
}
|
||||
|
||||
dependencies {
|
||||
|
||||
Reference in New Issue
Block a user