This is an automated email from the ASF dual-hosted git repository.
tzimanyi pushed a commit to branch main
in repository
https://gitbox.apache.org/repos/asf/incubator-kie-kogito-runtimes.git
The following commit(s) were added to refs/heads/main by this push:
new 5fab62db02 Upgrade kafka-clients to 3.9.1. (#3985)
5fab62db02 is described below
commit 5fab62db029ec7b4bb01389543c727060bab0ea2
Author: Tibor Zimányi <[email protected]>
AuthorDate: Mon Jul 21 08:34:44 2025 +0200
Upgrade kafka-clients to 3.9.1. (#3985)
---
kogito-build/kogito-dependencies-bom/pom.xml | 2 +-
quarkus/addons/mail/runtime/pom.xml | 12 ++++++++++++
quarkus/addons/messaging/integration-tests/pom.xml | 12 ++++++++++++
quarkus/addons/tracing-decision/runtime/pom.xml | 13 ++++++++++++-
.../pom.xml | 12 ++++++++++++
.../pom.xml | 12 ++++++++++++
.../integration-tests-quarkus-processes/pom.xml | 12 ++++++++++++
7 files changed, 73 insertions(+), 2 deletions(-)
diff --git a/kogito-build/kogito-dependencies-bom/pom.xml
b/kogito-build/kogito-dependencies-bom/pom.xml
index fafd93f686..745ea643c9 100644
--- a/kogito-build/kogito-dependencies-bom/pom.xml
+++ b/kogito-build/kogito-dependencies-bom/pom.xml
@@ -38,7 +38,7 @@
<version.io.quarkus>3.20.1</version.io.quarkus>
<version.io.quarkus.quarkus-test>${version.io.quarkus}</version.io.quarkus.quarkus-test>
<version.org.springframework.boot>3.4.7</version.org.springframework.boot>
- <version.org.apache.kafka>3.9.0</version.org.apache.kafka>
+ <version.org.apache.kafka>3.9.1</version.org.apache.kafka>
<version.org.bouncycastle.bc.jdk18on>1.80</version.org.bouncycastle.bc.jdk18on>
diff --git a/quarkus/addons/mail/runtime/pom.xml
b/quarkus/addons/mail/runtime/pom.xml
index f2bfee1b99..b12bef1552 100644
--- a/quarkus/addons/mail/runtime/pom.xml
+++ b/quarkus/addons/mail/runtime/pom.xml
@@ -44,6 +44,18 @@
<dependency>
<groupId>io.quarkus</groupId>
<artifactId>quarkus-messaging-kafka</artifactId>
+ <exclusions>
+ <!-- Overriding kafka-clients to fix a vulnerability.
+ This exclusion can be removed when Quarkus will contain
kafka-clients in at least version 3.9.1. -->
+ <exclusion>
+ <groupId>org.apache.kafka</groupId>
+ <artifactId>kafka-clients</artifactId>
+ </exclusion>
+ </exclusions>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.kafka</groupId>
+ <artifactId>kafka-clients</artifactId>
</dependency>
<dependency>
<groupId>io.quarkus</groupId>
diff --git a/quarkus/addons/messaging/integration-tests/pom.xml
b/quarkus/addons/messaging/integration-tests/pom.xml
index 781539bbe5..09d3a8dc52 100644
--- a/quarkus/addons/messaging/integration-tests/pom.xml
+++ b/quarkus/addons/messaging/integration-tests/pom.xml
@@ -55,6 +55,18 @@
<dependency>
<groupId>io.quarkus</groupId>
<artifactId>quarkus-messaging-kafka</artifactId>
+ <exclusions>
+ <!-- Overriding kafka-clients to fix a vulnerability.
+ This exclusion can be removed when Quarkus will contain
kafka-clients in at least version 3.9.1. -->
+ <exclusion>
+ <groupId>org.apache.kafka</groupId>
+ <artifactId>kafka-clients</artifactId>
+ </exclusion>
+ </exclusions>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.kafka</groupId>
+ <artifactId>kafka-clients</artifactId>
</dependency>
<dependency>
diff --git a/quarkus/addons/tracing-decision/runtime/pom.xml
b/quarkus/addons/tracing-decision/runtime/pom.xml
index 46d2537090..a61c8a6546 100644
--- a/quarkus/addons/tracing-decision/runtime/pom.xml
+++ b/quarkus/addons/tracing-decision/runtime/pom.xml
@@ -44,8 +44,19 @@
<dependency>
<groupId>io.quarkus</groupId>
<artifactId>quarkus-messaging-kafka</artifactId>
+ <exclusions>
+ <!-- Overriding kafka-clients to fix a vulnerability.
+ This exclusion can be removed when Quarkus will contain
kafka-clients in at least version 3.9.1. -->
+ <exclusion>
+ <groupId>org.apache.kafka</groupId>
+ <artifactId>kafka-clients</artifactId>
+ </exclusion>
+ </exclusions>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.kafka</groupId>
+ <artifactId>kafka-clients</artifactId>
</dependency>
-
<!-- Needed to trick DevServices into running a PostgreSQL instance for
TrustyService -->
<!-- This dependency handles starting up Databases for DevServices in
DevMode -->
<dependency>
diff --git
a/quarkus/extensions/kogito-quarkus-serverless-workflow-extension/kogito-quarkus-serverless-workflow-extension-live-reload-test/pom.xml
b/quarkus/extensions/kogito-quarkus-serverless-workflow-extension/kogito-quarkus-serverless-workflow-extension-live-reload-test/pom.xml
index f795b39bb4..f3d75c9aae 100644
---
a/quarkus/extensions/kogito-quarkus-serverless-workflow-extension/kogito-quarkus-serverless-workflow-extension-live-reload-test/pom.xml
+++
b/quarkus/extensions/kogito-quarkus-serverless-workflow-extension/kogito-quarkus-serverless-workflow-extension-live-reload-test/pom.xml
@@ -66,6 +66,18 @@
<dependency>
<groupId>io.quarkus</groupId>
<artifactId>quarkus-messaging-kafka</artifactId>
+ <exclusions>
+ <!-- Overriding kafka-clients to fix a vulnerability.
+ This exclusion can be removed when Quarkus will contain
kafka-clients in at least version 3.9.1. -->
+ <exclusion>
+ <groupId>org.apache.kafka</groupId>
+ <artifactId>kafka-clients</artifactId>
+ </exclusion>
+ </exclusions>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.kafka</groupId>
+ <artifactId>kafka-clients</artifactId>
</dependency>
<dependency>
diff --git
a/quarkus/extensions/kogito-quarkus-serverless-workflow-extension/kogito-quarkus-serverless-workflow-integration-test/pom.xml
b/quarkus/extensions/kogito-quarkus-serverless-workflow-extension/kogito-quarkus-serverless-workflow-integration-test/pom.xml
index cb709ba31e..7dfed381fa 100644
---
a/quarkus/extensions/kogito-quarkus-serverless-workflow-extension/kogito-quarkus-serverless-workflow-integration-test/pom.xml
+++
b/quarkus/extensions/kogito-quarkus-serverless-workflow-extension/kogito-quarkus-serverless-workflow-integration-test/pom.xml
@@ -61,6 +61,18 @@
<dependency>
<groupId>io.quarkus</groupId>
<artifactId>quarkus-messaging-kafka</artifactId>
+ <exclusions>
+ <!-- Overriding kafka-clients to fix a vulnerability.
+ This exclusion can be removed when Quarkus will contain
kafka-clients in at least version 3.9.1. -->
+ <exclusion>
+ <groupId>org.apache.kafka</groupId>
+ <artifactId>kafka-clients</artifactId>
+ </exclusion>
+ </exclusions>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.kafka</groupId>
+ <artifactId>kafka-clients</artifactId>
</dependency>
<dependency>
diff --git
a/quarkus/integration-tests/integration-tests-quarkus-processes/pom.xml
b/quarkus/integration-tests/integration-tests-quarkus-processes/pom.xml
index 7734be546e..e463493422 100644
--- a/quarkus/integration-tests/integration-tests-quarkus-processes/pom.xml
+++ b/quarkus/integration-tests/integration-tests-quarkus-processes/pom.xml
@@ -92,6 +92,18 @@
<dependency>
<groupId>io.quarkus</groupId>
<artifactId>quarkus-messaging-kafka</artifactId>
+ <exclusions>
+ <!-- Overriding kafka-clients to fix a vulnerability.
+ This exclusion can be removed when Quarkus will contain
kafka-clients in at least version 3.9.1. -->
+ <exclusion>
+ <groupId>org.apache.kafka</groupId>
+ <artifactId>kafka-clients</artifactId>
+ </exclusion>
+ </exclusions>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.kafka</groupId>
+ <artifactId>kafka-clients</artifactId>
</dependency>
<dependency>
<groupId>io.quarkus</groupId>
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
