[tika] branch main updated: add grpc-core to ossindex ignore list until an update is available

[tallison]

This is an automated email from the ASF dual-hosted git repository.

tallison pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tika.git


The following commit(s) were added to refs/heads/main by this push:
     new b2cb0dc95 add grpc-core to ossindex ignore list until an update is 
available
b2cb0dc95 is described below

commit b2cb0dc95b3d8a367b0f5f1c729c753df1946279
Author: tballison <talli...@apache.org>
AuthorDate: Thu Oct 27 15:52:26 2022 -0400

    add grpc-core to ossindex ignore list until an update is available
---
 tika-parent/pom.xml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/tika-parent/pom.xml b/tika-parent/pom.xml
index 8834163b9..0842263a6 100644
--- a/tika-parent/pom.xml
+++ b/tika-parent/pom.xml
@@ -514,11 +514,6 @@
         <artifactId>commons-logging</artifactId>
         <version>${commons.logging.version}</version>
       </dependency>
-      <dependency>
-        <groupId>io.grpc</groupId>
-        <artifactId>grpc-core</artifactId>
-        <version>1.50.2</version>
-      </dependency>
       <dependency>
         <groupId>io.netty</groupId>
         <artifactId>netty-common</artifactId>
@@ -837,6 +832,11 @@
               <artifactId>guava</artifactId>
               <version>31.1-jre</version>
             </exclude>
+            <dependency>
+              <groupId>io.grpc</groupId>
+              <artifactId>grpc-core</artifactId>
+              <version>1.50.1</version>
+            </dependency>
             <exclude>
               <!-- CVE-2018-18928 does affect the java library not just the 
c/c++ library,
               upon further research -->