This is an automated email from the ASF dual-hosted git repository. tallison pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tika.git
The following commit(s) were added to refs/heads/main by this push: new b2cb0dc95 add grpc-core to ossindex ignore list until an update is available b2cb0dc95 is described below commit b2cb0dc95b3d8a367b0f5f1c729c753df1946279 Author: tballison <talli...@apache.org> AuthorDate: Thu Oct 27 15:52:26 2022 -0400 add grpc-core to ossindex ignore list until an update is available --- tika-parent/pom.xml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/tika-parent/pom.xml b/tika-parent/pom.xml index 8834163b9..0842263a6 100644 --- a/tika-parent/pom.xml +++ b/tika-parent/pom.xml @@ -514,11 +514,6 @@ <artifactId>commons-logging</artifactId> <version>${commons.logging.version}</version> </dependency> - <dependency> - <groupId>io.grpc</groupId> - <artifactId>grpc-core</artifactId> - <version>1.50.2</version> - </dependency> <dependency> <groupId>io.netty</groupId> <artifactId>netty-common</artifactId> @@ -837,6 +832,11 @@ <artifactId>guava</artifactId> <version>31.1-jre</version> </exclude> + <dependency> + <groupId>io.grpc</groupId> + <artifactId>grpc-core</artifactId> + <version>1.50.1</version> + </dependency> <exclude> <!-- CVE-2018-18928 does affect the java library not just the c/c++ library, upon further research -->