Skip to content

Commit b18239f

Browse files
committed
MLE-24747 Slightly better way of forcing ml-gradle 6.1
This removes ml-gradle from the list of direct dependencies, as it's not really - it's only marklogic-data-hub that is a direct dependency.
1 parent 0ea40ba commit b18239f

File tree

1 file changed

+4
-8
lines changed

1 file changed

+4
-8
lines changed

build.gradle

Lines changed: 4 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -53,6 +53,9 @@ configurations {
5353
// is caused by the use of avro-compiler v1.12.0 with older dependencies including commons-lang3 v3.12.0.
5454
force 'org.apache.commons:commons-lang3:3.19.0'
5555

56+
// Forcing marklogic-data-hub to use the latest version of ml-gradle, which minimizes security vulnerabilities.
57+
force "com.marklogic:ml-gradle:6.1.0"
58+
5659
resolutionStrategy.eachDependency { DependencyResolveDetails details ->
5760
// Force v12.1.1 of jetty-http to avoid CVE-2025-5115
5861
// (https://nvd.nist.gov/vuln/detail/CVE-2025-5115), which is a transitive
@@ -83,17 +86,10 @@ dependencies {
8386
def kafkaConnectRuntime = "org.apache.kafka:connect-runtime:${kafkaVersion}"
8487
compileOnly kafkaConnectRuntime
8588

86-
// Force DHF to use the latest version of ml-gradle, which minimizes security vulnerabilities
87-
implementation "com.marklogic:ml-gradle:6.1.0"
89+
implementation "com.marklogic:marklogic-data-hub:6.2.1"
8890

8991
implementation "com.fasterxml.jackson.dataformat:jackson-dataformat-csv:2.20.0"
9092

91-
// Note that in general, the version of the DHF jar must match that of the deployed DHF instance. Different versions
92-
// may work together, but that behavior is not guaranteed.
93-
implementation("com.marklogic:marklogic-data-hub:6.2.1") {
94-
exclude module: "ml-gradle"
95-
}
96-
9793
testImplementation 'com.marklogic:marklogic-junit5:2.0-SNAPSHOT'
9894

9995
testImplementation "org.apache.kafka:connect-json:${kafkaVersion}"

0 commit comments

Comments
 (0)