@@ -53,6 +53,9 @@ configurations {
5353 // is caused by the use of avro-compiler v1.12.0 with older dependencies including commons-lang3 v3.12.0.
5454 force ' org.apache.commons:commons-lang3:3.19.0'
5555
56+ // Forcing marklogic-data-hub to use the latest version of ml-gradle, which minimizes security vulnerabilities.
57+ force " com.marklogic:ml-gradle:6.1.0"
58+
5659 resolutionStrategy. eachDependency { DependencyResolveDetails details ->
5760 // Force v12.1.1 of jetty-http to avoid CVE-2025-5115
5861 // (https://nvd.nist.gov/vuln/detail/CVE-2025-5115), which is a transitive
@@ -83,17 +86,10 @@ dependencies {
8386 def kafkaConnectRuntime = " org.apache.kafka:connect-runtime:${ kafkaVersion} "
8487 compileOnly kafkaConnectRuntime
8588
86- // Force DHF to use the latest version of ml-gradle, which minimizes security vulnerabilities
87- implementation " com.marklogic:ml-gradle:6.1.0"
89+ implementation " com.marklogic:marklogic-data-hub:6.2.1"
8890
8991 implementation " com.fasterxml.jackson.dataformat:jackson-dataformat-csv:2.20.0"
9092
91- // Note that in general, the version of the DHF jar must match that of the deployed DHF instance. Different versions
92- // may work together, but that behavior is not guaranteed.
93- implementation(" com.marklogic:marklogic-data-hub:6.2.1" ) {
94- exclude module : " ml-gradle"
95- }
96-
9793 testImplementation ' com.marklogic:marklogic-junit5:2.0-SNAPSHOT'
9894
9995 testImplementation " org.apache.kafka:connect-json:${ kafkaVersion} "
0 commit comments