Require Mozilla Rhino 1.7.12 to fix SNYK-JAVA-ORGMOZILLA-1314295.

Signed-off-by: David Venable <[email protected]>
opensearch-project · Dec 8, 2023 · 0c99d1e · 0c99d1e
1 parent 668066f
commit 0c99d1e
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/data-prepper-plugins/kafka-plugins/build.gradle b/data-prepper-plugins/kafka-plugins/build.gradle
@@ -63,6 +63,15 @@ dependencies {
     testImplementation libs.protobuf.util
     testImplementation libs.commons.io
     testImplementation libs.armeria.grpc
+
+    constraints {
+        implementation('org.mozilla:rhino') {
+            version {
+                require '1.7.12'
+            }
+            because 'Fixes SNYK-JAVA-ORGMOZILLA-1314295.'
+        }
+    }
 }