Require Mozilla Rhino 1.7.12 to fix SNYK-JAVA-ORGMOZILLA-1314295. (#3839

) (#3842) Signed-off-by: David Venable <[email protected]> (cherry picked from commit e09900a) Co-authored-by: David Venable <[email protected]>
opensearch-project · Dec 19, 2023 · 8c22b87 · 8c22b87
1 parent f43765f
commit 8c22b87
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/data-prepper-plugins/kafka-plugins/build.gradle b/data-prepper-plugins/kafka-plugins/build.gradle
@@ -63,6 +63,15 @@ dependencies {
     testImplementation libs.protobuf.util
     testImplementation libs.commons.io
     testImplementation libs.armeria.grpc
+
+    constraints {
+        implementation('org.mozilla:rhino') {
+            version {
+                require '1.7.12'
+            }
+            because 'Fixes SNYK-JAVA-ORGMOZILLA-1314295.'
+        }
+    }
 }