Upgraded netty and hypertrace service-framework versions (#49)

* Upgraded netty and hypertrace service-framework versions * Removed third-party libraries not being used because they bring in lot of vulnerabilities
hypertrace · Nov 20, 2021 · 5ffcace · 5ffcace
1 parent c59dfc9
commit 5ffcace
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 3 deletions.
diff --git a/view-creator-framework/build.gradle.kts b/view-creator-framework/build.gradle.kts
@@ -19,9 +19,9 @@ tasks.test {
 }
 
 dependencies {
-  implementation("org.hypertrace.core.serviceframework:platform-service-framework:0.1.26")
+  implementation("org.hypertrace.core.serviceframework:platform-service-framework:0.1.31")
   constraints {
-    implementation("io.netty:netty-all:4.1.63.Final") {
+    implementation("io.netty:netty-all:4.1.68.Final") {
       because("HTTP Request Smuggling [High Severity][https://snyk.io/vuln/SNYK-JAVA-IONETTY-559515] in io.netty:[email protected]")
     }
   }
@@ -58,6 +58,8 @@ dependencies {
     exclude("org.slf4j", "slf4j-log4j12")
     exclude("org.webjars", "swagger-ui")
     exclude("org.yaml", "snakeyaml")
+    exclude("org.apache.hive", "hive-storage-api")
+    exclude("org.apache.datasketches", "datasketches-java")
   }
   constraints {
     implementation("com.google.guava:guava:30.0-android") {

diff --git a/view-generator-framework/build.gradle.kts b/view-generator-framework/build.gradle.kts
@@ -19,7 +19,7 @@ tasks.test {
 }
 
 dependencies {
-  implementation("org.hypertrace.core.serviceframework:platform-service-framework:0.1.26")
+  implementation("org.hypertrace.core.serviceframework:platform-service-framework:0.1.31")
 
   implementation("org.apache.avro:avro:1.10.2")