security: upgrade kafka-clients to 3.5.2 (#6147)

apache · Dec 20, 2023 · 3df1704 · 3df1704
1 parent 2f9957b
commit 3df1704
Show file tree

Hide file tree

Showing 4 changed files with 18 additions and 0 deletions.
diff --git a/changes/en-us/2.x.md b/changes/en-us/2.x.md
@@ -29,6 +29,7 @@ Add changes here for all PR submitted to the 2.x branch.
 ### security:
 - [[#6069](https://github.com/seata/seata/pull/6069)] Upgrade Guava dependencies to fix security vulnerabilities
 - [[#6144](https://github.com/seata/seata/pull/6144)] upgrade nacos client to 1.4.6
+- [[#6147](https://github.com/seata/seata/pull/6147)] upgrade kafka-clients to 3.6.1
 
 ### test:
 - [[#6081](https://github.com/seata/seata/pull/6081)] add `test-os.yml` for testing the OS

diff --git a/changes/zh-cn/2.x.md b/changes/zh-cn/2.x.md
@@ -29,6 +29,7 @@
 - [[#6069](https://github.com/seata/seata/pull/6069)] 升级Guava依赖版本，修复安全漏洞
 - [[#6144](https://github.com/seata/seata/pull/6144)] 升级Nacos依赖版本至1.4.6
 - [[#6145](https://github.com/seata/seata/pull/6145)] 升级 jettison依赖版本至1.5.4
+- [[#6147](https://github.com/seata/seata/pull/6147)] 升级 kafka-clients依赖至3.6.1
 
 ### test:
 - [[#6081](https://github.com/seata/seata/pull/6081)] 添加 `test-os.yml` 用于测试seata在各种操作系统下的运行情况

diff --git a/dependencies/pom.xml b/dependencies/pom.xml
@@ -92,6 +92,7 @@
         <logback.version>1.2.9</logback.version>
         <logstash-logback-encoder.version>6.5</logstash-logback-encoder.version>
         <kafka-appender.version>0.2.0-RC2</kafka-appender.version>
+        <kafka-clients.version>3.6.1</kafka-clients.version>
 
         <!-- redis -->
         <jedis.version>3.8.0</jedis.version>
@@ -697,6 +698,17 @@
                 <groupId>com.github.danielwegener</groupId>
                 <artifactId>logback-kafka-appender</artifactId>
                 <version>${kafka-appender.version}</version>
+                <exclusions>
+                    <exclusion>
+                        <groupId>org.apache.kafka</groupId>
+                        <artifactId>kafka-clients</artifactId>
+                    </exclusion>
+                </exclusions>
+            </dependency>
+            <dependency>
+                <groupId>org.apache.kafka</groupId>
+                <artifactId>kafka-clients</artifactId>
+                <version>${kafka-clients.version}</version>
             </dependency>
 
 

diff --git a/server/pom.xml b/server/pom.xml
@@ -242,6 +242,10 @@
             <groupId>com.github.danielwegener</groupId>
             <artifactId>logback-kafka-appender</artifactId>
         </dependency>
+        <dependency>
+            <groupId>org.apache.kafka</groupId>
+            <artifactId>kafka-clients</artifactId>
+        </dependency>
         <dependency>
             <groupId>com.alipay.sofa</groupId>
             <artifactId>jraft-core</artifactId>