fix: upgrade vulnerable log4j

aaron-steinfeld · aaron-steinfeld · commit f9eda4977e86 · 2021-12-10T10:47:14.000-05:00
diff --git a/hypertrace-core-graphql-platform/build.gradle.kts b/hypertrace-core-graphql-platform/build.gradle.kts
@@ -36,7 +36,7 @@ dependencies {
       because("https://snyk.io/vuln/SNYK-JAVA-COMGOOGLECODEGSON-1730327")
     }
 
-    runtime("org.apache.logging.log4j:log4j-slf4j-impl:2.14.0")
+    runtime("org.apache.logging.log4j:log4j-slf4j-impl:2.15.0")
     runtime("io.grpc:grpc-netty:1.42.0")
     runtime("io.netty:netty-codec-http2:4.1.68.Final") {
       because("https://snyk.io/vuln/SNYK-JAVA-IONETTY-1083991")

Original file line number	Diff line number	Diff line change
`@@ -36,7 +36,7 @@ dependencies {`
`36`	`36`	`because("https://snyk.io/vuln/SNYK-JAVA-COMGOOGLECODEGSON-1730327")`
`37`	`37`	`}`
`38`	`38`
`39`		`- runtime("org.apache.logging.log4j:log4j-slf4j-impl:2.14.0")`
	`39`	`+ runtime("org.apache.logging.log4j:log4j-slf4j-impl:2.15.0")`
`40`	`40`	`runtime("io.grpc:grpc-netty:1.42.0")`
`41`	`41`	`runtime("io.netty:netty-codec-http2:4.1.68.Final") {`
`42`	`42`	`because("https://snyk.io/vuln/SNYK-JAVA-IONETTY-1083991")`