Updating the dependencies for jackson, gson, http client to address security (#40)

* Updating the dependencies for jackson, gson, http client to address security vulnerabilities

* For old version of kafka (version < 2.6) error topic will be skipped. Added warning log.

Co-authored-by: ninair <[email protected]>
Co-authored-by: vivetiwa <[email protected]>

Author: 3 people

dependencies.gradle

@@ -17,10 +17,10 @@ ext {
 
 versions.collections4 = '4.4'
 versions.commonslang = '3.9'
-versions.gson = '2.8.5'
-versions.guava = '28.0-jre'
-versions.httpClient = '4.5.9'
-versions.jackson = '2.9.3'
+versions.gson = '2.10'
+versions.guava = '31.1-jre'
+versions.httpClient = '4.5.13'
+versions.jackson = '2.14.0'
 versions.jmockit = '1.41'
 versions.jmxPrometheusJavaAgent = '0.12.0'
 versions.junitJupiter = '5.2.0'

streaming-connect-sink/src/main/java/com/adobe/platform/streaming/sink/AbstractSinkTask.java

@@ -63,7 +63,11 @@ public String version() {
   @Override
   public void initialize(SinkTaskContext context) {
     super.initialize(context);
-    errantRecordReporter = context.errantRecordReporter();
+    try {
+      errantRecordReporter = context.errantRecordReporter();
+    } catch (NoSuchMethodError | NoClassDefFoundError exception) {
+      LOG.warn("Error report not defined in current kafka version. Please use Apache Kafka version > 2.6.");
+    }
   }
 
   @Override