{
  "formatVersion": "1.1",
  "component": {
    "group": "org.opensearch.dataprepper",
    "module": "data-prepper-api",
    "version": "2.9.0",
    "attributes": {
      "org.gradle.status": "release"
    }
  },
  "createdBy": {
    "gradle": {
      "version": "8.8"
    }
  },
  "variants": [
    {
      "name": "apiElements",
      "attributes": {
        "org.gradle.category": "library",
        "org.gradle.dependency.bundling": "external",
        "org.gradle.jvm.version": 11,
        "org.gradle.libraryelements": "jar",
        "org.gradle.usage": "java-api"
      },
      "files": [
        {
          "name": "data-prepper-api-2.9.0.jar",
          "url": "data-prepper-api-2.9.0.jar",
          "size": 198083,
          "sha512": "89b23adab14cc5a23fd102796a140884e02279360dd381b1b696b348f942ca2e8d73bf729c65790bee36b0f83746a41ed8db94af0e6625c3efe0fee286c42c16",
          "sha256": "585d9778fa9603b4eeed1d90d2f78e5fb8fc35aadd924492887d1ba3d78818b6",
          "sha1": "6523c7db59afbaf899fd8002d0731f1095cdc3c3",
          "md5": "97a51dce26eba73c5cb43f077392bdfa"
        }
      ]
    },
    {
      "name": "runtimeElements",
      "attributes": {
        "org.gradle.category": "library",
        "org.gradle.dependency.bundling": "external",
        "org.gradle.jvm.version": 11,
        "org.gradle.libraryelements": "jar",
        "org.gradle.usage": "java-runtime"
      },
      "dependencies": [
        {
          "group": "com.fasterxml.jackson",
          "module": "jackson-bom",
          "version": {
            "requires": "2.17.2"
          },
          "attributes": {
            "org.gradle.category": "platform"
          },
          "endorseStrictVersions": true
        },
        {
          "group": "org.eclipse.jetty",
          "module": "jetty-bom",
          "version": {
            "requires": "9.4.53.v20231009"
          },
          "attributes": {
            "org.gradle.category": "platform"
          },
          "endorseStrictVersions": true
        },
        {
          "group": "io.micrometer",
          "module": "micrometer-bom",
          "version": {
            "requires": "1.10.5"
          },
          "attributes": {
            "org.gradle.category": "platform"
          },
          "endorseStrictVersions": true
        },
        {
          "group": "com.google.guava",
          "module": "guava",
          "version": {
            "requires": "32.1.2-jre"
          }
        },
        {
          "group": "org.slf4j",
          "module": "slf4j-api",
          "version": {
            "requires": "2.0.6"
          }
        },
        {
          "group": "io.micrometer",
          "module": "micrometer-core"
        },
        {
          "group": "com.fasterxml.jackson.core",
          "module": "jackson-databind"
        },
        {
          "group": "com.fasterxml.jackson.datatype",
          "module": "jackson-datatype-jsr310"
        },
        {
          "group": "com.fasterxml.jackson.datatype",
          "module": "jackson-datatype-jdk8"
        },
        {
          "group": "org.apache.parquet",
          "module": "parquet-common",
          "version": {
            "requires": "1.14.1"
          }
        },
        {
          "group": "org.apache.commons",
          "module": "commons-lang3",
          "version": {
            "requires": "3.14.0"
          }
        }
      ],
      "dependencyConstraints": [
        {
          "group": "dnsjava",
          "module": "dnsjava",
          "version": {
            "requires": "3.6.1"
          },
          "reason": "Fixes CVE-2023-39410."
        },
        {
          "group": "org.apache.avro",
          "module": "avro",
          "version": {
            "requires": "1.11.3"
          },
          "reason": "Fixes CVE-2023-39410."
        },
        {
          "group": "org.apache.commons",
          "module": "commons-configuration2",
          "version": {
            "requires": "2.11.0"
          },
          "reason": "Fixes CVE-2024-29131 and CVE-2024-29133."
        },
        {
          "group": "org.apache.httpcomponents",
          "module": "httpclient",
          "version": {
            "requires": "4.5.14"
          },
          "reason": "We want the newest version of httpclient."
        },
        {
          "group": "org.apache.logging.log4j",
          "module": "log4j-core",
          "version": {
            "requires": "2.17.1"
          },
          "reason": "Log4j 2.17.1 fixes CVE-2021-44228, CVE-2021-45046, CVE-2021-45105, and CVE-2021-44832"
        },
        {
          "group": "org.apache.logging.log4j",
          "module": "log4j-api",
          "version": {
            "requires": "2.17.1"
          },
          "reason": "the build fails if the Log4j API is not update along with log4j-core"
        },
        {
          "group": "org.apache.zookeeper",
          "module": "zookeeper",
          "version": {
            "requires": "3.8.4"
          },
          "reason": "Fixes CVE-2024-23944, CVE-2023-44981"
        },
        {
          "group": "com.google.code.gson",
          "module": "gson",
          "version": {
            "requires": "2.8.9"
          },
          "reason": "Fixes WS-2021-0419 DoS vulnerability"
        },
        {
          "group": "com.google.protobuf",
          "module": "protobuf-java",
          "version": {
            "requires": "3.21.11"
          },
          "reason": "Fixes CVE-2022-3509, CVE-2022-3510"
        },
        {
          "group": "org.yaml",
          "module": "snakeyaml",
          "version": {
            "requires": "2.0"
          },
          "reason": "Fixes CVE-2022-1471"
        },
        {
          "group": "org.codehaus.jettison",
          "module": "jettison",
          "version": {
            "requires": "1.5.4"
          },
          "reason": "CVE from transitive dependecies"
        },
        {
          "group": "net.minidev",
          "module": "json-smart",
          "version": {
            "requires": "2.5.0"
          },
          "reason": "CVE from transitive dependencies"
        },
        {
          "group": "org.jetbrains.kotlin",
          "module": "kotlin-stdlib",
          "version": {
            "requires": "1.8.21"
          },
          "reason": "CVE from transitive dependencies"
        },
        {
          "group": "org.eclipse.jetty",
          "module": "http2-common",
          "version": {
            "requires": "9.4.53.v20231009"
          },
          "reason": "Fixes CVE-2023-44487"
        },
        {
          "group": "org.eclipse.jetty",
          "module": "http2-server",
          "version": {
            "requires": "9.4.53.v20231009"
          },
          "reason": "Fixes CVE-2023-44487"
        },
        {
          "group": "org.xerial.snappy",
          "module": "snappy-java",
          "version": {
            "requires": "1.1.10.5"
          },
          "reason": "Fixes CVE-2023-43642"
        },
        {
          "group": "com.squareup.okio",
          "module": "okio-jvm",
          "version": {
            "requires": "3.5.0"
          },
          "reason": "CVE from transitive dependencies"
        },
        {
          "group": "com.charleskorn.kaml",
          "module": "kaml",
          "version": {
            "requires": "0.55.0"
          },
          "reason": "CVE from transitive dependencies"
        },
        {
          "group": "com.jayway.jsonpath",
          "module": "json-path",
          "version": {
            "requires": "2.9.0"
          },
          "reason": "Fixes CVE-2023-51074 from transitive dependencies"
        },
        {
          "group": "org.scala-lang",
          "module": "scala-library",
          "version": {
            "requires": "2.13.12"
          },
          "reason": "CVE from transitive dependencies"
        },
        {
          "group": "org.jline",
          "module": "jline",
          "version": {
            "requires": "3.25.0"
          },
          "reason": "CVE-2023-50572"
        },
        {
          "group": "org.json",
          "module": "json",
          "version": {
            "requires": "20231013"
          },
          "reason": "CVE-2023-5072, CVE from transitive dependencies"
        },
        {
          "group": "org.apache.commons",
          "module": "commons-compress",
          "version": {
            "requires": "1.26.0"
          },
          "reason": "CVE-2024-25710, CVE-2024-26308"
        }
      ],
      "files": [
        {
          "name": "data-prepper-api-2.9.0.jar",
          "url": "data-prepper-api-2.9.0.jar",
          "size": 198083,
          "sha512": "89b23adab14cc5a23fd102796a140884e02279360dd381b1b696b348f942ca2e8d73bf729c65790bee36b0f83746a41ed8db94af0e6625c3efe0fee286c42c16",
          "sha256": "585d9778fa9603b4eeed1d90d2f78e5fb8fc35aadd924492887d1ba3d78818b6",
          "sha1": "6523c7db59afbaf899fd8002d0731f1095cdc3c3",
          "md5": "97a51dce26eba73c5cb43f077392bdfa"
        }
      ]
    },
    {
      "name": "javadocElements",
      "attributes": {
        "org.gradle.category": "documentation",
        "org.gradle.dependency.bundling": "external",
        "org.gradle.docstype": "javadoc",
        "org.gradle.usage": "java-runtime"
      },
      "files": [
        {
          "name": "data-prepper-api-2.9.0-javadoc.jar",
          "url": "data-prepper-api-2.9.0-javadoc.jar",
          "size": 1009140,
          "sha512": "f8891fc9814aad72a068b2a878ae071308ead7ab4a9c6f688158085176169004c426a77c9ae3b7a5fa0a3db8097e1481753cc1d4603d71043300f6ec5b675928",
          "sha256": "1d41ef24e712f674bcc46d666b3940fbfef7a4c2d75372cdeb11efbc507130fe",
          "sha1": "1b41769a01f929033439c82a458428e2548cb82c",
          "md5": "275cb77d2f50617dc42b9d8f1d6c4bbf"
        }
      ]
    },
    {
      "name": "sourcesElements",
      "attributes": {
        "org.gradle.category": "documentation",
        "org.gradle.dependency.bundling": "external",
        "org.gradle.docstype": "sources",
        "org.gradle.usage": "java-runtime"
      },
      "files": [
        {
          "name": "data-prepper-api-2.9.0-sources.jar",
          "url": "data-prepper-api-2.9.0-sources.jar",
          "size": 137827,
          "sha512": "f9782e96b48925feae92e0f6f85af672f4bf4ba55e3d89f70f23df76492701c6b13429c97704c53a30480f097e18fe881ab6113e986771d5bb10523ea4714c54",
          "sha256": "58fc471a7867ce854039492f0bd4c26c61239e72c606083c73f73674a6e43f28",
          "sha1": "7873cca956674a8c9f00e99a95a410c17092c279",
          "md5": "244757cae4fa956b21480768884171c4"
        }
      ]
    }
  ]
}