# Changelog ## Version 2.0.15 * Upgraded com.fasterxml.jackson.core:jackson-core from 2.22.0 to 2.22.1 to fix CVE-2026-54517 ## Version 2.0.14 * Upgraded com.fasterxml.jackson.core:jackson-core from 2.21.1 to 2.22.0 to fix CVE-2026-54517 ## Version 2.0.13 * Updated org.apache.avro:avro:jar to 1.12.1 to fix CVE-2025-33042 * Removed unused connect-formatters-avro dependency ## Version 2.0.12 * Upgraded com.fasterxml.jackson.core:jackson-core to fix CVE-13157 ## Version 2.0.11 * Upgraded connect-plugin-parent to fix CVE-2024-29371 ## Version 2.0.10 * Upgraded commons-lang3 to fix CVE-2025-48924 ## Version 2.0.9 * Upgraded commons-lang3 to fix CVE-2025-48924 ## Version 2.0.8 * Upgraded commons-lang3 to fix CVE-2025-48924 ## Version 2.0.7 * CC-33763: Removed usage of non public and deprecated APIs ## Version 2.0.6 * Upgrade commons-io and avro libraries to fix CVEs ## Version 2.0.5 * Upgrade gson, guava, commons-compress, httpclient, jose4j libraries to fix CVEs ## Version 2.0.4 * CC-26400, CC-24604: Fix jose4j and jackson-databind cves * Migration: Jenkins -> Semaphore * CC-24800: Add ‘connector.endpoint’ low level connector configuration to cloud template * CC-24768 Bump connect-formatters version ## Version 2.0.3 * CCLOG-2432 fix for CVEs CVE-2022-42004 CVE-2022-42003 CVE-2022-3171  CVE-2022-3509  CVE-2022-3510 * update connect-plugins-common * Bumping up version of connect-plugin-parent to pick gson:2.9.0 ## Version 2.0.2 * Bump up connect-plugins-parent version to fix connect-licensing-extensions issue ## Version 2.0.1 * CCLOG-1436: Bump up connect-plugins-parent version for CVE fix ## Version 2.0.0 * Bump up connect-http-client version to 0.3.2 for CVE fix * CCLOG-1218: Make `function.key` config required