# Changelog for Google Cloud Functions Sink Connector for Confluent Platform ## Version 1.2.12 * Bumped `connect-http-client` dependency version to 0.4.2 * CC-43045: Bumped `connect-plugins-parent` dependency version to 0.9.52 for jackson-core 2.22.1 ## Version 1.2.11 * CC-41449: Bumped `io.opentelemetry:opentelemetry-api` dependency version to 1.62.0 to resolve CVE-2026-45292 ## Version 1.2.10 * CC-42311: Bumped `com.fasterxml.jackson.core:jackson-databind` dependency version to 2.22.1 to resolve CVE-2026-54512 through CVE-2026-54518 ## Version 1.2.9 * CC-41681: Hardened GCP service account credential parsing to ignore untrusted URL fields in the credential JSON. ## Version 1.2.8 * CC-39529 : Bumped `com.fasterxml.jackson.core:jackson-core` dependency version to 2.21.1 to resolve CVE ## Version 1.2.7 * CC-39669: Fixed a gRPC initialization error due to incompatibility with Confluent Platform versions 8.1.x+ ## Version 1.2.6 * CC-38600: Bumped `org.bitbucket.b_c:jose4j` dependency version to 0.9.6 to resolve CVE-2024-29371 ## Version 1.2.5 * CC-33763: Removed usage of non public and deprecated APIs ## Version 1.2.4 * CC-29184 Bumped `com.google.protobuf_protobuf-java` dependency version to 3.25.5 to resolve CVE-2024-7254 ## Version 1.2.3 * CC-28015 : Fix the scope for kafka-connect-avro-converter dependency ## Version 1.2.2 * CC-26425: Bumped `commons-compress` dependency version to 1.26.1 to resolve CVE-2024-26308 and CVE-2024-25710 * CC-26426: Bumped `jackson-databind` dependency version to 2.16.2 to resolve CVE-2023-35116 * CC-26427: Bumped `jose4j` dependency version to 0.9.4 to resolve CVE-2023-51775 ## Version 1.2.1 * CC-24057: Bumped `guava_guava` to 32.1.1 * CC-24055: Bumped `avro` to 1.11.3 * RCCA-16272: Added GCP creds type validator ## Version 1.2.0 * CCLOG-1923: Fixed CVE for HTTP Client to 4.5.13 * CCLOG-553: Fixed CVE for jersey * CC-13074: Fixed CVE for Jackson datadbind * CC-12826: Changed display messsage validation