Changelog for Google Cloud Functions Sink Connector for Confluent Platform

To get the latest product updates delivered to you in an RSS feed, add the URL of this page to your feed reader or add the feed's URL directly
https://docs.confluent.io/kafka-connectors/gcp-functions/1.2/changelog.xml

Version 1.2.13

  • CC-45289: Bumped com.fasterxml.jackson.core:jackson-databind dependency version to 2.22.3 to resolve CVE-2026-83557

Version 1.2.12

  • Bumped connect-http-client dependency version to 0.4.2

  • CC-43045: Bumped connect-plugins-parent dependency version to 0.9.52 for jackson-core 2.22.1

Version 1.2.11

  • CC-41449: Bumped io.opentelemetry:opentelemetry-api dependency version to 1.62.0 to resolve CVE-2026-45292

Version 1.2.10

  • CC-42311: Bumped com.fasterxml.jackson.core:jackson-databind dependency version to 2.22.1 to resolve CVE-2026-54512 through CVE-2026-54518

Version 1.2.9

  • CC-41681: Hardened GCP service account credential parsing to ignore untrusted URL fields in the credential JSON.

Version 1.2.8

  • CC-39529 : Bumped com.fasterxml.jackson.core:jackson-core dependency version to 2.21.1 to resolve CVE

Version 1.2.7

  • CC-39669: Fixed a gRPC initialization error due to incompatibility with Confluent Platform versions 8.1.x+

Version 1.2.6

  • CC-38600: Bumped org.bitbucket.b_c:jose4j dependency version to 0.9.6 to resolve CVE-2024-29371

Version 1.2.5

  • CC-33763: Removed usage of non public and deprecated APIs

Version 1.2.4

  • CC-29184 Bumped com.google.protobuf_protobuf-java dependency version to 3.25.5 to resolve CVE-2024-7254

Version 1.2.3

  • CC-28015 : Fix the scope for kafka-connect-avro-converter dependency

Version 1.2.2

  • CC-26425: Bumped commons-compress dependency version to 1.26.1 to resolve CVE-2024-26308 and CVE-2024-25710

  • CC-26426: Bumped jackson-databind dependency version to 2.16.2 to resolve CVE-2023-35116

  • CC-26427: Bumped jose4j dependency version to 0.9.4 to resolve CVE-2023-51775

Version 1.2.1

  • CC-24057: Bumped guava_guava to 32.1.1

  • CC-24055: Bumped avro to 1.11.3

  • RCCA-16272: Added GCP creds type validator

Version 1.2.0

  • CCLOG-1923: Fixed CVE for HTTP Client to 4.5.13

  • CCLOG-553: Fixed CVE for jersey

  • CC-13074: Fixed CVE for Jackson datadbind

  • CC-12826: Changed display messsage validation