APPSEC-60: Upgrade org.apache.maven:apache-maven

[xjin-Confluent]

Upgrade org.apache.maven:apache-maven.

Committer Checklist (excluded from commit message)

• Verify design and implementation
• Verify test coverage and CI build status
• Verify documentation (including upgrade notes)

[Manikumar Reddy (omkreddy)]

xjin-Confluent Thanks for the PR. LGTM

[xjin-Confluent]

xjin-Confluent Thanks for the PR. LGTM

BTW, what is this package used for? That seems to be a package from Apache Maven.

[Manikumar Reddy (omkreddy)]

xjin-Confluent Thanks for the PR. LGTM

BTW, what is this package used for? That seems to be a package from Apache Maven.

Yeah, I think connect module is using utility class for parsing and storing connector lib version. . We can copy the util class and remove the maven package usage if required.
cc Konstantine Karantasis (@kkonstantine)

[xjin-Confluent]

xjin-Confluent Thanks for the PR. LGTM

BTW, what is this package used for? That seems to be a package from Apache Maven.

Yeah, I think connect module is using utility class for parsing and storing connector lib version. . We can copy the util class and remove the maven package usage if required.
cc Konstantine Karantasis (@kkonstantine)

We'd prefer if this could be removed easily. Can you create a Jira and track the work? For https://confluentinc.atlassian.net/browse/APPSEC-60, this PR is sufficient.

[Manikumar Reddy (omkreddy)]

We'd prefer if this could be removed easily. Can you create a Jira and track the work?

Pls check with #connect-eng team

[Konstantine Karantasis (kkonstantine)]

If this dependency is problematic, indeed we can consider copying the class. I'll create a Jira ticket tomorrow. Probably will be good to address in AK directly.