awslabs / amazon-kinesis-client

Client library for Amazon Kinesis
Apache License 2.0
635 stars 461 forks source link

Upgrade ch.qos.logback:logback-classic dependency from 1.3.12 to 1.5.… #1268

Closed brendan-p-lynch closed 4 months ago

brendan-p-lynch commented 4 months ago

…14 in /amazon-kinesis-client and /amazon-kinesis-client-multilang and aws-java-sdk.version from 1.12.405 to 1.12.668 in /amazon-kinesis-client-multilang

upgrade awssdk.version from 2.20.43 to 2.25.3

Upgrade gsr.version from 1.1.17 to 1.1.19

This is to resolve transitive dependency vulnerabilities that are currently in amazon-kinesis-client

1231

Description of changes:

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

brendan-p-lynch commented 4 months ago

new mvn dependency:tree

[INFO] --- dependency:2.8:tree (default-cli) @ amazon-kinesis-client --- [INFO] software.amazon.kinesis:amazon-kinesis-client:jar:2.5.5 [INFO] +- software.amazon.awssdk:kinesis:jar:2.25.3:compile [INFO] | +- software.amazon.awssdk:aws-cbor-protocol:jar:2.25.3:compile [INFO] | | +- software.amazon.awssdk:third-party-jackson-dataformat-cbor:jar:2.25.3:compile [INFO] | | - software.amazon.awssdk:third-party-jackson-core:jar:2.25.3:compile [INFO] | +- software.amazon.awssdk:aws-json-protocol:jar:2.25.3:compile [INFO] | +- software.amazon.awssdk:protocol-core:jar:2.25.3:compile [INFO] | +- software.amazon.awssdk:http-auth-aws:jar:2.25.3:compile [INFO] | | +- software.amazon.awssdk:checksums-spi:jar:2.25.3:compile [INFO] | | - software.amazon.awssdk:checksums:jar:2.25.3:compile [INFO] | +- software.amazon.awssdk:sdk-core:jar:2.25.3:compile [INFO] | +- software.amazon.awssdk:auth:jar:2.25.3:compile [INFO] | | - software.amazon.eventstream:eventstream:jar:1.0.1:compile [INFO] | +- software.amazon.awssdk:http-auth-spi:jar:2.25.3:compile [INFO] | +- software.amazon.awssdk:http-auth:jar:2.25.3:compile [INFO] | +- software.amazon.awssdk:identity-spi:jar:2.25.3:compile [INFO] | +- software.amazon.awssdk:http-client-spi:jar:2.25.3:compile [INFO] | +- software.amazon.awssdk:regions:jar:2.25.3:compile [INFO] | +- software.amazon.awssdk:annotations:jar:2.25.3:compile [INFO] | +- software.amazon.awssdk:utils:jar:2.25.3:compile [INFO] | +- software.amazon.awssdk:aws-core:jar:2.25.3:compile [INFO] | +- software.amazon.awssdk:metrics-spi:jar:2.25.3:compile [INFO] | +- software.amazon.awssdk:json-utils:jar:2.25.3:compile [INFO] | +- software.amazon.awssdk:endpoints-spi:jar:2.25.3:compile [INFO] | - software.amazon.awssdk:apache-client:jar:2.25.3:runtime [INFO] | +- org.apache.httpcomponents:httpclient:jar:4.5.13:compile [INFO] | | - commons-logging:commons-logging:jar:1.2:compile [INFO] | +- org.apache.httpcomponents:httpcore:jar:4.4.13:compile [INFO] | - commons-codec:commons-codec:jar:1.15:compile [INFO] +- software.amazon.awssdk:dynamodb:jar:2.25.3:compile [INFO] | - software.amazon.awssdk:profiles:jar:2.25.3:compile [INFO] +- software.amazon.awssdk:cloudwatch:jar:2.25.3:compile [INFO] | - software.amazon.awssdk:aws-query-protocol:jar:2.25.3:compile [INFO] +- software.amazon.awssdk:netty-nio-client:jar:2.25.3:compile [INFO] | +- io.netty:netty-codec-http:jar:4.1.107.Final:compile [INFO] | +- io.netty:netty-codec-http2:jar:4.1.107.Final:compile [INFO] | +- io.netty:netty-codec:jar:4.1.107.Final:compile [INFO] | +- io.netty:netty-transport:jar:4.1.107.Final:compile [INFO] | +- io.netty:netty-common:jar:4.1.107.Final:compile [INFO] | +- io.netty:netty-buffer:jar:4.1.107.Final:compile [INFO] | +- io.netty:netty-handler:jar:4.1.107.Final:compile [INFO] | | - io.netty:netty-transport-native-unix-common:jar:4.1.107.Final:compile [INFO] | +- io.netty:netty-transport-classes-epoll:jar:4.1.107.Final:compile [INFO] | +- io.netty:netty-resolver:jar:4.1.107.Final:compile [INFO] | - org.reactivestreams:reactive-streams:jar:1.0.4:compile [INFO] +- software.amazon.glue:schema-registry-serde:jar:1.1.19:compile [INFO] | +- com.amazonaws:aws-java-sdk-sts:jar:1.12.660:compile [INFO] | | +- com.amazonaws:aws-java-sdk-core:jar:1.12.660:compile [INFO] | | | +- com.fasterxml.jackson.dataformat:jackson-dataformat-cbor:jar:2.12.6:compile [INFO] | | | - joda-time:joda-time:jar:2.8.1:compile [INFO] | | - com.amazonaws:jmespath-java:jar:1.12.660:compile [INFO] | +- software.amazon.awssdk:sts:jar:2.22.12:compile [INFO] | +- software.amazon.awssdk:arns:jar:2.22.12:compile [INFO] | +- org.apache.kafka:kafka-clients:jar:3.6.1:compile [INFO] | | +- com.github.luben:zstd-jni:jar:1.5.5-1:runtime [INFO] | | +- org.lz4:lz4-java:jar:1.8.0:runtime [INFO] | | - org.xerial.snappy:snappy-java:jar:1.1.10.5:runtime [INFO] | +- com.kjetland:mbknor-jackson-jsonschema_2.12:jar:1.0.39:compile [INFO] | | +- org.scala-lang:scala-library:jar:2.12.10:compile [INFO] | | +- com.fasterxml.jackson.core:jackson-databind:jar:2.10.1:compile [INFO] | | | - com.fasterxml.jackson.core:jackson-annotations:jar:2.10.1:compile [INFO] | | - javax.validation:validation-api:jar:2.0.1.Final:compile [INFO] | +- io.github.classgraph:classgraph:jar:4.8.120:compile [INFO] | +- com.github.erosb:everit-json-schema:jar:1.14.2:compile [INFO] | | +- org.json:json:jar:20230227:compile [INFO] | | +- commons-validator:commons-validator:jar:1.7:compile [INFO] | | | - commons-digester:commons-digester:jar:2.1:compile [INFO] | | +- com.damnhandy:handy-uri-templates:jar:2.1.8:compile [INFO] | | - com.google.re2j:re2j:jar:1.6:compile [INFO] | +- org.jetbrains.kotlin:kotlin-stdlib:jar:1.7.10:compile [INFO] | | +- org.jetbrains.kotlin:kotlin-stdlib-common:jar:1.7.10:compile [INFO] | | - org.jetbrains:annotations:jar:13.0:compile [INFO] | +- org.jetbrains.kotlin:kotlin-stdlib-jdk8:jar:1.7.10:compile [INFO] | | - org.jetbrains.kotlin:kotlin-stdlib-jdk7:jar:1.7.10:compile [INFO] | +- org.jetbrains.kotlin:kotlin-reflect:jar:1.7.10:compile [INFO] | +- org.jetbrains.kotlin:kotlin-scripting-compiler-impl-embeddable:jar:1.7.10:compile [INFO] | | +- org.jetbrains.kotlin:kotlin-scripting-common:jar:1.7.10:runtime [INFO] | | - org.jetbrains.kotlin:kotlin-scripting-jvm:jar:1.7.10:runtime [INFO] | | - org.jetbrains.kotlin:kotlin-script-runtime:jar:1.7.10:runtime [INFO] | +- org.jetbrains.kotlin:kotlin-scripting-compiler-embeddable:jar:1.7.10:compile [INFO] | +- com.squareup.okio:okio:jar:3.4.0:compile [INFO] | | - com.squareup.okio:okio-jvm:jar:3.4.0:compile [INFO] | +- com.squareup.okio:okio-fakefilesystem:jar:3.2.0:compile [INFO] | | - com.squareup.okio:okio-fakefilesystem-jvm:jar:3.2.0:compile [INFO] | | - org.jetbrains.kotlinx:kotlinx-datetime-jvm:jar:0.3.2:compile [INFO] | +- org.jetbrains.kotlinx:kotlinx-serialization-core-jvm:jar:1.4.0:compile [INFO] | +- com.squareup.wire:wire-schema:jar:4.3.0:compile [INFO] | | - com.squareup.wire:wire-runtime:jar:4.3.0:runtime [INFO] | +- com.squareup.wire:wire-compiler:jar:4.3.0:compile [INFO] | | +- com.squareup.wire:wire-schema-jvm:jar:4.3.0:compile [INFO] | | | - com.squareup.wire:wire-runtime-jvm:jar:4.3.0:compile [INFO] | | +- com.squareup.wire:wire-kotlin-generator:jar:4.3.0:runtime [INFO] | | | +- com.squareup:kotlinpoet:jar:1.10.2:runtime [INFO] | | | +- com.squareup.wire:wire-grpc-client-jvm:jar:4.3.0:runtime [INFO] | | | | +- com.squareup.okhttp3:okhttp:jar:4.9.3:runtime [INFO] | | | | - org.jetbrains.kotlinx:kotlinx-coroutines-core-jvm:jar:1.5.2:runtime [INFO] | | | - com.squareup.wire:wire-grpc-server-generator:jar:4.3.0:runtime [INFO] | | +- com.squareup.wire:wire-java-generator:jar:4.3.0:runtime [INFO] | | | - com.squareup:javapoet:jar:1.13.0:runtime [INFO] | | +- com.squareup.wire:wire-swift-generator:jar:4.3.0:runtime [INFO] | | | - io.outfoxx:swiftpoet:jar:1.3.1:runtime [INFO] | | - com.squareup.wire:wire-profiles:jar:4.3.0:runtime [INFO] | +- com.google.api.grpc:proto-google-common-protos:jar:2.7.4:compile [INFO] | +- com.google.jimfs:jimfs:jar:1.1:compile [INFO] | - org.apache.commons:commons-collections4:jar:4.4:compile [INFO] +- software.amazon.glue:schema-registry-common:jar:1.1.19:compile [INFO] | +- software.amazon.awssdk:glue:jar:2.22.12:compile [INFO] | +- software.amazon.glue:schema-registry-build-tools:jar:1.1.19:compile [INFO] | +- software.amazon.awssdk:url-connection-client:jar:2.22.12:compile [INFO] | +- org.apache.avro:avro:jar:1.11.3:compile [INFO] | | - com.fasterxml.jackson.core:jackson-core:jar:2.14.2:compile [INFO] | - org.apache.commons:commons-compress:jar:1.21:compile [INFO] +- com.google.guava:guava:jar:32.1.1-jre:compile [INFO] | +- com.google.guava:failureaccess:jar:1.0.1:compile [INFO] | +- com.google.guava:listenablefuture:jar:9999.0-empty-to-avoid-conflict-with-guava:compile [INFO] | +- com.google.code.findbugs:jsr305:jar:3.0.2:compile [INFO] | +- org.checkerframework:checker-qual:jar:3.33.0:compile [INFO] | +- com.google.errorprone:error_prone_annotations:jar:2.18.0:compile [INFO] | - com.google.j2objc:j2objc-annotations:jar:2.8:compile [INFO] +- com.google.protobuf:protobuf-java:jar:3.21.12:compile [INFO] +- org.apache.commons:commons-lang3:jar:3.12.0:compile [INFO] +- org.slf4j:slf4j-api:jar:2.0.7:compile [INFO] +- io.reactivex.rxjava3:rxjava:jar:3.1.6:compile [INFO] +- org.projectlombok:lombok:jar:1.18.24:provided [INFO] +- junit:junit:jar:4.13.2:test [INFO] | - org.hamcrest:hamcrest-core:jar:1.3:test [INFO] +- org.mockito:mockito-all:jar:1.10.19:test [INFO] +- org.hamcrest:hamcrest-all:jar:1.3:test [INFO] - ch.qos.logback:logback-classic:jar:1.3.14:test [INFO] - ch.qos.logback:logback-core:jar:1.3.14:test [INFO] [INFO] ------< software.amazon.kinesis:amazon-kinesis-client-multilang >------- [INFO] Building amazon-kinesis-client-multilang 2.5.5 [3/3] [INFO] from amazon-kinesis-client-multilang/pom.xml [INFO] --------------------------------[ jar ]--------------------------------- [INFO] [INFO] --- dependency:2.8:tree (default-cli) @ amazon-kinesis-client-multilang --- [INFO] software.amazon.kinesis:amazon-kinesis-client-multilang:jar:2.5.5 [INFO] +- software.amazon.kinesis:amazon-kinesis-client:jar:2.5.5:compile [INFO] | +- software.amazon.awssdk:kinesis:jar:2.25.3:compile [INFO] | | +- software.amazon.awssdk:aws-cbor-protocol:jar:2.25.3:compile [INFO] | | | - software.amazon.awssdk:third-party-jackson-dataformat-cbor:jar:2.25.3:compile [INFO] | | - software.amazon.awssdk:aws-json-protocol:jar:2.25.3:compile [INFO] | +- software.amazon.awssdk:dynamodb:jar:2.25.3:compile [INFO] | +- software.amazon.awssdk:cloudwatch:jar:2.25.3:compile [INFO] | +- software.amazon.awssdk:netty-nio-client:jar:2.25.3:compile [INFO] | | +- io.netty:netty-codec-http:jar:4.1.107.Final:compile [INFO] | | +- io.netty:netty-codec-http2:jar:4.1.107.Final:compile [INFO] | | +- io.netty:netty-codec:jar:4.1.107.Final:compile [INFO] | | +- io.netty:netty-transport:jar:4.1.107.Final:compile [INFO] | | +- io.netty:netty-common:jar:4.1.107.Final:compile [INFO] | | +- io.netty:netty-buffer:jar:4.1.107.Final:compile [INFO] | | +- io.netty:netty-handler:jar:4.1.107.Final:compile [INFO] | | | - io.netty:netty-transport-native-unix-common:jar:4.1.107.Final:compile [INFO] | | +- io.netty:netty-transport-classes-epoll:jar:4.1.107.Final:compile [INFO] | | +- io.netty:netty-resolver:jar:4.1.107.Final:compile [INFO] | | - org.reactivestreams:reactive-streams:jar:1.0.4:compile [INFO] | +- software.amazon.glue:schema-registry-serde:jar:1.1.19:compile [INFO] | | +- software.amazon.awssdk:arns:jar:2.22.12:compile [INFO] | | +- org.apache.kafka:kafka-clients:jar:3.6.1:compile [INFO] | | | +- com.github.luben:zstd-jni:jar:1.5.5-1:runtime [INFO] | | | +- org.lz4:lz4-java:jar:1.8.0:runtime [INFO] | | | - org.xerial.snappy:snappy-java:jar:1.1.10.5:runtime [INFO] | | +- com.kjetland:mbknor-jackson-jsonschema_2.12:jar:1.0.39:compile [INFO] | | | +- org.scala-lang:scala-library:jar:2.12.10:compile [INFO] | | | - javax.validation:validation-api:jar:2.0.1.Final:compile [INFO] | | +- io.github.classgraph:classgraph:jar:4.8.120:compile [INFO] | | +- com.github.erosb:everit-json-schema:jar:1.14.2:compile [INFO] | | | +- org.json:json:jar:20230227:compile [INFO] | | | +- commons-validator:commons-validator:jar:1.7:compile [INFO] | | | | - commons-digester:commons-digester:jar:2.1:compile [INFO] | | | +- com.damnhandy:handy-uri-templates:jar:2.1.8:compile [INFO] | | | - com.google.re2j:re2j:jar:1.6:compile [INFO] | | +- org.jetbrains.kotlin:kotlin-stdlib:jar:1.7.10:compile [INFO] | | | +- org.jetbrains.kotlin:kotlin-stdlib-common:jar:1.7.10:compile [INFO] | | | - org.jetbrains:annotations:jar:13.0:compile [INFO] | | +- org.jetbrains.kotlin:kotlin-stdlib-jdk8:jar:1.7.10:compile [INFO] | | | - org.jetbrains.kotlin:kotlin-stdlib-jdk7:jar:1.7.10:compile [INFO] | | +- org.jetbrains.kotlin:kotlin-reflect:jar:1.7.10:compile [INFO] | | +- org.jetbrains.kotlin:kotlin-scripting-compiler-impl-embeddable:jar:1.7.10:compile [INFO] | | | +- org.jetbrains.kotlin:kotlin-scripting-common:jar:1.7.10:runtime [INFO] | | | - org.jetbrains.kotlin:kotlin-scripting-jvm:jar:1.7.10:runtime [INFO] | | | - org.jetbrains.kotlin:kotlin-script-runtime:jar:1.7.10:runtime [INFO] | | +- org.jetbrains.kotlin:kotlin-scripting-compiler-embeddable:jar:1.7.10:compile [INFO] | | +- com.squareup.okio:okio:jar:3.4.0:compile [INFO] | | | - com.squareup.okio:okio-jvm:jar:3.4.0:compile [INFO] | | +- com.squareup.okio:okio-fakefilesystem:jar:3.2.0:compile [INFO] | | | - com.squareup.okio:okio-fakefilesystem-jvm:jar:3.2.0:compile [INFO] | | | - org.jetbrains.kotlinx:kotlinx-datetime-jvm:jar:0.3.2:compile [INFO] | | +- org.jetbrains.kotlinx:kotlinx-serialization-core-jvm:jar:1.4.0:compile [INFO] | | +- com.squareup.wire:wire-schema:jar:4.3.0:compile [INFO] | | | - com.squareup.wire:wire-runtime:jar:4.3.0:runtime [INFO] | | +- com.squareup.wire:wire-compiler:jar:4.3.0:compile [INFO] | | | +- com.squareup.wire:wire-schema-jvm:jar:4.3.0:compile [INFO] | | | | - com.squareup.wire:wire-runtime-jvm:jar:4.3.0:compile [INFO] | | | +- com.squareup.wire:wire-kotlin-generator:jar:4.3.0:runtime [INFO] | | | | +- com.squareup:kotlinpoet:jar:1.10.2:runtime [INFO] | | | | +- com.squareup.wire:wire-grpc-client-jvm:jar:4.3.0:runtime [INFO] | | | | | +- com.squareup.okhttp3:okhttp:jar:4.9.3:runtime [INFO] | | | | | - org.jetbrains.kotlinx:kotlinx-coroutines-core-jvm:jar:1.5.2:runtime [INFO] | | | | - com.squareup.wire:wire-grpc-server-generator:jar:4.3.0:runtime [INFO] | | | +- com.squareup.wire:wire-java-generator:jar:4.3.0:runtime [INFO] | | | | - com.squareup:javapoet:jar:1.13.0:runtime [INFO] | | | +- com.squareup.wire:wire-swift-generator:jar:4.3.0:runtime [INFO] | | | | - io.outfoxx:swiftpoet:jar:1.3.1:runtime [INFO] | | | - com.squareup.wire:wire-profiles:jar:4.3.0:runtime [INFO] | | +- com.google.api.grpc:proto-google-common-protos:jar:2.7.4:compile [INFO] | | - com.google.jimfs:jimfs:jar:1.1:compile [INFO] | +- software.amazon.glue:schema-registry-common:jar:1.1.19:compile [INFO] | | +- software.amazon.awssdk:glue:jar:2.22.12:compile [INFO] | | +- software.amazon.glue:schema-registry-build-tools:jar:1.1.19:compile [INFO] | | +- software.amazon.awssdk:url-connection-client:jar:2.22.12:compile [INFO] | | +- org.apache.avro:avro:jar:1.11.3:compile [INFO] | | | - com.fasterxml.jackson.core:jackson-core:jar:2.14.2:compile [INFO] | | - org.apache.commons:commons-compress:jar:1.21:compile [INFO] | +- com.google.guava:guava:jar:32.1.1-jre:compile [INFO] | | +- com.google.guava:failureaccess:jar:1.0.1:compile [INFO] | | +- com.google.guava:listenablefuture:jar:9999.0-empty-to-avoid-conflict-with-guava:compile [INFO] | | +- com.google.code.findbugs:jsr305:jar:3.0.2:compile [INFO] | | +- org.checkerframework:checker-qual:jar:3.33.0:compile [INFO] | | +- com.google.errorprone:error_prone_annotations:jar:2.18.0:compile [INFO] | | - com.google.j2objc:j2objc-annotations:jar:2.8:compile [INFO] | +- com.google.protobuf:protobuf-java:jar:3.21.12:compile [INFO] | +- org.apache.commons:commons-lang3:jar:3.12.0:compile [INFO] | +- org.slf4j:slf4j-api:jar:2.0.7:compile [INFO] | - io.reactivex.rxjava3:rxjava:jar:3.1.6:compile [INFO] +- software.amazon.awssdk:sts:jar:2.25.3:compile [INFO] | +- software.amazon.awssdk:aws-query-protocol:jar:2.25.3:compile [INFO] | +- software.amazon.awssdk:protocol-core:jar:2.25.3:compile [INFO] | +- software.amazon.awssdk:profiles:jar:2.25.3:compile [INFO] | +- software.amazon.awssdk:http-auth-aws:jar:2.25.3:compile [INFO] | | +- software.amazon.awssdk:checksums-spi:jar:2.25.3:compile [INFO] | | - software.amazon.awssdk:checksums:jar:2.25.3:compile [INFO] | +- software.amazon.awssdk:sdk-core:jar:2.25.3:compile [INFO] | +- software.amazon.awssdk:auth:jar:2.25.3:compile [INFO] | | - software.amazon.eventstream:eventstream:jar:1.0.1:compile [INFO] | +- software.amazon.awssdk:http-auth-spi:jar:2.25.3:compile [INFO] | +- software.amazon.awssdk:http-auth:jar:2.25.3:compile [INFO] | +- software.amazon.awssdk:identity-spi:jar:2.25.3:compile [INFO] | +- software.amazon.awssdk:http-client-spi:jar:2.25.3:compile [INFO] | +- software.amazon.awssdk:regions:jar:2.25.3:compile [INFO] | +- software.amazon.awssdk:annotations:jar:2.25.3:compile [INFO] | +- software.amazon.awssdk:utils:jar:2.25.3:compile [INFO] | +- software.amazon.awssdk:aws-core:jar:2.25.3:compile [INFO] | +- software.amazon.awssdk:metrics-spi:jar:2.25.3:compile [INFO] | +- software.amazon.awssdk:json-utils:jar:2.25.3:compile [INFO] | | - software.amazon.awssdk:third-party-jackson-core:jar:2.25.3:compile [INFO] | +- software.amazon.awssdk:endpoints-spi:jar:2.25.3:compile [INFO] | - software.amazon.awssdk:apache-client:jar:2.25.3:runtime [INFO] | +- org.apache.httpcomponents:httpclient:jar:4.5.13:runtime [INFO] | - org.apache.httpcomponents:httpcore:jar:4.4.13:runtime [INFO] +- com.amazonaws:aws-java-sdk-core:jar:1.12.668:compile [INFO] | +- commons-logging:commons-logging:jar:1.1.3:compile [INFO] | +- commons-codec:commons-codec:jar:1.15:compile [INFO] | - joda-time:joda-time:jar:2.8.1:compile [INFO] +- com.amazonaws:aws-java-sdk-sts:jar:1.12.668:compile [INFO] | - com.amazonaws:jmespath-java:jar:1.12.668:compile [INFO] | - com.fasterxml.jackson.core:jackson-databind:jar:2.12.7.1:compile [INFO] | - com.fasterxml.jackson.core:jackson-annotations:jar:2.12.7:compile [INFO] +- org.projectlombok:lombok:jar:1.18.24:provided [INFO] +- ch.qos.logback:logback-classic:jar:1.3.14:compile [INFO] | - ch.qos.logback:logback-core:jar:1.3.14:compile [INFO] +- com.beust:jcommander:jar:1.82:compile [INFO] +- commons-io:commons-io:jar:2.11.0:compile [INFO] +- org.apache.commons:commons-collections4:jar:4.4:compile [INFO] +- commons-beanutils:commons-beanutils:jar:1.9.4:compile [INFO] | - commons-collections:commons-collections:jar:3.2.2:compile [INFO] +- junit:junit:jar:4.13.2:test [INFO] | - org.hamcrest:hamcrest-core:jar:1.3:test [INFO] +- org.mockito:mockito-all:jar:1.10.19:test [INFO] - org.hamcrest:hamcrest-all:jar:1.3:test