Enrich 2.0.4 released

We have released version 2.0.4 of Enrich, upgrading dependencies to address the recently identified Log4j 2 vulnerability (CVE-2021-44228).

The main highlights of this release are:

  • Fix the version of log4j-core (used only in snowplow-stream-enrich-nsq) to 2.16.0.
  • Bump the version of Beam to 2.33.0, as advised by GCP.
  • Bump the version of KCL to 1.14.5, as advised by AWS.

We have also bumped other dependencies to ensure we’re on latest versions.

2.0.4 images can be pulled from Docker Hub.

For the full list of changes and jar files, see the release notes:

4 Likes