From mobile apps to microservices, from small startups to big enterprises, Gradle helps teams build, automate and deliver better software, faster.

Gradle Community

Thank you <@URQ797WRW>, I found 2.17.0 in "Build Dependencies", not in "Dependencies", then how can I find it in .gradle files and exclude or upgrade it?

It looks like it is introduced by gradle plugin, not by my project.

That means some plugin is depending on it.
You should probably just not care.
If you do, add a constraint to the build script dependencies like

```buildscript {
    dependencies {
       constraints {
            classpath("...
        }
    }
}```

I'm building it in internal environment, and 2.17.0 is not allowed to download due to vulnerabilities, so I have to exclude it.

Also here: <https://blog.gradle.org/log4j-vulnerability|https://blog.gradle.org/log4j-vulnerability>

Hi <@URQ797WRW> I tried this in one module of my project(DataHub) and it worked, thank you! But when I tried the same way as the blog described, it does not work. I added a buidscript block in every *.gradle file and modified the version to 2.19.0, but it still download 2.17.0 in gradle zinc. What could be the reason?

The gradle version is 6.9.2, I'm not sure if it is related.

From the scala plugin docs:
&gt; The Scala plugin uses a configuration named `zinc` to resolve the Zinc compiler and its dependencies.
&gt; 
So your probably need to add a constraint to that one too.