<fix>(build): upgrade dependencies. (#205)

WeBankBlockchain · Mar 21, 2023 · fd1a6e8 · fd1a6e8
1 parent 71ec3a1
commit fd1a6e8
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 4 deletions.
diff --git a/Changelog.md b/Changelog.md
@@ -4,8 +4,9 @@
 
 **更改**
 
-- 使用依赖BCOS Java SDK 2.9.1版本代替Web3JSDK(v1.2.3)
-- 去除netty和tcnative的依赖
+* 使用依赖BCOS Java SDK 2.9.1版本代替Web3JSDK(v1.2.3)
+* 更新gson、commons-io、snakeyaml版本以修复安全问题
+* 去除netty和tcnative的依赖
 
 ### v1.2.1
 

diff --git a/build.gradle b/build.gradle
@@ -75,18 +75,23 @@ List logger = [
 dependencies {
  compile logger
  implementation ('com.webank:wecross-java-stub:1.3.0') {
+ exclude group: 'com.google.code.gson', module: 'gson'
  exclude group: "io.netty"
  exclude group: "org.fisco-bcos", module: "tcnative"
  }
 
- implementation 'com.moandjiezana.toml:toml4j:0.7.2'
+ implementation ('com.moandjiezana.toml:toml4j:0.7.2') {
+ exclude group: 'com.google.code.gson', module: 'gson'
+ }
+ implementation 'com.google.code.gson:gson:2.8.9'
  implementation 'commons-codec:commons-codec:1.14'
 
  implementation 'org.apache.commons:commons-lang3:3.11'
  implementation 'com.google.guava:guava:30.1-jre'
- implementation 'org.yaml:snakeyaml:1.27'
+ implementation 'org.yaml:snakeyaml:2.0'
 
  implementation ('org.fisco-bcos.java-sdk:fisco-bcos-java-sdk:2.9.1')
+ implementation 'commons-io:commons-io:2.7'
 
  implementation 'org.fisco-bcos:solcJ:0.5.2.0'