Adjusted dependency versions to address CVEs. (#1447)

* Adjusted dependency versions to address CVEs. Signed-off-by: AWSHurneyt <[email protected]> * Adjusted com.github.seancfoley:ipaddress version to address CVE. Signed-off-by: AWSHurneyt <[email protected]> * Adjusted ktlint dependencies to address CVE. Signed-off-by: AWSHurneyt <[email protected]> --------- Signed-off-by: AWSHurneyt <[email protected]>
opensearch-project · Feb 28, 2024 · c35e428 · c35e428
1 parent 5f67ea5
commit c35e428
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/alerting/build.gradle b/alerting/build.gradle
@@ -101,7 +101,7 @@ dependencies {
 
     compile project(":alerting-core")
     compile project(":alerting-notification")
-    implementation "com.github.seancfoley:ipaddress:5.3.3"
+    implementation "com.github.seancfoley:ipaddress:5.4.2"
 
     testImplementation "org.jetbrains.kotlin:kotlin-test:${kotlin_version}"
     testCompile "org.mockito:mockito-core:3.12.4"

diff --git a/build.gradle b/build.gradle
@@ -44,7 +44,11 @@ dependencies {
         attributes {
             attribute(Bundling.BUNDLING_ATTRIBUTE, objects.named(Bundling, Bundling.EXTERNAL))
         }
+        exclude group: "ch.qos.logback", module: "logback-classic"
+        exclude group: "ch.qos.logback", module: "logback-core"
     }
+    add("ktlint", "ch.qos.logback:logback-core:1.2.13")
+    add("ktlint", "ch.qos.logback:logback-classic:1.2.13")
 }
 
 task ktlint(type: JavaExec, group: "verification") {