upgrading commons-io and protobuf-java to avoid CVE issues

Signed-off-by: Dhrubo Saha <[email protected]>
opensearch-project · Dec 4, 2024 · 0f4d099 · 0f4d099
1 parent 05df353
commit 0f4d099
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/ml-algorithms/build.gradle b/ml-algorithms/build.gradle
@@ -20,7 +20,7 @@ dependencies {
     compile group: 'org.tribuo', name: 'tribuo-clustering-kmeans', version: '4.2.1'
     compile group: 'org.tribuo', name: 'tribuo-regression-sgd', version: '4.2.1'
     compile group: 'org.tribuo', name: 'tribuo-anomaly-libsvm', version: '4.2.1'
-    compile group: 'commons-io', name: 'commons-io', version: '2.11.0'
+    compile group: 'commons-io', name: 'commons-io', version: '2.14.0'
     compile group: 'software.amazon.randomcutforest', name: 'randomcutforest-parkservices', version: '3.0-rc2.1'
     compile group: 'software.amazon.randomcutforest', name: 'randomcutforest-core', version: '3.0-rc2.1'
     compile group: 'io.protostuff', name: 'protostuff-core', version: '1.8.0'
@@ -34,7 +34,7 @@ dependencies {
 }
 
 configurations.all {
-    resolutionStrategy.force 'com.google.protobuf:protobuf-java:3.21.9'
+    resolutionStrategy.force 'com.google.protobuf:protobuf-java:3.25.5'
 }
 
 jacocoTestReport {