Skip to content

Commit dfe6f0f

Browse files
Alexander01998cev-api
authored andcommitted
Override transitive dependency on Guava
1 parent 147890c commit dfe6f0f

File tree

1 file changed

+9
-2
lines changed

1 file changed

+9
-2
lines changed

build.gradle

Lines changed: 9 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,13 @@ buildscript {
22
dependencies {
33
classpath "org.kohsuke:github-api:1.330"
44
}
5+
6+
configurations.classpath {
7+
resolutionStrategy {
8+
// v28.0-jre, used by fabric-loom 1.13.3, is vulnerable to CVE-2020-8908 and CVE-2023-2976
9+
force "com.google.guava:guava:32.0.1-jre"
10+
}
11+
}
512
}
613

714
plugins {
@@ -83,8 +90,8 @@ dependencies {
8390
// In other words, Wurst won't compile without this library,
8491
// even though it's Minecraft that actually uses it.
8592
modImplementation "com.google.code.findbugs:jsr305:3.0.2"
86-
}
87-
93+
}
94+
8895
loom {
8996
accessWidenerPath = file("src/main/resources/wurst.accesswidener")
9097
}

0 commit comments

Comments
 (0)