Skip to content

Commit 13cf3de

Browse files
committed
Fix for Security Violations
1 parent 82d87e6 commit 13cf3de

File tree

3 files changed

+7
-3
lines changed

3 files changed

+7
-3
lines changed

httpClient/build.gradle

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,5 +8,9 @@ repositories {
88

99
dependencies {
1010
testImplementation group: 'org.testng', name: 'testng', version: '7.5.1'
11-
testImplementation group: 'com.github.tomakehurst', name: 'wiremock-jre8', version: '2.35.0'
11+
// Note: wiremock-jre8 2.35.2 is the latest version supporting Java 8.
12+
// It uses Jetty 9.4.x which has CVE-2024-6763, but fixing requires Jetty 12.x
13+
// which is incompatible with WireMock 2.x and requires Java 11+.
14+
// Since this is test-only and doesn't affect production artifacts, the risk is accepted.
15+
testImplementation group: 'com.github.tomakehurst', name: 'wiremock-jre8', version: '2.35.2'
1216
}

services/build.gradle

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ dependencies {
1515
* https://github.com/jfrog/artifactory-client-java/issues/43
1616
* https://github.com/jfrog/artifactory-client-java/issues/232
1717
*/
18-
testRuntimeOnly group: 'ch.qos.logback', name: 'logback-classic', version: '1.3.15'
18+
testRuntimeOnly group: 'ch.qos.logback', name: 'logback-classic', version: '1.3.16'
1919
}
2020

2121
task createReleasePropertiesFile(type: Exec) {
Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
version=2.21.x-SNAPSHOT
1+
version=2.21.1

0 commit comments

Comments
 (0)