Merge pull request #1802 from marklogic/feature/one-more-black-duck

rjrudin · web-flow · commit 56de7950d12f · 2025-07-23T13:12:46.000-04:00
MLE-12345 I will not rest until Black Duck is happy.
diff --git a/ml-development-tools/build.gradle b/ml-development-tools/build.gradle
@@ -25,9 +25,10 @@ dependencies {
 
 	testImplementation 'com.squareup.okhttp3:okhttp:4.12.0'
 
-	// Needed for MarkLogicVersion class
+	// We need the MarkLogicVersion class, but that has no dependencies and so we exclude all dependencies from
+	// this, in particular to avoid vulnerabilities on Spring 5.x libraries.
 	testImplementation ("com.marklogic:marklogic-junit5:1.5.0") {
-		exclude module: "marklogic-client-api"
+		transitive = false
 	}
 }
 

Original file line number	Diff line number	Diff line change
`@@ -25,9 +25,10 @@ dependencies {`
`25`	`25`
`26`	`26`	`testImplementation 'com.squareup.okhttp3:okhttp:4.12.0'`
`27`	`27`
`28`		`- // Needed for MarkLogicVersion class`
	`28`	`+ // We need the MarkLogicVersion class, but that has no dependencies and so we exclude all dependencies from`
	`29`	`+ // this, in particular to avoid vulnerabilities on Spring 5.x libraries.`
`29`	`30`	`testImplementation ("com.marklogic:marklogic-junit5:1.5.0") {`
`30`		`- exclude module: "marklogic-client-api"`
	`31`	`+ transitive = false`
`31`	`32`	`}`
`32`	`33`	`}`
`33`	`34`