asdf

Author: BillFarber

build.gradle

@@ -27,23 +27,20 @@ configurations {
   documentation
   assets
 
-  // Force v3.18 of commons-lang3 to avoid security vulnerabilities, without also
-  // upgrading ml-app-deployer to 6.0.0, which we are not ready to do yet.
   configurations.all {
     resolutionStrategy {
-        force 'org.apache.commons:commons-lang3:3.18.0'
+      // // Force v4.5.0 of commons-collections4 to avoid XXX
+      // force "org.apache.commons:commons-collections4:4.5.0"
+      // Force v3.18 of commons-lang3 to avoid CVE-2025-48924
+      // (https://www.cve.org/CVERecord?id=CVE-2025-48924), without also
+      // upgrading ml-app-deployer to 6.0.0, which we are not ready to do yet.
+      force 'org.apache.commons:commons-lang3:3.18.0'
     }
   }
 }
 
 ext {
   kafkaVersion = "3.9.1"
-
-  configurations.all {
-    resolutionStrategy {
-      force "org.apache.commons:commons-collections4:4.5.0"
-    }
-  }
 }
 
 dependencies {