@@ -8,28 +8,33 @@ plugins {
88}
99
1010group = " com.marklogic"
11- version = " 4.5 -SNAPSHOT"
11+ version = " 4.6 -SNAPSHOT"
1212
1313java {
1414 sourceCompatibility = 1.8
1515 targetCompatibility = 1.8
1616}
1717
1818repositories {
19+ mavenLocal()
1920 mavenCentral()
2021 maven {
2122 url " https://nexus.marklogic.com/repository/maven-snapshots/"
2223 }
2324}
2425
2526dependencies {
26- api ' com.marklogic:ml-javaclient-util:4.5.1 '
27- api ' org.springframework:spring-web:5.3.27 '
28- api ' com.fasterxml.jackson.core:jackson-databind:2.14.1 '
27+ api ' com.marklogic:ml-javaclient-util:4.6-SNAPSHOT '
28+ api ' org.springframework:spring-web:5.3.29 '
29+ api ' com.fasterxml.jackson.core:jackson-databind:2.14.3 '
2930
3031 implementation ' jaxen:jaxen:1.2.0'
31- implementation ' com.squareup.okhttp3:okhttp:4.10.0'
32+
33+ // Forcing usage of 3.4.0 instead of 3.2.0 to address vulnerability - https://security.snyk.io/vuln/SNYK-JAVA-COMSQUAREUPOKIO-5820002
34+ implementation ' com.squareup.okio:okio:3.4.0'
35+ implementation ' com.squareup.okhttp3:okhttp:4.11.0'
3236 implementation ' io.github.rburgst:okhttp-digest:2.7'
37+
3338 implementation ' org.apache.httpcomponents:httpclient:4.5.14'
3439 implementation ' org.jdom:jdom2:2.0.6.1'
3540
@@ -54,8 +59,8 @@ dependencies {
5459 compileOnly " com.beust:jcommander:1.82"
5560 compileOnly " ch.qos.logback:logback-classic:1.3.5"
5661
57- testImplementation ' org.junit.jupiter:junit-jupiter:5.9.3 '
58- testImplementation ' org.springframework:spring-test:5.3.27 '
62+ testImplementation ' org.junit.jupiter:junit-jupiter:5.10.0 '
63+ testImplementation ' org.springframework:spring-test:5.3.29 '
5964 testImplementation ' commons-io:commons-io:2.11.0'
6065 testImplementation ' xmlunit:xmlunit:1.6'
6166
0 commit comments