fix CVE for org.eclipse.core.runtime (#2378) (#2380) (#2384)

opensearch-trigger-bot[bot] · web-flow · commit 0e9a4b28986f · 2024-04-30T14:59:40.000-07:00
Signed-off-by: Mingshi Liu <mingshl@amazon.com> (cherry picked from commit aa3616d) Co-authored-by: Mingshi Liu <113382730+mingshl@users.noreply.github.com> (cherry picked from commit af63e5e) Co-authored-by: opensearch-trigger-bot[bot] <98922864+opensearch-trigger-bot[bot]@users.noreply.github.com>
diff --git a/build.gradle b/build.gradle
@@ -37,6 +37,11 @@ buildscript {
     dependencies {
         classpath "${opensearch_group}.gradle:build-tools:${opensearch_version}"
         classpath "gradle.plugin.com.dorongold.plugins:task-tree:1.5"
+        configurations.all {
+            resolutionStrategy {
+                force("org.eclipse.platform:org.eclipse.core.runtime:3.29.0") // for spotless transitive dependency CVE (for 3.26.100)
+            }
+        }
     }
 }
 

Original file line number	Diff line number	Diff line change
`@@ -37,6 +37,11 @@ buildscript {`
`37`	`37`	`dependencies {`
`38`	`38`	`classpath "${opensearch_group}.gradle:build-tools:${opensearch_version}"`
`39`	`39`	`classpath "gradle.plugin.com.dorongold.plugins:task-tree:1.5"`
	`40`	`+ configurations.all {`
	`41`	`+ resolutionStrategy {`
	`42`	`+ force("org.eclipse.platform:org.eclipse.core.runtime:3.29.0") // for spotless transitive dependency CVE (for 3.26.100)`
	`43`	`+ }`
	`44`	`+ }`
`40`	`45`	`}`
`41`	`46`	`}`
`42`	`47`