Skip to content

Commit 8872e33

Browse files
Update dependencies to address some CVE scans (#2123)
Update dependencies to address some CVE scans
1 parent 8a2d5cd commit 8872e33

File tree

4 files changed

+9
-5
lines changed

4 files changed

+9
-5
lines changed

build.gradle

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -50,13 +50,13 @@ ext {
5050

5151
gsonVersion = '2.10.1' // [2.0,)
5252

53-
jsonPathVersion = '2.8.0' // compileOnly
53+
jsonPathVersion = '2.9.0' // compileOnly
5454

5555
cronUtilsVersion = '9.2.1' // for test server only
5656

5757
// Spring Boot 3 requires Java 17, java-sdk builds against 2.x version because we support Java 8.
5858
// We do test compatibility with Spring Boot 3 in integration tests.
59-
springBootVersion = project.hasProperty("edgeDepsTest") ? '3.0.4' : '2.7.12'// [2.4.0,)
59+
springBootVersion = project.hasProperty("edgeDepsTest") ? '3.0.4' : '2.7.18'// [2.4.0,)
6060

6161
// test scoped
6262
// we don't upgrade to 1.3 and 1.4 because they require slf4j 2.x

temporal-remote-data-encoder/build.gradle

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
description = '''Temporal Workflow Java SDK'''
22

33
ext {
4-
okhttpVersion = '4.10.0'
4+
okhttpVersion = '4.11.0'
55
servletVersion = '4.0.1'
66
}
77

temporal-sdk/build.gradle

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,9 @@ dependencies {
1919
// It's useful only for unit tests and debugging.
2020
// For these use-cases Temporal users can add this dep in the classpath temporary or permanently themselves.
2121
compileOnly "com.jayway.jsonpath:json-path:$jsonPathVersion"
22-
testImplementation "com.jayway.jsonpath:json-path:$jsonPathVersion"
22+
testImplementation("com.jayway.jsonpath:json-path:$jsonPathVersion"){
23+
exclude group: 'org.slf4j', module: 'slf4j-api'
24+
}
2325

2426
testImplementation project(':temporal-testing')
2527
testImplementation "junit:junit:${junitVersion}"

temporal-testing/build.gradle

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,9 @@ dependencies {
2020
// This dependency is included in temporal-sdk module as optional with compileOnly scope.
2121
// To make things easier for users, it's helpful for the testing module to bring this dependency
2222
// transitively as most users work with history jsons in tests.
23-
implementation "com.jayway.jsonpath:json-path:$jsonPathVersion"
23+
implementation("com.jayway.jsonpath:json-path:$jsonPathVersion"){
24+
exclude group: 'org.slf4j', module: 'slf4j-api'
25+
}
2426

2527
junit4Api 'junit:junit:4.13.2'
2628

0 commit comments

Comments
 (0)