From 5af3d75eda548f03c5d137fc9cda33be3087db00 Mon Sep 17 00:00:00 2001 From: Sai Vishnu Bhyravajosyula Date: Wed, 19 Jun 2024 13:51:12 +0530 Subject: [PATCH] Bump jsonpath to 2.9.0 to fix the vulnerability Currently temporal-testing is using json path 2.8.0 which is causing the temporal-testing to have a CVE detected in maven. Temporal-testing mvn: https://mvnrepository.com/artifact/io.temporal/temporal-testing/1.23.2 jsonpath mvn: https://mvnrepository.com/artifact/com.jayway.jsonpath/json-path To fix this, I am bumping the jsonpath version to 2.9.0 which seems to be free from the cve. --- build.gradle | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/build.gradle b/build.gradle index b47ca9c84..5edbc4a1b 100644 --- a/build.gradle +++ b/build.gradle @@ -50,7 +50,7 @@ ext { gsonVersion = '2.10.1' // [2.0,) - jsonPathVersion = '2.8.0' // compileOnly + jsonPathVersion = '2.9.0' // compileOnly cronUtilsVersion = '9.2.1' // for test server only @@ -77,4 +77,4 @@ apply from: "$rootDir/gradle/dependencyManagement.gradle" apply from: "$rootDir/gradle/gatherDependencies.gradle" if (project.hasProperty("jacoco")) { apply from: "$rootDir/gradle/jacoco.gradle" -} \ No newline at end of file +}