diff --git a/build.sbt b/build.sbt index e4bb127..e601f83 100644 --- a/build.sbt +++ b/build.sbt @@ -50,6 +50,7 @@ javaOptions in Universal ++= Seq( scalaVersion := "2.13.10" scalacOptions ++= Seq("-feature") +val jacksonVersion = "2.13.3" val awsVersion = "1.12.649" libraryDependencies ++= Seq( @@ -60,6 +61,9 @@ libraryDependencies ++= Seq( "com.softwaremill.macwire" %% "macros" % "2.5.0" % "provided", "com.softwaremill.macwire" %% "util" % "2.5.0", "com.softwaremill.macwire" %% "proxy" % "2.5.0", + // Use the latest version of jackson + "com.fasterxml.jackson.core" % "jackson-databind" % jacksonVersion, + "com.fasterxml.jackson.module" %% "jackson-module-scala" % jacksonVersion, "com.amazonaws" % "aws-java-sdk-s3" % awsVersion, "com.amazonaws" % "aws-java-sdk-dynamodb" % awsVersion, "org.scalaz" %% "scalaz-core" % "7.3.7", @@ -71,11 +75,6 @@ libraryDependencies ++= Seq( "org.scalatestplus.play" %% "scalatestplus-play" % "7.0.1" % Test ) -dependencyOverrides ++= List( - // Play still uses an old version of jackson-core which has a vulnerability - https://security.snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-7569538 - "com.fasterxml.jackson.core" % "jackson-core" % "2.17.2" -) - resolvers ++= Seq( "Guardian Github Releases" at "https://guardian.github.io/maven/repo-releases", "Guardian Github Snapshots" at "https://guardian.github.com/maven/repo-snapshots",