From c9438770216eab86c8b0622489a00e36fd697673 Mon Sep 17 00:00:00 2001 From: Josh Aguilar Date: Thu, 27 Jul 2023 12:33:40 +1200 Subject: [PATCH] Update guava to address CVE-2023-2976 Signed-off-by: Josh Aguilar --- build.gradle | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/build.gradle b/build.gradle index d1af4233..03392ae7 100644 --- a/build.gradle +++ b/build.gradle @@ -14,7 +14,7 @@ buildscript { // 1.0.0 -> 1.0.0.0, and 1.0.0-SNAPSHOT -> 1.0.0.0-SNAPSHOT opensearch_build = opensearch_version.replaceAll(/(\.\d+)([^\d]*)$/, '$1.0$2') common_utils_version = System.getProperty("common_utils.version", opensearch_build) - job_scheduler_version = System.getProperty("job_scheduler.version", opensearch_build) + job_scheduler_version = System.getProperty("job_scheduler.version", opensearch_build) kotlin_version = System.getProperty("kotlin.version", "1.6.0") } @@ -109,7 +109,7 @@ allprojects { version = "${opensearch_version}" - "-SNAPSHOT" + ".0" if (isSnapshot) { version += "-SNAPSHOT" - } + } plugins.withId('java') { sourceCompatibility = targetCompatibility = "1.8" } @@ -130,7 +130,7 @@ dependencies { compile "org.jetbrains.kotlinx:kotlinx-coroutines-core:1.3.9" compile "${group}:common-utils:${common_utils_version}" compileOnly "${group}:opensearch-job-scheduler-spi:${job_scheduler_version}" - compile group: 'com.google.guava', name: 'guava', version: '31.0.1-jre' + compile group: 'com.google.guava', name: 'guava', version: '32.0.1-jre' compile "org.json:json:20230227" compile group: 'com.github.wnameless', name: 'json-flattener', version: '0.1.0' implementation 'org.jsoup:jsoup:1.15.3'