Update snappy-java (#1687)

* Update snappy-java to fix vulnerability snappy-java is an HTSJDK dependency that received a DoS CVE report last week: GHSA-55g7-9cwv-5qfv Also bump common-compress: https://commons.apache.org/proper/commons-compress/security.html
samtools · Oct 6, 2023 · 85a0f0f · 85a0f0f
1 parent 38dbd0e
commit 85a0f0f
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/build.gradle b/build.gradle
@@ -30,8 +30,8 @@ jacocoTestReport {
 
 dependencies {
     implementation 'commons-logging:commons-logging:1.2'
-    implementation "org.xerial.snappy:snappy-java:1.1.10.1"
-    implementation "org.apache.commons:commons-compress:1.22"
+    implementation "org.xerial.snappy:snappy-java:1.1.10.5"
+    implementation "org.apache.commons:commons-compress:1.24.0"
     implementation 'org.tukaani:xz:1.9'
     implementation "org.json:json:20230618"