fix CVE-2023-2976 and upgrade guava

Signed-off-by: jowg-amazon <[email protected]>
jowg-amazon · Feb 6, 2024 · 5133d75 · 5133d75
1 parent 3c50f7d
commit 5133d75
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/build.gradle b/build.gradle
@@ -54,6 +54,10 @@ configurations {
           force "ch.qos.logback:logback-core:1.3.14"
       }
    }
+
+   configurations.all {
+      resolutionStrategy.force "com.google.guava:guava:32.1.2-jre"
+   }
 }
 
 dependencies {
@@ -118,4 +122,4 @@ task updateVersion {
         }
         ant.replaceregexp(file:'build.gradle', match: '"opensearch.version", "\\d.*"', replace: '"opensearch.version", "' + newVersion.tokenize('-')[0] + '-SNAPSHOT"', flags:'g', byline:true)
     }
-}
+}
diff --git a/core/build.gradle b/core/build.gradle
@@ -18,7 +18,7 @@ dependencies {
     implementation('com.google.googlejavaformat:google-java-format:1.10.0')  {
         exclude group: 'com.google.guava'
     }
-    implementation 'com.google.guava:guava:32.0.1-jre'
+    implementation 'com.google.guava:guava:32.1.2-jre'
     api "org.opensearch:common-utils:${common_utils_version}@jar"
     implementation 'commons-validator:commons-validator:1.7'