bumped gradle wrapper to 8.11 and fixed vulnerability with commons-io…

…:commons-io (#274)
navikt · Nov 13, 2024 · 89e1209 · 89e1209
1 parent 1000887
commit 89e1209
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 2 deletions.
diff --git a/build.gradle.kts b/build.gradle.kts
@@ -19,8 +19,9 @@ val verapdfVersion = "1.26.1"
 val ktfmtVersion = "0.44"
 val testcontainersVersion= "1.20.3"
 val pdfgencoreVersion = "1.1.33"
-val commonsCompressVersion = "1.27.1"
 
+val commonsCompressVersion = "1.27.1"
+val commonsIoVersion = "2.17.0"
 val javaVersion = JvmTarget.JVM_21
 
 
@@ -92,6 +93,11 @@ dependencies {
     implementation("io.github.openhtmltopdf:openhtmltopdf-pdfbox:$openHtmlToPdfVersion")
     implementation("io.github.openhtmltopdf:openhtmltopdf-slf4j:$openHtmlToPdfVersion")
     implementation("io.github.openhtmltopdf:openhtmltopdf-svg-support:$openHtmlToPdfVersion")
+    constraints {
+        implementation("commons-io:commons-io:$commonsIoVersion") {
+            because("Due to vulnerabilities in io.github.openhtmltopdf:openhtmltopdf-svg-support")
+        }
+    }
 
     implementation("com.fasterxml.jackson.datatype:jackson-datatype-jsr310:$jacksonVersion")
 

diff --git a/gradle/wrapper/gradle-wrapper.properties b/gradle/wrapper/gradle-wrapper.properties
@@ -1,6 +1,6 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-8.10.2-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-8.11-bin.zip
 networkTimeout=10000
 validateDistributionUrl=true
 zipStoreBase=GRADLE_USER_HOME