Fix Spotless Transitive Dependency and bump aiohttp to fix CVE (#1323) (

#1324) Signed-off-by: Naveen Tatikonda <[email protected]> (cherry picked from commit 5e2f899) Co-authored-by: Naveen Tatikonda <[email protected]>
opensearch-project · Nov 27, 2023 · 6b92dbc · 6b92dbc
1 parent 7c1782a
commit 6b92dbc
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/benchmarks/osb/requirements.txt b/benchmarks/osb/requirements.txt
@@ -4,7 +4,7 @@
 #
 #    pip-compile
 #
-aiohttp==3.8.5
+aiohttp==3.8.6
     # via opensearch-py
 aiosignal==1.2.0
     # via aiohttp

diff --git a/build.gradle b/build.gradle
@@ -25,6 +25,11 @@ buildscript {
 
     dependencies {
         classpath "${opensearch_group}.gradle:build-tools:${opensearch_version}"
+        configurations.all {
+            resolutionStrategy {
+                force("org.eclipse.platform:org.eclipse.core.runtime:3.29.0") // for spotless transitive dependency CVE (for 3.26.100)
+            }
+        }
     }
 }