From f662d5fbe00093d67ddafc046d8754a274f7ee1e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Tommy=20Tr=C3=B8en?= Date: Tue, 18 Jun 2024 10:07:09 +0200 Subject: [PATCH] chore(deps): add constraint to transitive dep * resolve vulnerability in xmlunit-core included by spring-boot-test --- build.gradle.kts | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/build.gradle.kts b/build.gradle.kts index a93a721a..a0454a28 100644 --- a/build.gradle.kts +++ b/build.gradle.kts @@ -87,6 +87,12 @@ dependencies { } testImplementation("org.springframework.boot:spring-boot-test:$springBootVersion") constraints { + testImplementation("org.xmlunit:xmlunit-core") { + because("previous versions have security vulnerabilities") + version { + require("2.10.0") + } + } testImplementation("org.yaml:snakeyaml:2.2") { because("previous versions have security vulnerabilities") }