Skip to content

Commit 213a083

Browse files
committed
Resolve more vulns in transitive dependencies
1 parent 500bca5 commit 213a083

File tree

2 files changed

+4
-1
lines changed

2 files changed

+4
-1
lines changed

.github/workflows/test_and_build.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@ jobs:
3636
run: ./gradlew assemble check
3737
- name: Generate and submit dependency graph
3838
uses: gradle/actions/dependency-submission@ac638b010cf58a27ee6c972d7336334ccaf61c96 # v4.4.1
39-
if: github.ref == 'refs/heads/master' && matrix.docker-version == 'v25.0.5'
39+
if: github.ref == 'refs/heads/master'
4040
env:
4141
DEPENDENCY_GRAPH_INCLUDE_CONFIGURATIONS: runtimeClasspath
4242
previewGithubRelease:

build.gradle

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -89,6 +89,9 @@ dependencies {
8989
implementation('org.apache.commons:commons-compress:1.27.1') {
9090
because 'spotify docker-client uses an outdated version'
9191
}
92+
implementation('org.apache.commons:commons-lang3:3.19.0') {
93+
because 'spotify docker-client uses an outdated version'
94+
}
9295
implementation('org.apache.httpcomponents:httpclient:4.5.14') {
9396
because 'spotify docker-client uses an outdated version'
9497
}

0 commit comments

Comments
 (0)