Skip to content

Commit

Permalink
build(deps): Move centralized dependency constrains to "allprojects" …
Browse files Browse the repository at this point in the history
…block within root build.gradle.kts (#274)
  • Loading branch information
tuncaytunc-zf authored and paullatzelsperger committed May 4, 2023
1 parent 64315ec commit 6967255
Showing 1 changed file with 9 additions and 11 deletions.
20 changes: 9 additions & 11 deletions build.gradle.kts
Original file line number Diff line number Diff line change
Expand Up @@ -56,6 +56,15 @@ allprojects {
// this is used to counter version conflicts between the JUnit version pulled in by the plugin,
// and the one expected by IntelliJ
testImplementation(platform("org.junit:junit-bom:5.9.2"))

constraints {
implementation("org.yaml:snakeyaml:2.0") {
because("version 1.33 has vulnerabilities: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1471.")
}
implementation("net.minidev:json-smart:2.4.10") {
because("version 2.4.8 has vulnerabilities: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1370.")
}
}
}

// configure which version of the annotation processor to use. defaults to the same version as the plugin
Expand Down Expand Up @@ -159,14 +168,3 @@ subprojects {
}
}
}

dependencies {
constraints {
implementation("org.yaml:snakeyaml:2.0") {
because("version 1.33 has vulnerabilities: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1471.")
}
implementation("net.minidev:json-smart:2.4.10") {
because("version 2.4.8 has vulnerabilities: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1370.")
}
}
}

0 comments on commit 6967255

Please sign in to comment.