From 9c3a0cdc5befa7ab2bc613887a83c8c2cb8855a6 Mon Sep 17 00:00:00 2001 From: "mend-for-github.aaakk.us.kg[bot]" <50673670+mend-for-github.aaakk.us.kg[bot]@users.noreply.github.com> Date: Mon, 18 Dec 2023 15:27:02 -0800 Subject: [PATCH] Update dependency com.google.guava:guava to v33 (#299) Signed-off-by: mend-for-github.aaakk.us.kg[bot] Co-authored-by: mend-for-github.aaakk.us.kg[bot] <50673670+mend-for-github.aaakk.us.kg[bot]@users.noreply.github.com> --- build.gradle | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/build.gradle b/build.gradle index 20a9837ca..bd687b42d 100644 --- a/build.gradle +++ b/build.gradle @@ -149,7 +149,7 @@ configurations { dependencies { implementation "org.opensearch:opensearch:${opensearch_version}" implementation 'org.junit.jupiter:junit-jupiter:5.10.1' - implementation "com.google.guava:guava:32.1.3-jre" + implementation "com.google.guava:guava:33.0.0-jre" api group: 'org.opensearch', name:'opensearch-ml-client', version: "${opensearch_build}" implementation group: 'org.apache.commons', name: 'commons-lang3', version: '3.14.0' implementation "org.opensearch:common-utils:${common_utils_version}" @@ -161,7 +161,7 @@ dependencies { configurations.all { resolutionStrategy { - force("com.google.guava:guava:32.1.3-jre") // CVE for 31.1 + force("com.google.guava:guava:33.0.0-jre") // CVE for 31.1 force("org.eclipse.platform:org.eclipse.core.runtime:3.30.0") // CVE for < 3.29.0 force("com.fasterxml.jackson.core:jackson-core:2.16.0") // Dependency Jar Hell }