From 14a48ce9ea3fe0acb15d22275a90973e5a269bd6 Mon Sep 17 00:00:00 2001
From: Nate Danner <nate@moderne.io>
Date: Tue, 1 Oct 2024 16:33:59 -0700
Subject: [PATCH] update to latest error prone to remove protobuf-java@3.19.2
 vulnerability (#597)

---
 build.gradle.kts | 2 +-
 suppressions.xml | 8 ++++++++
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/build.gradle.kts b/build.gradle.kts
index d99348007..f2c78b677 100644
--- a/build.gradle.kts
+++ b/build.gradle.kts
@@ -141,7 +141,7 @@ dependencies {
     runtimeOnly("org.openrewrite.recipe:rewrite-testing-frameworks:$rewriteVersion")
 
     annotationProcessor("org.openrewrite:rewrite-templating:$rewriteVersion")
-    compileOnly("com.google.errorprone:error_prone_core:2.19.1") {
+    compileOnly("com.google.errorprone:error_prone_core:2.+") {
         exclude("com.google.auto.service", "auto-service-annotations")
     }
     implementation("org.mongodb:mongo-java-driver:3.12.+")
diff --git a/suppressions.xml b/suppressions.xml
index 5b50acf91..8b710d7c5 100644
--- a/suppressions.xml
+++ b/suppressions.xml
@@ -9,4 +9,12 @@
         <packageUrl regex="true">^pkg:maven/org\.springframework\.data/spring-data-mongodb@.*$</packageUrl>
         <cve>CVE-2022-22980</cve>
     </suppress>
+    <suppress until="2024-11-25Z">
+        <notes><![CDATA[
+                file name: rewrite-testing-frameworks-2.20.0-SNAPSHOT.jar: wiremock-jre8-2.35.0.jar: swagger-ui-bundle.js
+                false positive: js library that is shipped as part of this jar
+            ]]></notes>
+        <packageUrl regex="true">^pkg:javascript/DOMPurify@.*$</packageUrl>
+        <vulnerabilityName>CVE-2024-45801</vulnerabilityName>
+    </suppress>
 </suppressions>