[Backport 2.x] Force newer version of transitive (spotless) eclipse d…

…ependency (#176)

Force newer version of transitive (spotless) eclipse dependency (#175)

* Force newer version of transitive (spotless) eclipse dependency



* Non-impacted Eclipse Core dependency requires JDK17+ for spotless



* Don't do spotless check during build as its already done



---------


(cherry picked from commit 2dcfc9c)

Signed-off-by: Daniel Widdis <[email protected]>
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

.github/workflows/CI.yml

@@ -14,6 +14,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
+      # Spotless requires JDK 17+
+      - uses: actions/setup-java@v3
+        with:
+          java-version: 17
+          distribution: temurin
       - name: Spotless Check
         run: ./gradlew spotlessCheck
   javadoc:
@@ -46,7 +51,7 @@ jobs:
         distribution: temurin
     - name: Build and Run Tests
       run: |
-          ./gradlew check -x integTest -x yamlRestTest
+          ./gradlew check -x integTest -x yamlRestTest -x spotlessJava
     - name: Upload Coverage Report
       if: ${{ matrix.codecov }}
       uses: codecov/codecov-action@v3

build.gradle

@@ -142,6 +142,7 @@ dependencies {
     configurations.all {
         resolutionStrategy {
             force("com.google.guava:guava:32.1.3-jre") // CVE for 31.1
+            force("org.eclipse.platform:org.eclipse.core.runtime:3.29.0") // CVE for 3.26.100
         }
     }
 }