[CVE] Address CVE-2023-6378 issue (#1053)

Signed-off-by: Eric <[email protected]> (cherry picked from commit 06f01f1)
opensearch-project · Dec 4, 2024 · 88b3607 · 88b3607
1 parent 342bcad
commit 88b3607
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 2 deletions.
diff --git a/.github/workflows/reports-scheduler-test-and-build-workflow.yml b/.github/workflows/reports-scheduler-test-and-build-workflow.yml
@@ -3,7 +3,7 @@ name: Test and Build Reports Scheduler
 on: [push, pull_request]
 
 env:
-  OPENSEARCH_VERSION: '1.3.5-SNAPSHOT'
+  OPENSEARCH_VERSION: '1.3.20-SNAPSHOT'
 
 jobs:
   linux-build:

diff --git a/reports-scheduler/build.gradle b/reports-scheduler/build.gradle
@@ -145,7 +145,12 @@ dependencies {
     testCompile "org.mockito:mockito-core:3.12.4"
     testCompile 'com.google.code.gson:gson:2.8.9'
 
-    ktlint "com.pinterest:ktlint:0.45.1"
+    add("ktlint", "com.pinterest:ktlint:0.45.1") {
+        exclude group: "ch.qos.logback", module: "logback-classic"
+        exclude group: "ch.qos.logback", module: "logback-core"
+    }
+    add("ktlint", "ch.qos.logback:logback-core:1.2.13")
+    add("ktlint", "ch.qos.logback:logback-classic:1.2.13")
 }
 
 javadoc.enabled = false // turn off javadoc as it barfs on Kotlin code