Skip to content

Commit 9115b1d

Browse files
committed
Work around CVEs reported against build dependencies
1 parent 500daea commit 9115b1d

File tree

1 file changed

+16
-0
lines changed

1 file changed

+16
-0
lines changed

gradle/plugins/antora/build.gradle.kts

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,23 @@ plugins {
88
dependencies {
99
implementation(projects.buildParameters)
1010
implementation(libs.plugins.node.markerCoordinates)
11+
constraints {
12+
implementation("com.fasterxml.jackson.core:jackson-core") {
13+
version {
14+
require("2.15.0")
15+
}
16+
because("Workaround for CVE-2025-52999")
17+
}
18+
}
1119
implementation(libs.plugins.spring.antora.markerCoordinates)
20+
constraints {
21+
implementation("org.yaml:snakeyaml") {
22+
version {
23+
require("2.0")
24+
}
25+
because("Workaround for CVE-2022-1471")
26+
}
27+
}
1228
}
1329

1430
tasks.compileJava {

0 commit comments

Comments
 (0)