From 21f4218d3368813c22afb8334f9d33fdd338bd7c Mon Sep 17 00:00:00 2001
From: chriscochrane <chris.cochrane@r3.com>
Date: Mon, 14 Oct 2024 10:34:14 +0100
Subject: [PATCH] Dependency updates to address vulns

---
 cordformation/build.gradle | 11 +++++++++++
 gradle.properties          |  2 +-
 2 files changed, 12 insertions(+), 1 deletion(-)

diff --git a/cordformation/build.gradle b/cordformation/build.gradle
index 3137be64b..a85952e89 100644
--- a/cordformation/build.gradle
+++ b/cordformation/build.gradle
@@ -22,6 +22,17 @@ repositories {
 }
 
 configurations {
+    all {
+        resolutionStrategy {
+            eachDependency { details ->
+                if (details.requested.group == 'commons-io') {
+                    if (details.requested.name == "commons-io") {
+                        details.useVersion commons_io_version
+                    }
+                }
+            }
+        }
+    }
     noderunner
 }
 
diff --git a/gradle.properties b/gradle.properties
index e8a47972c..225645993 100644
--- a/gradle.properties
+++ b/gradle.properties
@@ -9,7 +9,7 @@ kotlin_version=1.3.41
 dokka_version=1.4.32
 jackson_version=2.15.1
 snake_yaml_version=2.0
-commons_io_version=2.11.0
+commons_io_version=2.17.0
 assertj_version=3.22.0
 junit_jupiter_version=5.9.3
 hamcrest_version=2.1