Upgrade transitive dependencies of k8s client to resolve vuln noise

gocd · May 17, 2024 · b321ab1 · b321ab1
1 parent 55f2d48
commit b321ab1
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/build.gradle b/build.gradle
@@ -66,6 +66,12 @@ dependencies {
     implementation group: 'com.google.code.gson', name: 'gson', version: '2.10.1'
     implementation project.deps.kubernetesClientApi
     runtimeOnly group: 'io.fabric8', name: 'kubernetes-client', version: project.versions.kubernetesClientApi
+    constraints {
+        // Force upgrade transitive dependencies of fabric client to versions without vulnerabilities
+        implementation 'com.squareup.okhttp3:okhttp:3.14.9'
+        implementation 'com.squareup.okio:okio:1.17.6'
+    }
+
     runtimeOnly group: 'org.bouncycastle', name: 'bcpkix-jdk18on', version: '1.78.1'
     implementation group: 'com.github.spullara.mustache.java', name: 'compiler', version: '0.9.13'
     implementation group: 'org.freemarker', name: 'freemarker', version: '2.3.32'