Skip to content

Commit

Permalink
[Snyk] Fix for 1 vulnerable dependencies (kr.motd.maven:os-maven-plug…
Browse files Browse the repository at this point in the history
…in) (#4097)

* fix: google-cloud-util/google-cloud-compat-checker/pom.xml to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JAVA-ORGCODEHAUSPLEXUS-31521

* Add guava dependency in google-cloud-compat-checker

Previously, the kr.motd.maven:os-maven-plugin brought in a dependency
that brought in guava. This artifact explicitly uses guava collections
so we need to add the dependency here.
  • Loading branch information
snyk-bot authored and chingor13 committed Nov 26, 2018
1 parent 53e21eb commit d50e7d8
Showing 1 changed file with 6 additions and 1 deletion.
7 changes: 6 additions & 1 deletion google-cloud-util/google-cloud-compat-checker/pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -29,12 +29,17 @@
to not duplicate the logic ourselves -->
<groupId>kr.motd.maven</groupId>
<artifactId>os-maven-plugin</artifactId>
<version>1.4.0.Final</version>
<version>1.6.1</version>
</dependency>
<dependency>
<groupId>org.codehaus.plexus</groupId>
<artifactId>plexus-utils</artifactId>
</dependency>
<dependency>
<groupId>com.google.guava</groupId>
<artifactId>guava</artifactId>
<version>26.0-android</version>
</dependency>
<dependency>
<groupId>io.netty</groupId>
<artifactId>netty-handler</artifactId>
Expand Down

0 comments on commit d50e7d8

Please sign in to comment.