Guava, jetty cve fixes, netty version unifying (#2084)

linkedin · Dec 13, 2023 · fa21067 · fa21067
1 parent d736699
commit fa21067
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 4 deletions.
diff --git a/build.gradle b/build.gradle
@@ -291,7 +291,6 @@ project(':cruise-control') {
     implementation 'io.swagger.parser.v3:swagger-parser-v3:2.1.16'
     implementation 'io.github.classgraph:classgraph:4.8.141'
     implementation 'com.google.code.findbugs:jsr305:3.0.2'
-    implementation 'com.google.guava:guava:31.1-jre'
     // Temporary pin for vulnerability
     implementation 'com.fasterxml.jackson.core:jackson-databind:2.15.2'
     api "io.vertx:vertx-web-openapi:${vertxVersion}"
@@ -300,7 +299,7 @@ project(':cruise-control') {
     api "io.vertx:vertx-junit5:${vertxVersion}"
     api 'io.swagger.core.v3:swagger-annotations:2.0.2'
     api 'io.swagger.core.v3:swagger-core:2.0.2'
-    api 'com.google.guava:guava:25.1-jre'
+    api 'com.google.guava:guava:32.1.3-jre'
     api 'org.json:json:20231013'
     api 'org.xerial.snappy:snappy-java:1.1.10.1'
 

diff --git a/gradle.properties b/gradle.properties
@@ -5,5 +5,5 @@ scalaVersion=2.13.10
 kafkaVersion=3.1.0
 zookeeperVersion=3.7.2
 nettyVersion=4.1.100.Final
-jettyVersion=9.4.52.v20230823
-vertxVersion=4.4.3
+jettyVersion=9.4.53.v20231009
+vertxVersion=4.5.0