Constrain protobuf-java in build environment

JordanLongstaff · Sep 21, 2024 · 2ee687d · 2ee687d
1 parent 81c10a5
commit 2ee687d
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/build.gradle.kts b/build.gradle.kts
@@ -10,6 +10,9 @@ buildscript {
             classpath(libs.netty) {
                 because("Version 4.1.100.Final patches a high-level security vulnerability")
             }
+            classpath(libs.protobuf.java) {
+                because("Version 3.25.5 patches a high-level security vulnerability")
+            }
             classpath(libs.bouncycastle) {
                 because("Version 1.78 patches three moderate security vulnerabilities")
             }

diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
@@ -137,6 +137,7 @@ commons-compress = { module = "org.apache.commons:commons-compress", version = "
 guava = { module = "com.google.guava:guava", version = "latest.release" }
 jsoup = { module = "org.jsoup:jsoup", version = "latest.release" }
 netty = { module = "io.netty:netty-codec-http2", version = "4.1.+" }
+protobuf-java = { module = "com.google.protobuf:protobuf-java", version = "3+" }
 
 [bundles]
 classpath = [