Use Gradle norms for reasons for dependency constraints

gocd-contrib · May 17, 2024 · 19fdfd8 · 19fdfd8
1 parent c7db023
commit 19fdfd8
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/providers/build.gradle b/providers/build.gradle
@@ -26,8 +26,9 @@ dependencies {
   implementation project.deps.retrofit
   implementation project.deps.retrofitJacksonConv
   constraints {
-    // Force upgrade transitive dependencies of fabric client to versions without vulnerabilities
-    implementation project.deps.okio
+    implementation(project.deps.okio) {
+      because 'Retrofit uses an older version with vulnerable dependencies'
+    }
   }
   implementation project.deps.validateApi