chore(deps): add constraint to transitive dep

tommytroen · tommytroen · commit f662d5fbe000 · 2024-06-18T10:07:09.000+02:00
* resolve vulnerability in xmlunit-core included by spring-boot-test
diff --git a/build.gradle.kts b/build.gradle.kts
@@ -87,6 +87,12 @@ dependencies {
     }
     testImplementation("org.springframework.boot:spring-boot-test:$springBootVersion")
     constraints {
+        testImplementation("org.xmlunit:xmlunit-core") {
+            because("previous versions have security vulnerabilities")
+            version {
+                require("2.10.0")
+            }
+        }
         testImplementation("org.yaml:snakeyaml:2.2") {
             because("previous versions have security vulnerabilities")
         }

Original file line number	Diff line number	Diff line change
`@@ -87,6 +87,12 @@ dependencies {`
`87`	`87`	`}`
`88`	`88`	`testImplementation("org.springframework.boot:spring-boot-test:$springBootVersion")`
`89`	`89`	`constraints {`
	`90`	`+ testImplementation("org.xmlunit:xmlunit-core") {`
	`91`	`+ because("previous versions have security vulnerabilities")`
	`92`	`+ version {`
	`93`	`+ require("2.10.0")`
	`94`	`+ }`
	`95`	`+ }`
`90`	`96`	`testImplementation("org.yaml:snakeyaml:2.2") {`
`91`	`97`	`because("previous versions have security vulnerabilities")`
`92`	`98`	`}`