Skip to content

Repository navigation

build(deps): patch test-only Logback dependencies #806

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jbeckwith-oai merged 2 commits into from
Jul 20, 2026
Merged

build(deps): patch test-only Logback dependencies #806

Changes from 1 commit
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
d8cbdc4
build(deps): patch Spring Boot starter dependencies
jbeckwith-oai Jul 20, 2026
d9cf1e4
build(deps): limit patch to test-only Logback
jbeckwith-oai Jul 20, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 9 additions & 0 deletions openai-java-spring-boot-starter/build.gradle.kts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,9 @@ repositories {

dependencies {
constraints {
implementation("org.springframework:spring-expression:5.3.39") {
Comment thread
jbeckwith-oai marked this conversation as resolved.
Outdated
Comment thread
jbeckwith-oai marked this conversation as resolved.
Outdated
because("5.3.39 fixes CVE-2024-38808 in Spring Boot's transitive runtime")
}
testImplementation("org.xmlunit:xmlunit-core:2.11.0") {
because("2.10.0 fixes CVE-2024-31573 in this test-only dependency")
}
Expand All @@ -19,6 +22,12 @@ dependencies {
version { strictly("1.7.36") }
because("Spring Boot 2.7 and Logback 1.2 require SLF4J 1.7 at test runtime")
}
testImplementation("ch.qos.logback:logback-classic:1.2.13") {
because("1.2.13 fixes vulnerabilities in Spring Boot's test logging stack")
}
testImplementation("ch.qos.logback:logback-core:1.2.13") {
because("1.2.13 fixes vulnerabilities in Spring Boot's test logging stack")
}
}

api(project(":openai-java"))
Expand Down
Loading