gradle: Force guava version without vulnerabilities

ref: google/guice#1798 Signed-off-by: Open592 Developer <[email protected]>
Open592 · Sep 25, 2024 · 59d26ee · 59d26ee
1 parent dd718ee
commit 59d26ee
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 2 deletions.
diff --git a/.idea/gradle.xml b/.idea/gradle.xml
diff --git a/build.gradle.kts b/build.gradle.kts
@@ -24,6 +24,7 @@ repositories {
 dependencies {
   implementation(libs.clikt)
   implementation(libs.guice)
+  implementation(libs.guava)
   implementation(libs.kotlin.inline.logger)
   runtimeOnly(libs.logback.classic)
   implementation(libs.netty.all)

diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
@@ -1,5 +1,7 @@
 [versions]
 clikt = "5.0.0"
+# https://github.com/google/guice/issues/1798
+guava = { strictly = "33.3.1-jre" }
 guice = "7.0.0"
 jimfs = "1.3.0"
 junit = "5.11.0"
@@ -16,6 +18,7 @@ ktfmt-gradle = { id = "com.ncorti.ktfmt.gradle", version.ref = "ktfmt-gradle" }
 
 [libraries]
 clikt = { module = "com.github.ajalt.clikt:clikt", version.ref = "clikt" }
+guava = { module = "com.google.guava:guava", version.ref = "guava" }
 guice = { module = "com.google.inject:guice", version.ref = "guice" }
 jimfs = { module = "com.google.jimfs:jimfs", version.ref = "jimfs" }
 junit-bom = { module = "org.junit:junit-bom", version.ref = "junit" }