From e06abcbddc8439ed7fb081e4d5446d8edc7291fd Mon Sep 17 00:00:00 2001 From: "opensearch-trigger-bot[bot]" <98922864+opensearch-trigger-bot[bot]@users.noreply.github.com> Date: Sun, 2 Jun 2024 11:13:46 -0700 Subject: [PATCH] [Backport 2.x] Update dependency com.google.guava:guava to v33.2.1-jre (#727) Update dependency com.google.guava:guava to v33.2.1-jre (#724) (cherry picked from commit d027c74e88fcd372da0c0b13b8d95b39de367c7e) Signed-off-by: mend-for-github-com[bot] Signed-off-by: github-actions[bot] Co-authored-by: github-actions[bot] Co-authored-by: mend-for-github-com[bot] <50673670+mend-for-github-com[bot]@users.noreply.github.com> --- build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build.gradle b/build.gradle index 6f96de542..b08074c74 100644 --- a/build.gradle +++ b/build.gradle @@ -184,7 +184,7 @@ dependencies { configurations.all { resolutionStrategy { - force("com.google.guava:guava:33.2.0-jre") // CVE for 31.1, keep to force transitive dependencies + force("com.google.guava:guava:33.2.1-jre") // CVE for 31.1, keep to force transitive dependencies force("org.eclipse.platform:org.eclipse.core.runtime:3.31.0") // CVE for < 3.29.0 force("com.fasterxml.jackson.core:jackson-core:2.17.1") // Dependency Jar Hell }