Fix Spotless Transitive Dependency and bump aiohttp to fix CVE (opens…

…earch-project#1323) Signed-off-by: Naveen Tatikonda <[email protected]>
naveentatikonda · Nov 27, 2023 · 5e2f899 · 5e2f899
1 parent a45054f
commit 5e2f899
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/benchmarks/osb/requirements.txt b/benchmarks/osb/requirements.txt
@@ -4,7 +4,7 @@
 #
 #    pip-compile
 #
-aiohttp==3.8.5
+aiohttp==3.8.6
     # via opensearch-py
 aiosignal==1.2.0
     # via aiohttp

diff --git a/build.gradle b/build.gradle
@@ -25,6 +25,11 @@ buildscript {
 
     dependencies {
         classpath "${opensearch_group}.gradle:build-tools:${opensearch_version}"
+        configurations.all {
+            resolutionStrategy {
+                force("org.eclipse.platform:org.eclipse.core.runtime:3.29.0") // for spotless transitive dependency CVE (for 3.26.100)
+            }
+        }
     }
 }