Merge pull request #46 from nhsconnect/PRMT-4325

[PRMT-4325] - Declared strict versions for snakeyaml and guava
nhsconnect · Jan 5, 2024 · 36ff45e · 36ff45e
2 parents 9b88cd9 + 05609ef
commit 36ff45e
Showing 1 changed file with 4 additions and 6 deletions.
diff --git a/build.gradle b/build.gradle
@@ -28,15 +28,13 @@ jar {
 }
 
 dependencies {
+    implementation('com.google.guava:guava') { version { strictly '32.1.3-jre' } }
+
+    implementation('org.yaml:snakeyaml') { version { strictly '2.2' } }
+
     implementation 'org.springframework.boot:spring-boot-starter'
-    constraints {
-        implementation('org.yaml:snakeyaml:2.2') {
-            because 'snakeyaml < 2.0 is vulnerable'
-        }
-    }
     implementation 'org.springframework.boot:spring-boot-starter-web'
 
-
     implementation('io.netty:netty-buffer') { version { strictly '4.1.104.Final' } }
     implementation('io.netty:netty-codec') { version { strictly '4.1.104.Final' } }
     implementation('io.netty:netty-codec-http') { version { strictly '4.1.104.Final' } }