From a3bf01c06ad8025c4e86f6e98c538ac46a8ef550 Mon Sep 17 00:00:00 2001 From: martin-nhs Date: Fri, 15 Dec 2023 15:55:13 +0000 Subject: [PATCH] [PRMT-4321] Added ch.qos.logback:logback-classic:1.2.13 to patch transient dependency --- build.gradle | 3 +++ 1 file changed, 3 insertions(+) diff --git a/build.gradle b/build.gradle index 7699ac8..268b9d8 100644 --- a/build.gradle +++ b/build.gradle @@ -50,7 +50,10 @@ dependencies { implementation 'software.amazon.awssdk:sns' implementation 'software.amazon.awssdk:sqs' implementation 'software.amazon.awssdk:dynamodb' + + // TODO: These are to patch transient dependency vulnerabilities. implementation 'ch.qos.logback:logback-core:1.2.13' + implementation 'ch.qos.logback:logback-classic:1.2.13' // TODO: Once we upgrade amazon-sqs-java-messaging-lib to v2 we can remove aws-java-sdk-core and sqs. implementation 'com.amazonaws:amazon-sqs-java-messaging-lib:1.1.2'