Bump gson to 2.8.9 (close #53)

snowplow-incubator · Dec 15, 2021 · 2fe34db · 2fe34db
1 parent b7a9dbb
commit 2fe34db
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/build.sbt b/build.sbt
@@ -9,6 +9,7 @@ val scalatestVersion = "3.2.10"
 val scalatestPlusVersion = "3.1.2.0"
 val circe = "0.14.1"
 val igluCore = "1.0.1"
+val gson = "2.8.9" // An override, to mitigate a CVE
 
 lazy val compilerOptions = Seq(
   "-target:jvm-1.8",
@@ -67,6 +68,7 @@ lazy val root: Project = project
       "io.circe" %% "circe-parser" % circe,
       "com.snowplowanalytics" %% "iglu-core-circe" % igluCore,
       "org.slf4j" % "slf4j-simple" % slf4jVersion,
+      "com.google.code.gson" % "gson" % gson,
       "org.scalatest" %% "scalatest" % scalatestVersion % Test,
       "org.scalatestplus" %% "mockito-3-2" % scalatestPlusVersion % Test
     )