Common: set spray-json transitive dependency to 1.3.6 (close #498)

snowplow · Jan 26, 2022 · 0527b9f · 0527b9f
1 parent 5a6b0cf
commit 0527b9f
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/build.sbt b/build.sbt
@@ -60,6 +60,7 @@ lazy val common = project
       Dependencies.Libraries.collectorPayload,
       Dependencies.Libraries.schemaSniffer,
       Dependencies.Libraries.thrift,
+      Dependencies.Libraries.sprayJson,
       Dependencies.Libraries.specs2,
       Dependencies.Libraries.specs2Cats,
       Dependencies.Libraries.specs2Scalacheck,

diff --git a/project/Dependencies.scala b/project/Dependencies.scala
@@ -43,6 +43,7 @@ object Dependencies {
     val slf4j            = "1.7.32"
     val log4j            = "2.17.0" // CVE-2021-44228
     val thrift           = "0.15.0" // override transitive dependency to mitigate security vulnerabilities
+    val sprayJson        = "1.3.6" // override transitive dependency to mitigate security vulnerabilities
 
     val refererParser    = "1.1.0"
     val maxmindIplookups = "0.7.1"
@@ -134,7 +135,8 @@ object Dependencies {
     val collectorPayload = "com.snowplowanalytics"      %  "collector-payload-1"           % V.collectorPayload
     val schemaSniffer    = "com.snowplowanalytics"      %  "schema-sniffer-1"              % V.schemaSniffer
     val iabClient        = "com.snowplowanalytics"      %  "iab-spiders-and-robots-client" % V.iabClient
-    val thrift           = "org.apache.thrift"          % "libthrift"                      % V.thrift
+    val thrift           = "org.apache.thrift"          %  "libthrift"                     % V.thrift
+    val sprayJson        = "io.spray"                   %% "spray-json"                    % V.sprayJson
 
     val specs2           = "org.specs2"                 %% "specs2-core"                   % V.specs2                    % Test
     val specs2Cats       = "org.specs2"                 %% "specs2-cats"                   % V.specs2                    % Test