From f139863649bcdb363a02b3f9914db73309d25688 Mon Sep 17 00:00:00 2001 From: Justin Beckwith Date: Wed, 15 Jul 2026 15:41:36 -0700 Subject: [PATCH] fix(deps): update test commons-fileupload to 1.6.0 --- openai-java-client-okhttp/build.gradle.kts | 6 ++++++ openai-java-core/build.gradle.kts | 6 ++++++ 2 files changed, 12 insertions(+) diff --git a/openai-java-client-okhttp/build.gradle.kts b/openai-java-client-okhttp/build.gradle.kts index 4d1eb6170..5c7b6112e 100644 --- a/openai-java-client-okhttp/build.gradle.kts +++ b/openai-java-client-okhttp/build.gradle.kts @@ -4,6 +4,12 @@ plugins { } dependencies { + constraints { + testImplementation("commons-fileupload:commons-fileupload:1.6.0") { + because("WireMock's transitive 1.4 release has known denial-of-service vulnerabilities") + } + } + api(project(":openai-java-core")) implementation("com.squareup.okhttp3:okhttp:4.12.0") diff --git a/openai-java-core/build.gradle.kts b/openai-java-core/build.gradle.kts index b386f1dbb..4517e89c0 100644 --- a/openai-java-core/build.gradle.kts +++ b/openai-java-core/build.gradle.kts @@ -32,6 +32,12 @@ configurations.matching { it.name != jacksonPublishedRuntime.name }.configureEac } dependencies { + constraints { + testImplementation("commons-fileupload:commons-fileupload:1.6.0") { + because("WireMock's transitive 1.4 release has known denial-of-service vulnerabilities") + } + } + api("com.fasterxml.jackson.core:jackson-core:$jacksonPublishedVersion") api("com.fasterxml.jackson.core:jackson-databind:$jacksonPublishedVersion") api("com.google.errorprone:error_prone_annotations:2.33.0")