From f90bb53cc3cfc1878a5297a73e132034c0fdbe96 Mon Sep 17 00:00:00 2001 From: Justin Beckwith Date: Wed, 15 Jul 2026 15:47:40 -0700 Subject: [PATCH] fix(deps): update test Commons IO to 2.22.0 --- openai-java-client-okhttp/build.gradle.kts | 6 ++++++ openai-java-core/build.gradle.kts | 6 ++++++ 2 files changed, 12 insertions(+) diff --git a/openai-java-client-okhttp/build.gradle.kts b/openai-java-client-okhttp/build.gradle.kts index 4d1eb6170..032589e32 100644 --- a/openai-java-client-okhttp/build.gradle.kts +++ b/openai-java-client-okhttp/build.gradle.kts @@ -4,6 +4,12 @@ plugins { } dependencies { + constraints { + testImplementation("commons-io:commons-io:2.22.0") { + because("WireMock's transitive Commons IO version has a resource-exhaustion vulnerability") + } + } + api(project(":openai-java-core")) implementation("com.squareup.okhttp3:okhttp:4.12.0") diff --git a/openai-java-core/build.gradle.kts b/openai-java-core/build.gradle.kts index b386f1dbb..ba05a1a06 100644 --- a/openai-java-core/build.gradle.kts +++ b/openai-java-core/build.gradle.kts @@ -32,6 +32,12 @@ configurations.matching { it.name != jacksonPublishedRuntime.name }.configureEac } dependencies { + constraints { + testImplementation("commons-io:commons-io:2.22.0") { + because("WireMock's transitive Commons IO version has a resource-exhaustion vulnerability") + } + } + api("com.fasterxml.jackson.core:jackson-core:$jacksonPublishedVersion") api("com.fasterxml.jackson.core:jackson-databind:$jacksonPublishedVersion") api("com.google.errorprone:error_prone_annotations:2.33.0")