From d6801e0e19b15466d2ef293ca19c5bc632769766 Mon Sep 17 00:00:00 2001 From: Justin Beckwith Date: Wed, 15 Jul 2026 15:59:21 -0700 Subject: [PATCH] fix(deps): update test JSONPath to 2.10.0 --- openai-java-client-okhttp/build.gradle.kts | 6 ++++++ openai-java-core/build.gradle.kts | 6 ++++++ openai-java-spring-boot-starter/build.gradle.kts | 6 ++++++ 3 files changed, 18 insertions(+) diff --git a/openai-java-client-okhttp/build.gradle.kts b/openai-java-client-okhttp/build.gradle.kts index 4d1eb6170..f45c36a36 100644 --- a/openai-java-client-okhttp/build.gradle.kts +++ b/openai-java-client-okhttp/build.gradle.kts @@ -4,6 +4,12 @@ plugins { } dependencies { + constraints { + testImplementation("com.jayway.jsonpath:json-path:2.10.0") { + because("WireMock's transitive JSONPath version has a stack-overflow vulnerability") + } + } + api(project(":openai-java-core")) implementation("com.squareup.okhttp3:okhttp:4.12.0") diff --git a/openai-java-core/build.gradle.kts b/openai-java-core/build.gradle.kts index b386f1dbb..146ab9e0d 100644 --- a/openai-java-core/build.gradle.kts +++ b/openai-java-core/build.gradle.kts @@ -32,6 +32,12 @@ configurations.matching { it.name != jacksonPublishedRuntime.name }.configureEac } dependencies { + constraints { + testImplementation("com.jayway.jsonpath:json-path:2.10.0") { + because("WireMock's transitive JSONPath version has a stack-overflow vulnerability") + } + } + api("com.fasterxml.jackson.core:jackson-core:$jacksonPublishedVersion") api("com.fasterxml.jackson.core:jackson-databind:$jacksonPublishedVersion") api("com.google.errorprone:error_prone_annotations:2.33.0") diff --git a/openai-java-spring-boot-starter/build.gradle.kts b/openai-java-spring-boot-starter/build.gradle.kts index fcf71dfe6..7ea92719f 100644 --- a/openai-java-spring-boot-starter/build.gradle.kts +++ b/openai-java-spring-boot-starter/build.gradle.kts @@ -8,6 +8,12 @@ repositories { } dependencies { + constraints { + testImplementation("com.jayway.jsonpath:json-path:2.10.0") { + because("Spring Boot's transitive JSONPath version has a stack-overflow vulnerability") + } + } + api(project(":openai-java")) implementation("org.springframework.boot:spring-boot-autoconfigure:2.7.18") annotationProcessor("org.springframework.boot:spring-boot-configuration-processor:2.7.18")