From e0f934337e5354832408b80906110eeb770afe47 Mon Sep 17 00:00:00 2001 From: Justin Beckwith Date: Wed, 15 Jul 2026 16:10:53 -0700 Subject: [PATCH] fix(deps): update test XMLUnit to 2.11.0 --- openai-java-client-okhttp/build.gradle.kts | 6 ++++++ openai-java-core/build.gradle.kts | 6 ++++++ openai-java-spring-boot-starter/build.gradle.kts | 6 ++++++ 3 files changed, 18 insertions(+) diff --git a/openai-java-client-okhttp/build.gradle.kts b/openai-java-client-okhttp/build.gradle.kts index 4d1eb6170..9dcc42ef1 100644 --- a/openai-java-client-okhttp/build.gradle.kts +++ b/openai-java-client-okhttp/build.gradle.kts @@ -4,6 +4,12 @@ plugins { } dependencies { + constraints { + testImplementation("org.xmlunit:xmlunit-core:2.11.0") { + because("2.10.0 fixes CVE-2024-31573 in this test-only dependency") + } + } + api(project(":openai-java-core")) implementation("com.squareup.okhttp3:okhttp:4.12.0") diff --git a/openai-java-core/build.gradle.kts b/openai-java-core/build.gradle.kts index b386f1dbb..b00ef65f3 100644 --- a/openai-java-core/build.gradle.kts +++ b/openai-java-core/build.gradle.kts @@ -32,6 +32,12 @@ configurations.matching { it.name != jacksonPublishedRuntime.name }.configureEac } dependencies { + constraints { + testImplementation("org.xmlunit:xmlunit-core:2.11.0") { + because("2.10.0 fixes CVE-2024-31573 in this test-only dependency") + } + } + api("com.fasterxml.jackson.core:jackson-core:$jacksonPublishedVersion") api("com.fasterxml.jackson.core:jackson-databind:$jacksonPublishedVersion") api("com.google.errorprone:error_prone_annotations:2.33.0") diff --git a/openai-java-spring-boot-starter/build.gradle.kts b/openai-java-spring-boot-starter/build.gradle.kts index fcf71dfe6..0e4ed24e1 100644 --- a/openai-java-spring-boot-starter/build.gradle.kts +++ b/openai-java-spring-boot-starter/build.gradle.kts @@ -8,6 +8,12 @@ repositories { } dependencies { + constraints { + testImplementation("org.xmlunit:xmlunit-core:2.11.0") { + because("2.10.0 fixes CVE-2024-31573 in this test-only dependency") + } + } + api(project(":openai-java")) implementation("org.springframework.boot:spring-boot-autoconfigure:2.7.18") annotationProcessor("org.springframework.boot:spring-boot-configuration-processor:2.7.18")