[CHK-11672][CHK-11673] Update logback (security) (#166)

getyourguide · Dec 23, 2024 · b275b3f · b275b3f
1 parent 13e1171
commit b275b3f
Show file tree

Hide file tree

Showing 2 changed files with 21 additions and 0 deletions.
diff --git a/examples/example-spring-boot-starter-web/build.gradle b/examples/example-spring-boot-starter-web/build.gradle
@@ -5,6 +5,16 @@ plugins {
     alias(libs.plugins.openapi.generator)
 }
 
+// Needed for security. See:
+// - https://github.com/getyourguide/openapi-validation-java/security/dependabot/7
+// - https://github.com/getyourguide/openapi-validation-java/security/dependabot/6
+// Hopefully with spring-boot 3.4.2+ this won't be needed anymore and can be removed.
+dependencyManagement {
+    dependencies {
+        dependency 'ch.qos.logback:logback-core:1.5.15'
+        dependency 'ch.qos.logback:logback-classic:1.5.15'
+    }
+}
 
 dependencies {
     implementation project(':examples:examples-common')

diff --git a/examples/example-spring-boot-starter-webflux/build.gradle b/examples/example-spring-boot-starter-webflux/build.gradle
@@ -5,6 +5,17 @@ plugins {
     alias(libs.plugins.openapi.generator)
 }
 
+// Needed for security. See:
+// - https://github.com/getyourguide/openapi-validation-java/security/dependabot/7
+// - https://github.com/getyourguide/openapi-validation-java/security/dependabot/6
+// Hopefully with spring-boot 3.4.2+ this won't be needed anymore and can be removed.
+dependencyManagement {
+    dependencies {
+        dependency 'ch.qos.logback:logback-core:1.5.15'
+        dependency 'ch.qos.logback:logback-classic:1.5.15'
+    }
+}
+
 dependencies {
     implementation project(':examples:examples-common')
     implementation project(':spring-boot-starter:spring-boot-starter-webflux')