From c778301d57ff5c5eb7ed5fb89b4d6d269277ba20 Mon Sep 17 00:00:00 2001 From: Tudor Timi Date: Sun, 16 Jun 2024 22:25:21 +0200 Subject: [PATCH 1/2] Fix compatibility with Gradle 7.5.1 caused by multi-release JAR We still want to keep support for Gradle 7.5.1 a little longer. Gradle version older than 7.6.4 fail when trying to use multi-release JARs which contain code for JDKs which that Gradle doesn't support: https://github.com/gradle/gradle/issues/24390. Starting with version 2.15, Jackson publishes such JARs. Downgrading to version 2.14 is not an issue, as we don't use any fancy features. This version is fairly recent (May 2023) and doesn't have any known vulnerabilities. --- build.gradle.kts | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/build.gradle.kts b/build.gradle.kts index a9ab31c..5025fad 100644 --- a/build.gradle.kts +++ b/build.gradle.kts @@ -64,13 +64,13 @@ gradlePlugin { } dependencies { - implementation("com.fasterxml.jackson.core:jackson-databind:2.16.0") + implementation("com.fasterxml.jackson.core:jackson-databind:2.14.3") testImplementation("org.spockframework:spock-core:2.2-groovy-3.0") { exclude(group = "org.codehaus.groovy") } testImplementation("org.spockframework:spock-junit4:2.0-groovy-3.0") - testImplementation("com.fasterxml.jackson.core:jackson-databind:2.16.0") + testImplementation("com.fasterxml.jackson.core:jackson-databind:2.14.3") } tasks.withType { From f26153998dd3cb19edf8d48240182655985fed9b Mon Sep 17 00:00:00 2001 From: Tudor Timi Date: Sun, 16 Jun 2024 22:38:22 +0200 Subject: [PATCH 2/2] Extract version catalog entry for `jackson-databind` --- build.gradle.kts | 4 ++-- gradle/libs.versions.toml | 2 ++ 2 files changed, 4 insertions(+), 2 deletions(-) create mode 100644 gradle/libs.versions.toml diff --git a/build.gradle.kts b/build.gradle.kts index 5025fad..be47b28 100644 --- a/build.gradle.kts +++ b/build.gradle.kts @@ -64,13 +64,13 @@ gradlePlugin { } dependencies { - implementation("com.fasterxml.jackson.core:jackson-databind:2.14.3") + implementation(libs.jackson.databind) testImplementation("org.spockframework:spock-core:2.2-groovy-3.0") { exclude(group = "org.codehaus.groovy") } testImplementation("org.spockframework:spock-junit4:2.0-groovy-3.0") - testImplementation("com.fasterxml.jackson.core:jackson-databind:2.14.3") + testImplementation(libs.jackson.databind) } tasks.withType { diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml new file mode 100644 index 0000000..275c738 --- /dev/null +++ b/gradle/libs.versions.toml @@ -0,0 +1,2 @@ +[libraries] +jackson-databind = "com.fasterxml.jackson.core:jackson-databind:2.14.3"