Merge pull request #25 from brettchaldecott/security/fix

fix: Changed dependancies for guava from 31 -> 3.2
kinde-oss · Sep 30, 2024 · cc95861 · cc95861
2 parents 0224847 + bf93c53
commit cc95861
Show file tree

Hide file tree

Showing 2 changed files with 26 additions and 0 deletions.
diff --git a/kinde-core/pom.xml b/kinde-core/pom.xml
@@ -69,7 +69,21 @@
       <artifactId>guice</artifactId>
       <!-- {version} can be 6.0.0, 7.0.0, etc. -->
       <version>7.0.0</version>
+      <exclusions>
+        <exclusion>
+          <groupId>com.google.guava</groupId>
+          <artifactId>guava</artifactId>
+        </exclusion>
+      </exclusions>
     </dependency>
+    <!-- https://mvnrepository.com/artifact/com.google.guava/guava -->
+    <dependency>
+      <groupId>com.google.guava</groupId>
+      <artifactId>guava</artifactId>
+      <version>32.1.3-jre</version>
+    </dependency>
+
+
     <!-- https://mvnrepository.com/artifact/org.projectlombok/lombok -->
     <dependency>
       <groupId>org.projectlombok</groupId>

diff --git a/kinde-j2ee/pom.xml b/kinde-j2ee/pom.xml
@@ -50,6 +50,18 @@
       <artifactId>guice</artifactId>
       <!-- {version} can be 6.0.0, 7.0.0, etc. -->
       <version>7.0.0</version>
+      <exclusions>
+        <exclusion>
+          <groupId>com.google.guava</groupId>
+          <artifactId>guava</artifactId>
+        </exclusion>
+      </exclusions>
+    </dependency>
+    <!-- https://mvnrepository.com/artifact/com.google.guava/guava -->
+    <dependency>
+      <groupId>com.google.guava</groupId>
+      <artifactId>guava</artifactId>
+      <version>32.1.3-jre</version>
     </dependency>
     <!-- https://mvnrepository.com/artifact/org.slf4j/slf4j-api -->
     <dependency>