Merge pull request #40 from DataDog/mborst/cc-vulns-runtime-fixes

Fix CC runtime vuln deps (commons-io, lz4)

Author: mborst

build.gradle

@@ -115,6 +115,17 @@ subprojects {
       implementation("net.minidev:json-smart:2.5.0") {
         because("CVE-2023-1370 - transitive from json-path")
       }
+      implementation("commons-io:commons-io:2.14.0") {
+        because("CVE-2024-47554 - transitive from swagger-parser")
+      }
+    }
+  }
+
+  configurations.all {
+    resolutionStrategy {
+      dependencySubstitution {
+        substitute(module("org.lz4:lz4-java")).using(module("at.yawk.lz4:lz4-java:1.8.1"))
+      }
     }
   }