Skip to content

Commit 21d1aa8

Browse files
authored
PP-15351 Override dependencies (#4227)
- Overrides Jetty and Jackson dependencies due to vulnerable transitive dependencies, and the Dropwizard release with the latest versions of these libraries may take a while. - Added BOM instead of overriding specific vulnerable dependencies to ensure all modules in the group are aligned to compatible versions.
1 parent ad7e348 commit 21d1aa8

1 file changed

Lines changed: 14 additions & 0 deletions

File tree

pom.xml

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -22,6 +22,20 @@
2222

2323
<dependencyManagement>
2424
<dependencies>
25+
<dependency>
26+
<groupId>org.eclipse.jetty</groupId>
27+
<artifactId>jetty-bom</artifactId>
28+
<version>12.1.9</version>
29+
<type>pom</type>
30+
<scope>import</scope>
31+
</dependency>
32+
<dependency>
33+
<groupId>com.fasterxml.jackson</groupId>
34+
<artifactId>jackson-bom</artifactId>
35+
<version>2.21.3</version>
36+
<type>pom</type>
37+
<scope>import</scope>
38+
</dependency>
2539
<dependency>
2640
<groupId>io.dropwizard</groupId>
2741
<artifactId>dropwizard-dependencies</artifactId>

0 commit comments

Comments
 (0)