diff --git a/build.gradle b/build.gradle index 4bbb14e..41a026e 100644 --- a/build.gradle +++ b/build.gradle @@ -27,6 +27,14 @@ repositories { // for more information about repositories. } +// Override vulnerable msal4j dependency until Minecraft updates to a newer version +configurations.all { + resolutionStrategy { + // v1.15.0, used by Minecraft 1.21.3, is vulnerable to CVE-2024-35255 + force 'com.microsoft.azure:msal4j:1.17.2' + } +} + dependencies { // To change the versions see the gradle.properties file minecraft "com.mojang:minecraft:${project.minecraft_version}" @@ -95,7 +103,7 @@ publishMods { ) type = ghVersion.contains("pre") ? BETA : STABLE modLoaders.add("fabric") - + curseforge { projectId = "353426" accessToken = providers.environmentVariable("CURSEFORGE_API_KEY")