Set google guava to 33.2.1-jre for vulnerable sbt modules (#159)

opensnowcat · Oct 22, 2024 · cfe059c · cfe059c
1 parent db49703
commit cfe059c
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/build.sbt b/build.sbt
@@ -179,6 +179,7 @@ lazy val pubsubSettings =
     libraryDependencies ++= Seq(
       Dependencies.Libraries.pubsub,
       Dependencies.Libraries.protobuf,
+      Dependencies.Libraries.guava,
       // integration tests dependencies
       Dependencies.Libraries.specs2It,
       Dependencies.Libraries.specs2CEIt
@@ -227,7 +228,8 @@ lazy val nsqSettings =
     libraryDependencies ++= Seq(
       Dependencies.Libraries.nsqClient,
       Dependencies.Libraries.jackson,
-      Dependencies.Libraries.log4j
+      Dependencies.Libraries.log4j,
+      Dependencies.Libraries.guava
     )
   )
 

diff --git a/project/Dependencies.scala b/project/Dependencies.scala
@@ -38,6 +38,7 @@ object Dependencies {
     val thrift      = "0.15.0"
     val jnrUnixsock = "0.38.22"
     val protobuf    = "3.25.4"
+    val guava       = "32.1.3-jre"
 
     // Scala
     val collectorPayload = "0.0.0"
@@ -79,6 +80,7 @@ object Dependencies {
     val jnrUnixsocket  = "com.github.jnr"           % "jnr-unixsocket"   % V.jnrUnixsock
     val rabbitMQ       = "com.rabbitmq"             % "amqp-client"      % V.rabbitMQ
     val protobuf       = "com.google.protobuf"      % "protobuf-java"    % V.protobuf
+    val guava          = "com.google.guava"         % "guava"            % V.guava
 
     // Scala
     val collectorPayload = "com.snowplowanalytics"  % "collector-payload-1"               % V.collectorPayload