Merge pull request #59 from DenisRybas/dependency-fix

dependency vulnerabilities fixed
sicpa-dlab · Jun 16, 2022 · bd8dfc9 · bd8dfc9
2 parents 37203a3 + 4b3ee42
commit bd8dfc9
Showing 1 changed file with 10 additions and 2 deletions.
diff --git a/lib/build.gradle b/lib/build.gradle
@@ -22,13 +22,21 @@ kotlin {
 dependencies {
     implementation "com.nimbusds:nimbus-jose-jwt:${nimbusJoseJWTVersion}"
     implementation "com.github.multiformats:java-multibase:${javaMultibase}"
-    shadow "com.google.crypto.tink:tink:${googleTinkVersion}"
+    implementation "com.google.code.gson:gson:2.9.0"
+    implementation 'com.google.protobuf:protobuf-java:3.20.1'
+    shadow("com.google.crypto.tink:tink:${googleTinkVersion}") {
+        exclude group: 'com.google.code.gson', module: 'gson'
+        exclude group: 'com.google.protobuf', module: 'protobuf-java'
+    }
     shadow "com.zmannotes:varint:${zmanVarint}"
     // implementation 'org.bouncycastle:bcprov-jdk15on:1.69'
 
     // TODO look for a better solution
     // currently it's a workaround for shadow of the above deps
-    testImplementation "com.google.crypto.tink:tink:${googleTinkVersion}"
+    testImplementation("com.google.crypto.tink:tink:${googleTinkVersion}") {
+        exclude group: 'com.google.code.gson', module: 'gson'
+        exclude group: 'com.google.protobuf', module: 'protobuf-java'
+    }
     testImplementation "com.zmannotes:varint:${zmanVarint}"
 
     testImplementation "org.jetbrains.kotlin:kotlin-test"