From cc427a687bae3626f73331dba17916832e7cdbbe Mon Sep 17 00:00:00 2001 From: Justin Beckwith Date: Wed, 15 Jul 2026 15:47:40 -0700 Subject: [PATCH] build(deps): update test Commons IO to 2.22.0 --- openai-java-client-okhttp/build.gradle.kts | 3 +++ openai-java-core/build.gradle.kts | 3 +++ 2 files changed, 6 insertions(+) diff --git a/openai-java-client-okhttp/build.gradle.kts b/openai-java-client-okhttp/build.gradle.kts index 212d2e708..4b3ffc9d4 100644 --- a/openai-java-client-okhttp/build.gradle.kts +++ b/openai-java-client-okhttp/build.gradle.kts @@ -14,6 +14,9 @@ dependencies { testImplementation("org.xmlunit:xmlunit-core:2.11.0") { because("2.10.0 fixes CVE-2024-31573 in this test-only dependency") } + testImplementation("commons-io:commons-io:2.22.0") { + because("WireMock's transitive Commons IO version has a resource-exhaustion vulnerability") + } } api(project(":openai-java-core")) diff --git a/openai-java-core/build.gradle.kts b/openai-java-core/build.gradle.kts index 692b370ee..77f7bb636 100644 --- a/openai-java-core/build.gradle.kts +++ b/openai-java-core/build.gradle.kts @@ -47,6 +47,9 @@ dependencies { testImplementation("org.xmlunit:xmlunit-core:2.11.0") { because("2.10.0 fixes CVE-2024-31573 in this test-only dependency") } + testImplementation("commons-io:commons-io:2.22.0") { + because("WireMock's transitive Commons IO version has a resource-exhaustion vulnerability") + } } api("com.fasterxml.jackson.core:jackson-core:$jacksonPublishedVersion")