From 09b8e87df6fc33e206a8b0a96fcdb092ef3d7514 Mon Sep 17 00:00:00 2001 From: Justin Beckwith Date: Wed, 15 Jul 2026 15:51:58 -0700 Subject: [PATCH] build(deps): update test commons-lang3 to 3.18.0 --- openai-java-client-okhttp/build.gradle.kts | 3 +++ openai-java-core/build.gradle.kts | 3 +++ 2 files changed, 6 insertions(+) diff --git a/openai-java-client-okhttp/build.gradle.kts b/openai-java-client-okhttp/build.gradle.kts index 56c150db7..537d3d170 100644 --- a/openai-java-client-okhttp/build.gradle.kts +++ b/openai-java-client-okhttp/build.gradle.kts @@ -20,6 +20,9 @@ dependencies { testImplementation("com.jayway.jsonpath:json-path:2.10.0") { because("WireMock's transitive JSONPath version has a stack-overflow vulnerability") } + testImplementation("org.apache.commons:commons-lang3:3.18.0") { + because("WireMock's transitive 3.12.0 release is vulnerable to uncontrolled recursion") + } } api(project(":openai-java-core")) diff --git a/openai-java-core/build.gradle.kts b/openai-java-core/build.gradle.kts index 05d93d3ac..a4b4643dd 100644 --- a/openai-java-core/build.gradle.kts +++ b/openai-java-core/build.gradle.kts @@ -53,6 +53,9 @@ dependencies { testImplementation("com.jayway.jsonpath:json-path:2.10.0") { because("WireMock's transitive JSONPath version has a stack-overflow vulnerability") } + testImplementation("org.apache.commons:commons-lang3:3.18.0") { + because("WireMock's transitive 3.12.0 release is vulnerable to uncontrolled recursion") + } } api("com.fasterxml.jackson.core:jackson-core:$jacksonPublishedVersion")