diff --git a/openai-java-client-okhttp/build.gradle.kts b/openai-java-client-okhttp/build.gradle.kts index 4b3ffc9d4..56c150db7 100644 --- a/openai-java-client-okhttp/build.gradle.kts +++ b/openai-java-client-okhttp/build.gradle.kts @@ -17,6 +17,9 @@ dependencies { testImplementation("commons-io:commons-io:2.22.0") { because("WireMock's transitive Commons IO version has a resource-exhaustion vulnerability") } + testImplementation("com.jayway.jsonpath:json-path:2.10.0") { + because("WireMock's transitive JSONPath version has a stack-overflow vulnerability") + } } api(project(":openai-java-core")) diff --git a/openai-java-core/build.gradle.kts b/openai-java-core/build.gradle.kts index 77f7bb636..05d93d3ac 100644 --- a/openai-java-core/build.gradle.kts +++ b/openai-java-core/build.gradle.kts @@ -50,6 +50,9 @@ dependencies { testImplementation("commons-io:commons-io:2.22.0") { because("WireMock's transitive Commons IO version has a resource-exhaustion vulnerability") } + testImplementation("com.jayway.jsonpath:json-path:2.10.0") { + because("WireMock's transitive JSONPath version has a stack-overflow vulnerability") + } } api("com.fasterxml.jackson.core:jackson-core:$jacksonPublishedVersion") diff --git a/openai-java-spring-boot-starter/build.gradle.kts b/openai-java-spring-boot-starter/build.gradle.kts index 16435ce4e..10b131609 100644 --- a/openai-java-spring-boot-starter/build.gradle.kts +++ b/openai-java-spring-boot-starter/build.gradle.kts @@ -12,6 +12,13 @@ dependencies { testImplementation("org.xmlunit:xmlunit-core:2.11.0") { because("2.10.0 fixes CVE-2024-31573 in this test-only dependency") } + testImplementation("com.jayway.jsonpath:json-path:2.10.0") { + because("Spring Boot's transitive JSONPath version has a stack-overflow vulnerability") + } + testImplementation("org.slf4j:slf4j-api") { + version { strictly("1.7.36") } + because("Spring Boot 2.7 and Logback 1.2 require SLF4J 1.7 at test runtime") + } } api(project(":openai-java")) diff --git a/openai-java-spring-boot-starter/src/test/kotlin/com/openai/springboot/SpringBootLoggingCompatibilityTest.kt b/openai-java-spring-boot-starter/src/test/kotlin/com/openai/springboot/SpringBootLoggingCompatibilityTest.kt new file mode 100644 index 000000000..25b447a4d --- /dev/null +++ b/openai-java-spring-boot-starter/src/test/kotlin/com/openai/springboot/SpringBootLoggingCompatibilityTest.kt @@ -0,0 +1,25 @@ +// File generated from our OpenAPI spec by Stainless. + +package com.openai.springboot + +import com.openai.client.OpenAIClient +import org.assertj.core.api.Assertions.assertThat +import org.junit.jupiter.api.Test +import org.springframework.boot.SpringBootConfiguration +import org.springframework.boot.WebApplicationType +import org.springframework.boot.autoconfigure.EnableAutoConfiguration +import org.springframework.boot.builder.SpringApplicationBuilder + +internal class SpringBootLoggingCompatibilityTest { + + @Test + fun springApplicationStartsWithBootLogging() { + SpringApplicationBuilder(TestApplication::class.java) + .web(WebApplicationType.NONE) + .properties("openai.api-key=test") + .run() + .use { context -> assertThat(context.getBean(OpenAIClient::class.java)).isNotNull() } + } + + @SpringBootConfiguration @EnableAutoConfiguration internal open class TestApplication +}