From 3c407253400c2b3a11f0244942b1d78c73f75bbe Mon Sep 17 00:00:00 2001
From: Ashleigh Carr <ashcorr20@gmail.com>
Date: Thu, 2 Nov 2023 12:00:02 +0000
Subject: [PATCH] Document reasons for updating transient dependencies

---
 build.sbt | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/build.sbt b/build.sbt
index 791505a..57ad289 100644
--- a/build.sbt
+++ b/build.sbt
@@ -41,10 +41,13 @@ libraryDependencies ++= Seq(
 // Overidden transient dependencies for Vulnerability fixes
 libraryDependencies ++= Seq(
   // Introduced through com.typesafe.play:play_2.13:2.9.0
+  // No newer version of play available yet.
   "com.typesafe.akka" %% "akka-actor" % "2.8.1",
   // Introduced through org.webjars:bootstrap:3.4.1
+  // Fix available in next major bootstrap version - this will involve a lot of breaking changes however.
   "org.webjars" % "jquery" % "3.6.4",
   // Introduced through com.madgag.play-git-hub:core:5.10
+  // No newer version of play-git-hub available yet.
   "org.eclipse.jgit" % "org.eclipse.jgit" % "6.6.1.202309021850-r",
   "com.squareup.okhttp3" % "okhttp" % "4.12.0"
 )