upgrade transitive dependency netty-code-http & secretsmanager

Signed-off-by: Mikayla Thompson <thomika@amazon.com>
mikaylathompson · Apr 22, 2024 · 386e285 · 386e285
1 parent 6ab7b87
commit 386e285
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 5 deletions.
diff --git a/TrafficCapture/dockerSolution/build.gradle b/TrafficCapture/dockerSolution/build.gradle
@@ -14,6 +14,11 @@ def calculateDockerHash = { projectName ->
 dependencies {
     implementation project(':trafficCaptureProxyServer')
     implementation project(':trafficReplayer')
+    constraints {
+        implementation('software.amazon.awssdk:secretsmanager:2.25.19') {
+            because 'mend security issue'
+        }
+    }
 }
 
 def dockerFilesForExternalServices = [

diff --git a/TrafficCapture/trafficReplayer/build.gradle b/TrafficCapture/trafficReplayer/build.gradle
@@ -58,7 +58,7 @@ dependencies {
     implementation group: 'software.amazon.awssdk', name: 'arns', version: '2.20.102'
     implementation group: 'software.amazon.awssdk', name: 'auth', version: '2.20.102'
     implementation group: 'software.amazon.awssdk', name: 'sdk-core', version: '2.20.102'
-    implementation group: 'software.amazon.awssdk', name: 'secretsmanager', version: '2.20.127'
+    implementation group: 'software.amazon.awssdk', name: 'secretsmanager', version: '2.25.19'
     implementation group: 'software.amazon.msk', name: 'aws-msk-iam-auth', version: '2.0.3'
     implementation 'org.apache.commons:commons-compress:1.26.0'
 
@@ -86,15 +86,19 @@ dependencies {
     testImplementation group: 'org.testcontainers', name: 'junit-jupiter', version: '1.19.7'
     testImplementation group: 'org.testcontainers', name: 'kafka', version: '1.19.7'
     testImplementation group: 'org.testcontainers', name: 'testcontainers', version: '1.19.7'
+
+    testImplementation group: 'org.mockito', name:'mockito-core', version:'4.6.1'
+    testImplementation group: 'org.mockito', name:'mockito-junit-jupiter', version:'4.6.1'
+    testRuntimeOnly group:'org.junit.jupiter', name:'junit-jupiter-engine', version:'5.x.x'
+
     constraints {
         testImplementation('org.apache.commons:commons-compress:1.26.0') {
             because 'mend security issue'
         }
+        implementation('io.netty:netty-codec-http:4.1.108.Final') {
+            because 'mend security issue'
+        }
     }
-
-    testImplementation group: 'org.mockito', name:'mockito-core', version:'4.6.1'
-    testImplementation group: 'org.mockito', name:'mockito-junit-jupiter', version:'4.6.1'
-    testRuntimeOnly group:'org.junit.jupiter', name:'junit-jupiter-engine', version:'5.x.x'
 }
 
 configurations.all {