fix CVE for org.eclipse.core.runtime (#2378)

Signed-off-by: Mingshi Liu <mingshl@amazon.com> (cherry picked from commit aa3616d)
opensearch-project · Apr 30, 2024 · fc415da · fc415da
1 parent a8456a6
commit fc415da
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/build.gradle b/build.gradle
@@ -37,6 +37,11 @@ buildscript {
     dependencies {
         classpath "${opensearch_group}.gradle:build-tools:${opensearch_version}"
         classpath "gradle.plugin.com.dorongold.plugins:task-tree:1.5"
+        configurations.all {
+            resolutionStrategy {
+                force("org.eclipse.platform:org.eclipse.core.runtime:3.29.0") // for spotless transitive dependency CVE (for 3.26.100)
+            }
+        }
     }
 }