0
0
mirror of https://github.com/Wurst-Imperium/Wurst7.git synced 2024-09-19 17:02:13 +02:00

Update com.diffplug.spotless to fix vulnerable sub-dependencies

Specifically: CVE-2023-3635, caused by com.squareup.okio:okio version 3.2.0 and com.squareup.okio:okio-jvm version 3.2.0.

This vulnerability doesn't affect end users of Wurst. Only developers were potentially affected. Then again, the attack vector for this CVE isn't super relevant when compiling Wurst. So, do update your forks, but don't worry too much.
This commit is contained in:
Alexander01998 2024-04-17 17:17:02 +02:00 committed by GitHub
parent f53cbff5b6
commit 624f7c322d
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -7,7 +7,7 @@ buildscript {
plugins {
id 'fabric-loom' version '1.6-SNAPSHOT'
id 'maven-publish'
id 'com.diffplug.spotless' version '6.23.3'
id 'com.diffplug.spotless' version '6.25.0'
}
def ENV = System.getenv()