Bump json-smart to 2.4.9

snowplow · Jul 10, 2023 · 9138eb8 · 9138eb8
1 parent 2ddf367
commit 9138eb8
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/project/Dependencies.scala b/project/Dependencies.scala
@@ -51,6 +51,7 @@ object Dependencies {
     val hadoopClient     = "3.3.4"
     val hadoopGcpClient  = "hadoop3-2.2.5"
     val parquetHadoop    = "1.12.3"
+    val jsonSmart        = "2.4.9" // Fix CVE
     val commonsText      = "1.10.0" // Fix CVE
     val ivy              = "2.5.1" // Fix CVE
 
@@ -138,6 +139,7 @@ object Dependencies {
   val hadoopAws         = ("org.apache.hadoop"               % "hadoop-aws"                % V.hadoopClient % Runtime)
     .exclude("com.amazonaws", "aws-java-sdk-bundle") // aws-java-sdk-core is already present in assembled jar
   val hadoopGcp         = "com.google.cloud.bigdataoss"      % "gcs-connector"             % V.hadoopGcpClient % Runtime
+  val jsonSmart         = "net.minidev"                      % "json-smart"                % V.jsonSmart
   val kinesisClient     = ("software.amazon.kinesis"         %  "amazon-kinesis-client"    % V.kinesisClient)
                           .exclude("software.amazon.glue", "schema-registry-common")
                           .exclude("software.amazon.glue", "schema-registry-serde")
@@ -301,6 +303,7 @@ object Dependencies {
     parquet4s,
     hadoop,
     parquetHadoop,
+    jsonSmart,
     specs2,
     specs2ScalaCheck,
     scalaCheck,