Merge pull request #106 from guardian/remove-high-vulnerability-commo…

…ns-compress Bump `commons-compress` transitively to fix high vulnerability
guardian · Jun 26, 2024 · e2ebb7d · e2ebb7d
2 parents 28ae24e + 72e308d
commit e2ebb7d
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/build.sbt b/build.sbt
@@ -21,7 +21,8 @@ lazy val core = project.settings(
     "org.parboiled" %% "parboiled" % "2.5.0",
     "org.scala-lang" % "scala-compiler" % scalaVersion.value % "provided",
     "org.scalatest" %% "scalatest" % "3.2.16" % Test,
-    "org.scalatestplus" %% "scalacheck-1-17" % "3.2.16.0" % Test
+    "org.scalatestplus" %% "scalacheck-1-17" % "3.2.16.0" % Test,
+    "org.apache.commons" % "commons-compress" % "1.26.2"
   ),
   Test/testOptions += Tests.Argument(
     TestFrameworks.ScalaTest,
@@ -51,4 +52,4 @@ releaseProcess := Seq[ReleaseStep](
   tagRelease,
   setNextVersion,
   commitNextVersion
-)
+)