Skip to content

Commit

Permalink
chore: use our own build of json-merge lib (#854)
Browse files Browse the repository at this point in the history
- currently includes an outdated and insecure version of org.json:json lib
- did a PR in 08/2022 but got no response so far (savvasdalkitsis/json-merge#2)
- so forked and published the lib on Jitpack (https://jitpack.io/#stellio-hub/json-merge)
  • Loading branch information
bobeal authored Feb 10, 2023
1 parent 35f8196 commit 24b2cfa
Show file tree
Hide file tree
Showing 2 changed files with 3 additions and 1 deletion.
1 change: 1 addition & 0 deletions build.gradle.kts
Original file line number Diff line number Diff line change
Expand Up @@ -34,6 +34,7 @@ plugins {
subprojects {
repositories {
mavenCentral()
maven { url = uri("https://jitpack.io") }
}

apply(plugin = "io.spring.dependency-management")
Expand Down
3 changes: 2 additions & 1 deletion search-service/build.gradle.kts
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,8 @@ dependencies {
implementation("org.flywaydb:flyway-core")
// implementation (and not runtime) because we are using the native jsonb encoding provided by PG
implementation("org.postgresql:r2dbc-postgresql")
implementation("com.savvasdalkitsis:json-merge:0.0.6")
implementation("com.github.stellio-hub:json-merge:0.1.0")
implementation("org.json:json:20220924")
implementation(project(":shared"))

detektPlugins("io.gitlab.arturbosch.detekt:detekt-formatting:1.22.0")
Expand Down

0 comments on commit 24b2cfa

Please sign in to comment.