Merge pull request #251 from Countly/upgrade_vulnarable

Upgrade vulnerable dependencies
Countly · Sep 25, 2024 · be08c9c · be08c9c
2 parents c6db766 + 2a21abf
commit be08c9c
Show file tree

Hide file tree

Showing 6 changed files with 11 additions and 7 deletions.
diff --git a/.idea/modules/app-java/countly-sdk-java.app-java.main.iml b/.idea/modules/app-java/countly-sdk-java.app-java.main.iml
diff --git a/.idea/modules/app-java/countly-sdk-java.app-java.test.iml b/.idea/modules/app-java/countly-sdk-java.app-java.test.iml
diff --git a/.idea/modules/sdk-java/countly-sdk-java.sdk-java.main.iml b/.idea/modules/sdk-java/countly-sdk-java.sdk-java.main.iml
diff --git a/.idea/modules/sdk-java/countly-sdk-java.sdk-java.test.iml b/.idea/modules/sdk-java/countly-sdk-java.sdk-java.test.iml
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -2,6 +2,8 @@
 
 * Added a new function "setID(newDeviceId)" for managing device id changes according to the device ID Type.
 
+* Mitigated an issue where json and junit dependencies had vulnerabilities.
+
 ## 24.1.0
 
 * !! Major breaking change !! The following method and its functionality is deprecated from the "UserEditor" interface and will not function anymore:

diff --git a/sdk-java/build.gradle b/sdk-java/build.gradle
@@ -13,10 +13,10 @@ buildscript {
 }
 
 dependencies {
-  implementation 'org.json:json:20230227'
+  implementation 'org.json:json:20231013'
   implementation 'com.google.code.findbugs:jsr305:3.0.2'
 
-  testImplementation 'junit:junit:4.12'
+  testImplementation 'junit:junit:4.13.1'
   testImplementation 'org.mockito:mockito-core:2.8.9'
   testImplementation "org.powermock:powermock-core:${POWERMOCK_VERSION}"
   testImplementation "org.powermock:powermock-module-junit4:${POWERMOCK_VERSION}"