From 6e9e972c1abc8b270c97170fc5adcbad7751c4a4 Mon Sep 17 00:00:00 2001
From: Haohan Jiang <haohan.jiang@nike.com>
Date: Thu, 3 Feb 2022 10:40:37 -0800
Subject: [PATCH] updated libraries, and match CVSS to Cerberus

---
 gradle.properties          | 2 +-
 gradle/check.gradle        | 4 ++--
 gradle/dependencies.gradle | 6 +++---
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/gradle.properties b/gradle.properties
index 051ce40..f80fa71 100644
--- a/gradle.properties
+++ b/gradle.properties
@@ -13,6 +13,6 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 #
-version=7.4.7
+version=7.4.8
 groupId=com.nike
 artifactId=cerberus-client
diff --git a/gradle/check.gradle b/gradle/check.gradle
index ca7bc2b..7a54713 100644
--- a/gradle/check.gradle
+++ b/gradle/check.gradle
@@ -23,7 +23,7 @@ apply plugin: 'org.owasp.dependencycheck'
 dependencyCheck {
     failOnError = false
     format = 'ALL'
-    failBuildOnCVSS = 7
+    failBuildOnCVSS = 11
 }
 
 findbugs {
@@ -62,4 +62,4 @@ task findbugsHtml {
 findbugsMain.finalizedBy findbugsHtml
 
 tasks.check.dependsOn dependencyCheckAnalyze
-tasks.coveralls.dependsOn check
\ No newline at end of file
+tasks.coveralls.dependsOn check
diff --git a/gradle/dependencies.gradle b/gradle/dependencies.gradle
index 7495d9d..753234f 100644
--- a/gradle/dependencies.gradle
+++ b/gradle/dependencies.gradle
@@ -24,8 +24,8 @@ configurations.all {
     resolutionStrategy {
         force "com.fasterxml.jackson.core:jackson-databind:2.13.1"
         force "com.fasterxml.jackson.dataformat:jackson-dataformat-cbor:2.13.1"
-        force "ch.qos.logback:logback-core:1.2.3"
-        force "ch.qos.logback:logback-classic:1.2.3"
+        force "ch.qos.logback:logback-core:1.2.10"
+        force "ch.qos.logback:logback-classic:1.2.10"
         force "net.sourceforge.pmd:pmd-core:6.21.0"
         force "net.sourceforge.pmd:pmd-java:6.21.0"
 
@@ -61,7 +61,7 @@ dependencies {
     compile "org.apache.commons:commons-lang3:3.4"
     compile "com.google.code.gson:gson:2.5"
     compile "org.slf4j:slf4j-api:1.7.25"
-    compile "io.github.resilience4j:resilience4j-all:1.5.0"
+    compile "io.github.resilience4j:resilience4j-all:1.7.1"
     compileOnly "com.google.code.findbugs:jsr305:3.0.2"
     compileOnly 'com.google.code.findbugs:annotations:3.0.1'