From bb9d05445ae0b195b37e61bf762553e33f1dd7c0 Mon Sep 17 00:00:00 2001 From: PJ Fanning Date: Wed, 18 Mar 2026 15:11:51 +0100 Subject: [PATCH] add commons-codec dependency --- project/Dependencies.scala | 3 +++ project/plugins.sbt | 2 ++ 2 files changed, 5 insertions(+) diff --git a/project/Dependencies.scala b/project/Dependencies.scala index f8beb783..b7be952a 100644 --- a/project/Dependencies.scala +++ b/project/Dependencies.scala @@ -31,6 +31,8 @@ object Dependencies { val logbackVersion = "1.5.32" val slf4jVersion = "2.0.17" + val commonsCodecVersion = "1.21.0" + // often called-in transitively with insecure versions of databind / core private val jacksonDatabind = Seq( "com.fasterxml.jackson.core" % "jackson-databind" % jacksonVersion) @@ -158,6 +160,7 @@ object Dependencies { "org.apache.pekko" %% "pekko-http" % pekkoHttpVersion, "org.apache.pekko" %% "pekko-slf4j" % pekkoVersion, "org.apache.pekko" %% "pekko-http-spray-json" % pekkoHttpVersion, + "commons-codec" % "commons-codec" % commonsCodecVersion, "org.scalatest" %% "scalatest" % scalaTestVersion % Test, "org.scalatestplus" %% "junit-4-13" % scalaTestPlusJUnitVersion % Test, "org.apache.pekko" %% "pekko-testkit" % pekkoVersion % Test) ++ diff --git a/project/plugins.sbt b/project/plugins.sbt index 0c5bf3eb..efd6948b 100644 --- a/project/plugins.sbt +++ b/project/plugins.sbt @@ -13,6 +13,8 @@ addSbtPlugin("com.github.sbt" % "sbt-header" % "5.11.0") addSbtPlugin("org.scalameta" % "sbt-scalafmt" % "2.5.6") addSbtPlugin("com.github.sbt" % "sbt-java-formatter" % "0.10.0") addSbtPlugin("com.github.sbt" % "sbt-dynver" % "5.1.1") +// need commons-codec upgrade here due to clashes with dependency versions used in pekko-management itself +libraryDependencies += "commons-codec" % "commons-codec" % "1.21.0" addSbtPlugin("com.github.sbt" % "sbt-unidoc" % "0.6.1") addSbtPlugin("com.thoughtworks.sbt-api-mappings" % "sbt-api-mappings" % "3.0.2") addSbtPlugin("net.bzzt" % "sbt-reproducible-builds" % "0.32")