RUN-0000: Force kotlin-stdlib to 2.1.0 to fix CVE-2020-29582

kotlin-stdlib is pulled in transitively via okhttp/okio/logging-interceptor
and was resolving to 1.9.10, which is vulnerable. Force it to 2.1.0
across all subprojects, following the existing commons-compress CVE
mitigation pattern.

Author: fdevans

build.gradle

@@ -49,6 +49,10 @@ subprojects{
         configurations.all {
             resolutionStrategy {
                 force libs.commonsCompress
+                force 'org.jetbrains.kotlin:kotlin-stdlib:2.1.0'
+                force 'org.jetbrains.kotlin:kotlin-stdlib-jdk8:2.1.0'
+                force 'org.jetbrains.kotlin:kotlin-stdlib-jdk7:2.1.0'
+                force 'org.jetbrains.kotlin:kotlin-stdlib-common:2.1.0'
             }
         }
 }

gradle/verification-metadata.xml

@@ -2233,6 +2233,14 @@
             <sha256 value="7e29fbf73fdf71e0679d3dee7e680fd573464fa01644a4f58ab819d2c088d3d2" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.jetbrains.kotlin" name="kotlin-stdlib" version="2.1.0">
+         <artifact name="kotlin-stdlib-2.1.0.jar">
+            <sha256 value="d6f91b7b0f306cca299fec74fb7c34e4874d6f5ec5b925a0b4de21901e119c3f" origin="Generated by Gradle"/>
+         </artifact>
+         <artifact name="kotlin-stdlib-2.1.0.module">
+            <sha256 value="dcfbc8e8bf32cd67a7efadd91d31152bce9870911d6ec50878f4fdb6e03e70e2" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.jetbrains.kotlin" name="kotlin-stdlib-common" version="1.5.31">
          <artifact name="kotlin-stdlib-common-1.5.31.jar">
             <sha256 value="dfa2a18e26b028388ee1968d199bf6f166f737ab7049c25a5e2da614404e22ad" origin="Generated by Gradle"/>
@@ -2254,6 +2262,11 @@
             <sha256 value="7d4b70547910676b3bdfc8925a88f3b6bfb24582c9784542805544ceef490a92" origin="Generated by Gradle" reason="Artifact is not signed"/>
          </artifact>
       </component>
+      <component group="org.jetbrains.kotlin" name="kotlin-stdlib-common" version="2.1.0">
+         <artifact name="kotlin-stdlib-common-2.1.0.module">
+            <sha256 value="2b9a5ae785f8513a93f8cec3f6e5e07f8b1766f8497b3a487f3441a251d67563" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.jetbrains.kotlin" name="kotlin-stdlib-jdk7" version="1.5.31">
          <artifact name="kotlin-stdlib-jdk7-1.5.31.jar">
             <sha256 value="a25bf47353ce899d843cbddee516d621a73473e7fba97f8d0301e7b4aed7c15f" origin="Generated by Gradle"/>
@@ -2275,6 +2288,14 @@
             <sha256 value="c7fa67c7961320b89d85a3ca59a2e18c2c65850845595dcae4b46af6945edcd5" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.jetbrains.kotlin" name="kotlin-stdlib-jdk7" version="2.1.0">
+         <artifact name="kotlin-stdlib-jdk7-2.1.0.jar">
+            <sha256 value="fdea6c4203724f42e8e64bef2f0bf79129ccd1df1edf1ccffdc22de7df498c76" origin="Generated by Gradle"/>
+         </artifact>
+         <artifact name="kotlin-stdlib-jdk7-2.1.0.pom">
+            <sha256 value="06fbc14ecb14a0af47b5a3f8d34763f4933d5cba5a3d245045bfe2f2bdb91b1e" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.jetbrains.kotlin" name="kotlin-stdlib-jdk8" version="1.5.31">
          <artifact name="kotlin-stdlib-jdk8-1.5.31.jar">
             <sha256 value="b548f7767aacf029d2417e47440742bd6d3ebede19b60386e23554ce5c4c5fdc" origin="Generated by Gradle"/>
@@ -2296,6 +2317,14 @@
             <sha256 value="5f4b94dd3065a7764c37fa15de2ad6d81f40d59f8cb33f17d181c6384fb7a72e" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.jetbrains.kotlin" name="kotlin-stdlib-jdk8" version="2.1.0">
+         <artifact name="kotlin-stdlib-jdk8-2.1.0.jar">
+            <sha256 value="238d3c7e492f119b50da1c22546dd762462e55f22409611f5e53dd77625cd544" origin="Generated by Gradle"/>
+         </artifact>
+         <artifact name="kotlin-stdlib-jdk8-2.1.0.pom">
+            <sha256 value="e762b8c45690ae8a6a35df584f54be9c9da65885e61a905426aeafca5937e1ce" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.junit" name="junit-bom" version="5.10.2">
          <artifact name="junit-bom-5.10.2.module">
             <sha256 value="de23b114b3e4119a8fe6eb17bed5a3852816698bace67071579d6d927ebb080a" origin="Maven Central" reason="Gradle Module Metadata served by the plugin classpath repository"/>