Skip to content

Commit 7eb1de0

Browse files
nthmost-orkesnthmost-orkes
authored
Enable Gradle dependency locking + clear the CVEs it revealed (#184)
The CVE scan reads resolved deps from a lock file; java-sdk committed none, so it scanned thin and showed a false-clean 0. Lock the runtime classpath of the six published client libraries (committed gradle.lockfile per module), which surfaced real HIGH findings -- fixed here: - jackson 2.18.6 -> 2.18.11 (versions.gradle): 8 CVEs incl. 2 RCE (CVE-2026-54512/54513) across jackson-core + jackson-databind - spring-boot-starter 3.5.13 -> 3.5.15 (conductor-client-spring): clears the spring-boot CVE and pulls spring-framework 6.2.19 (spring-expression CVE-2026-41850) - spring-boot-starter 4.0.6 -> 4.0.7 (conductor-client-spring-boot4): pulls spring-framework 7.0.8 (spring-expression CVE-2026-41850) - micrometer-registry-prometheus 1.15.1 -> 1.15.12 (conductor-client-metrics): CVE-2026-40983/40984 Only runtimeClasspath is locked (what ships); all six lockfiles now scan clean and all published modules assemble.
1 parent 914dc6e commit 7eb1de0

11 files changed

Lines changed: 294 additions & 5 deletions

File tree

‎build.gradle‎

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -86,3 +86,17 @@ subprojects {
8686
}
8787

8888
}
89+
90+
// CVE scan coverage: lock the runtime classpath of the published client libraries
91+
// so the dependency scanner sees pinned, resolved transitive versions (committed
92+
// gradle.lockfile per module). Only runtimeClasspath is locked -- that is what
93+
// actually ships; test and compile-only configs are left unlocked.
94+
def publishedProjects = [
95+
'conductor-client', 'conductor-client-ai', 'conductor-client-metrics',
96+
'conductor-client-spring', 'conductor-client-ai-spring', 'conductor-client-spring-boot4',
97+
]
98+
configure(subprojects.findAll { it.name in publishedProjects }) {
99+
configurations.matching { it.name == 'runtimeClasspath' }.configureEach {
100+
resolutionStrategy.activateDependencyLocking()
101+
}
102+
}

‎conductor-client-ai-spring/gradle.lockfile‎

Lines changed: 54 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,54 @@
1+
# This is a Gradle generated file for dependency locking.
2+
# Manual edits can break the build and are not advised.
3+
# This file is expected to be part of source control.
4+
ch.qos.logback:logback-classic:1.5.34=runtimeClasspath
5+
ch.qos.logback:logback-core:1.5.34=runtimeClasspath
6+
com.fasterxml.jackson.core:jackson-annotations:2.18.11=runtimeClasspath
7+
com.fasterxml.jackson.core:jackson-core:2.18.11=runtimeClasspath
8+
com.fasterxml.jackson.core:jackson-databind:2.18.11=runtimeClasspath
9+
com.fasterxml.jackson.datatype:jackson-datatype-jdk8:2.18.11=runtimeClasspath
10+
com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.18.11=runtimeClasspath
11+
com.fasterxml.jackson.module:jackson-module-afterburner:2.18.11=runtimeClasspath
12+
com.fasterxml.jackson.module:jackson-module-kotlin:2.18.11=runtimeClasspath
13+
com.fasterxml.jackson:jackson-bom:2.18.11=runtimeClasspath
14+
com.google.errorprone:error_prone_annotations:2.47.0=runtimeClasspath
15+
com.google.guava:failureaccess:1.0.3=runtimeClasspath
16+
com.google.guava:guava:33.6.0-jre=runtimeClasspath
17+
com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava=runtimeClasspath
18+
com.google.j2objc:j2objc-annotations:3.1=runtimeClasspath
19+
com.squareup.okhttp3:okhttp:4.12.0=runtimeClasspath
20+
com.squareup.okio:okio-jvm:3.6.0=runtimeClasspath
21+
com.squareup.okio:okio:3.6.0=runtimeClasspath
22+
io.micrometer:micrometer-commons:1.15.12=runtimeClasspath
23+
io.micrometer:micrometer-observation:1.15.12=runtimeClasspath
24+
jakarta.annotation:jakarta.annotation-api:2.1.1=runtimeClasspath
25+
org.apache.commons:commons-lang3:3.19.0=runtimeClasspath
26+
org.apache.logging.log4j:log4j-api:2.24.3=runtimeClasspath
27+
org.apache.logging.log4j:log4j-to-slf4j:2.24.3=runtimeClasspath
28+
org.jetbrains.kotlin:kotlin-reflect:1.8.10=runtimeClasspath
29+
org.jetbrains.kotlin:kotlin-stdlib-common:1.9.10=runtimeClasspath
30+
org.jetbrains.kotlin:kotlin-stdlib-jdk7:1.9.10=runtimeClasspath
31+
org.jetbrains.kotlin:kotlin-stdlib-jdk8:1.9.10=runtimeClasspath
32+
org.jetbrains.kotlin:kotlin-stdlib:1.9.10=runtimeClasspath
33+
org.jetbrains:annotations:13.0=runtimeClasspath
34+
org.jspecify:jspecify:1.0.0=runtimeClasspath
35+
org.openjdk.nashorn:nashorn-core:15.6=runtimeClasspath
36+
org.ow2.asm:asm-analysis:7.3.1=runtimeClasspath
37+
org.ow2.asm:asm-commons:7.3.1=runtimeClasspath
38+
org.ow2.asm:asm-tree:7.3.1=runtimeClasspath
39+
org.ow2.asm:asm-util:7.3.1=runtimeClasspath
40+
org.ow2.asm:asm:7.3.1=runtimeClasspath
41+
org.slf4j:jul-to-slf4j:2.0.18=runtimeClasspath
42+
org.slf4j:slf4j-api:2.0.18=runtimeClasspath
43+
org.springframework.boot:spring-boot-autoconfigure:3.5.15=runtimeClasspath
44+
org.springframework.boot:spring-boot-starter-logging:3.5.15=runtimeClasspath
45+
org.springframework.boot:spring-boot-starter:3.5.15=runtimeClasspath
46+
org.springframework.boot:spring-boot:3.5.15=runtimeClasspath
47+
org.springframework:spring-aop:6.2.19=runtimeClasspath
48+
org.springframework:spring-beans:6.2.19=runtimeClasspath
49+
org.springframework:spring-context:6.2.19=runtimeClasspath
50+
org.springframework:spring-core:6.2.19=runtimeClasspath
51+
org.springframework:spring-expression:6.2.19=runtimeClasspath
52+
org.springframework:spring-jcl:6.2.19=runtimeClasspath
53+
org.yaml:snakeyaml:2.4=runtimeClasspath
54+
empty=

‎conductor-client-ai/gradle.lockfile‎

Lines changed: 35 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,35 @@
1+
# This is a Gradle generated file for dependency locking.
2+
# Manual edits can break the build and are not advised.
3+
# This file is expected to be part of source control.
4+
com.fasterxml.jackson.core:jackson-annotations:2.18.11=runtimeClasspath
5+
com.fasterxml.jackson.core:jackson-core:2.18.11=runtimeClasspath
6+
com.fasterxml.jackson.core:jackson-databind:2.18.11=runtimeClasspath
7+
com.fasterxml.jackson.datatype:jackson-datatype-jdk8:2.18.11=runtimeClasspath
8+
com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.18.11=runtimeClasspath
9+
com.fasterxml.jackson.module:jackson-module-afterburner:2.18.11=runtimeClasspath
10+
com.fasterxml.jackson.module:jackson-module-kotlin:2.18.11=runtimeClasspath
11+
com.fasterxml.jackson:jackson-bom:2.18.11=runtimeClasspath
12+
com.google.errorprone:error_prone_annotations:2.47.0=runtimeClasspath
13+
com.google.guava:failureaccess:1.0.3=runtimeClasspath
14+
com.google.guava:guava:33.6.0-jre=runtimeClasspath
15+
com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava=runtimeClasspath
16+
com.google.j2objc:j2objc-annotations:3.1=runtimeClasspath
17+
com.squareup.okhttp3:okhttp:4.12.0=runtimeClasspath
18+
com.squareup.okio:okio-jvm:3.6.0=runtimeClasspath
19+
com.squareup.okio:okio:3.6.0=runtimeClasspath
20+
org.apache.commons:commons-lang3:3.19.0=runtimeClasspath
21+
org.jetbrains.kotlin:kotlin-reflect:1.8.10=runtimeClasspath
22+
org.jetbrains.kotlin:kotlin-stdlib-common:1.9.10=runtimeClasspath
23+
org.jetbrains.kotlin:kotlin-stdlib-jdk7:1.9.10=runtimeClasspath
24+
org.jetbrains.kotlin:kotlin-stdlib-jdk8:1.9.10=runtimeClasspath
25+
org.jetbrains.kotlin:kotlin-stdlib:1.9.10=runtimeClasspath
26+
org.jetbrains:annotations:13.0=runtimeClasspath
27+
org.jspecify:jspecify:1.0.0=runtimeClasspath
28+
org.openjdk.nashorn:nashorn-core:15.6=runtimeClasspath
29+
org.ow2.asm:asm-analysis:7.3.1=runtimeClasspath
30+
org.ow2.asm:asm-commons:7.3.1=runtimeClasspath
31+
org.ow2.asm:asm-tree:7.3.1=runtimeClasspath
32+
org.ow2.asm:asm-util:7.3.1=runtimeClasspath
33+
org.ow2.asm:asm:7.3.1=runtimeClasspath
34+
org.slf4j:slf4j-api:1.7.36=runtimeClasspath
35+
empty=

‎conductor-client-metrics/build.gradle‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ ext {
1313
apply plugin: 'publish-config'
1414

1515
dependencies {
16-
api 'io.micrometer:micrometer-registry-prometheus:1.15.1'
16+
api 'io.micrometer:micrometer-registry-prometheus:1.15.12'
1717
implementation project(":conductor-client")
1818
implementation "com.squareup.okhttp3:okhttp:${versions.okHttp}"
1919

‎conductor-client-metrics/gradle.lockfile‎

Lines changed: 46 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,46 @@
1+
# This is a Gradle generated file for dependency locking.
2+
# Manual edits can break the build and are not advised.
3+
# This file is expected to be part of source control.
4+
com.fasterxml.jackson.core:jackson-annotations:2.18.11=runtimeClasspath
5+
com.fasterxml.jackson.core:jackson-core:2.18.11=runtimeClasspath
6+
com.fasterxml.jackson.core:jackson-databind:2.18.11=runtimeClasspath
7+
com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.18.11=runtimeClasspath
8+
com.fasterxml.jackson.module:jackson-module-afterburner:2.18.11=runtimeClasspath
9+
com.fasterxml.jackson.module:jackson-module-kotlin:2.18.11=runtimeClasspath
10+
com.fasterxml.jackson:jackson-bom:2.18.11=runtimeClasspath
11+
com.google.errorprone:error_prone_annotations:2.47.0=runtimeClasspath
12+
com.google.guava:failureaccess:1.0.3=runtimeClasspath
13+
com.google.guava:guava:33.6.0-jre=runtimeClasspath
14+
com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava=runtimeClasspath
15+
com.google.j2objc:j2objc-annotations:3.1=runtimeClasspath
16+
com.squareup.okhttp3:okhttp:4.12.0=runtimeClasspath
17+
com.squareup.okio:okio-jvm:3.6.0=runtimeClasspath
18+
com.squareup.okio:okio:3.6.0=runtimeClasspath
19+
io.micrometer:micrometer-commons:1.15.12=runtimeClasspath
20+
io.micrometer:micrometer-core:1.15.12=runtimeClasspath
21+
io.micrometer:micrometer-observation:1.15.12=runtimeClasspath
22+
io.micrometer:micrometer-registry-prometheus:1.15.12=runtimeClasspath
23+
io.prometheus:prometheus-metrics-config:1.3.10=runtimeClasspath
24+
io.prometheus:prometheus-metrics-core:1.3.10=runtimeClasspath
25+
io.prometheus:prometheus-metrics-exposition-formats:1.3.10=runtimeClasspath
26+
io.prometheus:prometheus-metrics-exposition-textformats:1.3.10=runtimeClasspath
27+
io.prometheus:prometheus-metrics-model:1.3.10=runtimeClasspath
28+
io.prometheus:prometheus-metrics-tracer-common:1.3.10=runtimeClasspath
29+
org.apache.commons:commons-lang3:3.19.0=runtimeClasspath
30+
org.hdrhistogram:HdrHistogram:2.2.2=runtimeClasspath
31+
org.jetbrains.kotlin:kotlin-reflect:1.8.10=runtimeClasspath
32+
org.jetbrains.kotlin:kotlin-stdlib-common:1.9.10=runtimeClasspath
33+
org.jetbrains.kotlin:kotlin-stdlib-jdk7:1.9.10=runtimeClasspath
34+
org.jetbrains.kotlin:kotlin-stdlib-jdk8:1.9.10=runtimeClasspath
35+
org.jetbrains.kotlin:kotlin-stdlib:1.9.10=runtimeClasspath
36+
org.jetbrains:annotations:13.0=runtimeClasspath
37+
org.jspecify:jspecify:1.0.0=runtimeClasspath
38+
org.latencyutils:LatencyUtils:2.0.3=runtimeClasspath
39+
org.openjdk.nashorn:nashorn-core:15.6=runtimeClasspath
40+
org.ow2.asm:asm-analysis:7.3.1=runtimeClasspath
41+
org.ow2.asm:asm-commons:7.3.1=runtimeClasspath
42+
org.ow2.asm:asm-tree:7.3.1=runtimeClasspath
43+
org.ow2.asm:asm-util:7.3.1=runtimeClasspath
44+
org.ow2.asm:asm:7.3.1=runtimeClasspath
45+
org.slf4j:slf4j-api:1.7.36=runtimeClasspath
46+
empty=

‎conductor-client-spring-boot4/build.gradle‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -20,9 +20,9 @@ repositories {
2020

2121
dependencies {
2222
api project(":conductor-client")
23-
implementation 'org.springframework.boot:spring-boot-starter:4.0.6'
23+
implementation 'org.springframework.boot:spring-boot-starter:4.0.7'
2424

25-
testImplementation 'org.springframework.boot:spring-boot-starter-test:4.0.6'
25+
testImplementation 'org.springframework.boot:spring-boot-starter-test:4.0.7'
2626
testRuntimeOnly 'org.junit.platform:junit-platform-launcher'
2727
testImplementation "org.mockito:mockito-core:${versions.mockito}"
2828
testImplementation "org.mockito:mockito-junit-jupiter:${versions.mockito}"

‎conductor-client-spring-boot4/gradle.lockfile‎

Lines changed: 53 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,53 @@
1+
# This is a Gradle generated file for dependency locking.
2+
# Manual edits can break the build and are not advised.
3+
# This file is expected to be part of source control.
4+
ch.qos.logback:logback-classic:1.5.34=runtimeClasspath
5+
ch.qos.logback:logback-core:1.5.34=runtimeClasspath
6+
com.fasterxml.jackson.core:jackson-annotations:2.18.11=runtimeClasspath
7+
com.fasterxml.jackson.core:jackson-core:2.18.11=runtimeClasspath
8+
com.fasterxml.jackson.core:jackson-databind:2.18.11=runtimeClasspath
9+
com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.18.11=runtimeClasspath
10+
com.fasterxml.jackson.module:jackson-module-afterburner:2.18.11=runtimeClasspath
11+
com.fasterxml.jackson.module:jackson-module-kotlin:2.18.11=runtimeClasspath
12+
com.fasterxml.jackson:jackson-bom:2.18.11=runtimeClasspath
13+
com.google.errorprone:error_prone_annotations:2.47.0=runtimeClasspath
14+
com.google.guava:failureaccess:1.0.3=runtimeClasspath
15+
com.google.guava:guava:33.6.0-jre=runtimeClasspath
16+
com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava=runtimeClasspath
17+
com.google.j2objc:j2objc-annotations:3.1=runtimeClasspath
18+
com.squareup.okhttp3:okhttp:4.12.0=runtimeClasspath
19+
com.squareup.okio:okio-jvm:3.6.0=runtimeClasspath
20+
com.squareup.okio:okio:3.6.0=runtimeClasspath
21+
commons-logging:commons-logging:1.3.5=runtimeClasspath
22+
io.micrometer:micrometer-commons:1.16.6=runtimeClasspath
23+
io.micrometer:micrometer-observation:1.16.6=runtimeClasspath
24+
jakarta.annotation:jakarta.annotation-api:3.0.0=runtimeClasspath
25+
org.apache.commons:commons-lang3:3.19.0=runtimeClasspath
26+
org.apache.logging.log4j:log4j-api:2.25.4=runtimeClasspath
27+
org.apache.logging.log4j:log4j-to-slf4j:2.25.4=runtimeClasspath
28+
org.jetbrains.kotlin:kotlin-reflect:1.8.10=runtimeClasspath
29+
org.jetbrains.kotlin:kotlin-stdlib-common:1.9.10=runtimeClasspath
30+
org.jetbrains.kotlin:kotlin-stdlib-jdk7:1.9.10=runtimeClasspath
31+
org.jetbrains.kotlin:kotlin-stdlib-jdk8:1.9.10=runtimeClasspath
32+
org.jetbrains.kotlin:kotlin-stdlib:1.9.10=runtimeClasspath
33+
org.jetbrains:annotations:13.0=runtimeClasspath
34+
org.jspecify:jspecify:1.0.0=runtimeClasspath
35+
org.openjdk.nashorn:nashorn-core:15.6=runtimeClasspath
36+
org.ow2.asm:asm-analysis:7.3.1=runtimeClasspath
37+
org.ow2.asm:asm-commons:7.3.1=runtimeClasspath
38+
org.ow2.asm:asm-tree:7.3.1=runtimeClasspath
39+
org.ow2.asm:asm-util:7.3.1=runtimeClasspath
40+
org.ow2.asm:asm:7.3.1=runtimeClasspath
41+
org.slf4j:jul-to-slf4j:2.0.18=runtimeClasspath
42+
org.slf4j:slf4j-api:2.0.18=runtimeClasspath
43+
org.springframework.boot:spring-boot-autoconfigure:4.0.7=runtimeClasspath
44+
org.springframework.boot:spring-boot-starter-logging:4.0.7=runtimeClasspath
45+
org.springframework.boot:spring-boot-starter:4.0.7=runtimeClasspath
46+
org.springframework.boot:spring-boot:4.0.7=runtimeClasspath
47+
org.springframework:spring-aop:7.0.8=runtimeClasspath
48+
org.springframework:spring-beans:7.0.8=runtimeClasspath
49+
org.springframework:spring-context:7.0.8=runtimeClasspath
50+
org.springframework:spring-core:7.0.8=runtimeClasspath
51+
org.springframework:spring-expression:7.0.8=runtimeClasspath
52+
org.yaml:snakeyaml:2.5=runtimeClasspath
53+
empty=

‎conductor-client-spring/build.gradle‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ repositories {
1919

2020
dependencies {
2121
api project(":conductor-client")
22-
implementation 'org.springframework.boot:spring-boot-starter:3.5.13'
22+
implementation 'org.springframework.boot:spring-boot-starter:3.5.15'
2323

2424
testImplementation 'org.springframework.boot:spring-boot-starter-test:3.3.13'
2525
}

‎conductor-client-spring/gradle.lockfile‎

Lines changed: 53 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,53 @@
1+
# This is a Gradle generated file for dependency locking.
2+
# Manual edits can break the build and are not advised.
3+
# This file is expected to be part of source control.
4+
ch.qos.logback:logback-classic:1.5.34=runtimeClasspath
5+
ch.qos.logback:logback-core:1.5.34=runtimeClasspath
6+
com.fasterxml.jackson.core:jackson-annotations:2.18.11=runtimeClasspath
7+
com.fasterxml.jackson.core:jackson-core:2.18.11=runtimeClasspath
8+
com.fasterxml.jackson.core:jackson-databind:2.18.11=runtimeClasspath
9+
com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.18.11=runtimeClasspath
10+
com.fasterxml.jackson.module:jackson-module-afterburner:2.18.11=runtimeClasspath
11+
com.fasterxml.jackson.module:jackson-module-kotlin:2.18.11=runtimeClasspath
12+
com.fasterxml.jackson:jackson-bom:2.18.11=runtimeClasspath
13+
com.google.errorprone:error_prone_annotations:2.47.0=runtimeClasspath
14+
com.google.guava:failureaccess:1.0.3=runtimeClasspath
15+
com.google.guava:guava:33.6.0-jre=runtimeClasspath
16+
com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava=runtimeClasspath
17+
com.google.j2objc:j2objc-annotations:3.1=runtimeClasspath
18+
com.squareup.okhttp3:okhttp:4.12.0=runtimeClasspath
19+
com.squareup.okio:okio-jvm:3.6.0=runtimeClasspath
20+
com.squareup.okio:okio:3.6.0=runtimeClasspath
21+
io.micrometer:micrometer-commons:1.15.12=runtimeClasspath
22+
io.micrometer:micrometer-observation:1.15.12=runtimeClasspath
23+
jakarta.annotation:jakarta.annotation-api:2.1.1=runtimeClasspath
24+
org.apache.commons:commons-lang3:3.19.0=runtimeClasspath
25+
org.apache.logging.log4j:log4j-api:2.24.3=runtimeClasspath
26+
org.apache.logging.log4j:log4j-to-slf4j:2.24.3=runtimeClasspath
27+
org.jetbrains.kotlin:kotlin-reflect:1.8.10=runtimeClasspath
28+
org.jetbrains.kotlin:kotlin-stdlib-common:1.9.10=runtimeClasspath
29+
org.jetbrains.kotlin:kotlin-stdlib-jdk7:1.9.10=runtimeClasspath
30+
org.jetbrains.kotlin:kotlin-stdlib-jdk8:1.9.10=runtimeClasspath
31+
org.jetbrains.kotlin:kotlin-stdlib:1.9.10=runtimeClasspath
32+
org.jetbrains:annotations:13.0=runtimeClasspath
33+
org.jspecify:jspecify:1.0.0=runtimeClasspath
34+
org.openjdk.nashorn:nashorn-core:15.6=runtimeClasspath
35+
org.ow2.asm:asm-analysis:7.3.1=runtimeClasspath
36+
org.ow2.asm:asm-commons:7.3.1=runtimeClasspath
37+
org.ow2.asm:asm-tree:7.3.1=runtimeClasspath
38+
org.ow2.asm:asm-util:7.3.1=runtimeClasspath
39+
org.ow2.asm:asm:7.3.1=runtimeClasspath
40+
org.slf4j:jul-to-slf4j:2.0.18=runtimeClasspath
41+
org.slf4j:slf4j-api:2.0.18=runtimeClasspath
42+
org.springframework.boot:spring-boot-autoconfigure:3.5.15=runtimeClasspath
43+
org.springframework.boot:spring-boot-starter-logging:3.5.15=runtimeClasspath
44+
org.springframework.boot:spring-boot-starter:3.5.15=runtimeClasspath
45+
org.springframework.boot:spring-boot:3.5.15=runtimeClasspath
46+
org.springframework:spring-aop:6.2.19=runtimeClasspath
47+
org.springframework:spring-beans:6.2.19=runtimeClasspath
48+
org.springframework:spring-context:6.2.19=runtimeClasspath
49+
org.springframework:spring-core:6.2.19=runtimeClasspath
50+
org.springframework:spring-expression:6.2.19=runtimeClasspath
51+
org.springframework:spring-jcl:6.2.19=runtimeClasspath
52+
org.yaml:snakeyaml:2.4=runtimeClasspath
53+
empty=

‎conductor-client/gradle.lockfile‎

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
# This is a Gradle generated file for dependency locking.
2+
# Manual edits can break the build and are not advised.
3+
# This file is expected to be part of source control.
4+
com.fasterxml.jackson.core:jackson-annotations:2.18.11=runtimeClasspath
5+
com.fasterxml.jackson.core:jackson-core:2.18.11=runtimeClasspath
6+
com.fasterxml.jackson.core:jackson-databind:2.18.11=runtimeClasspath
7+
com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.18.11=runtimeClasspath
8+
com.fasterxml.jackson.module:jackson-module-afterburner:2.18.11=runtimeClasspath
9+
com.fasterxml.jackson.module:jackson-module-kotlin:2.18.11=runtimeClasspath
10+
com.fasterxml.jackson:jackson-bom:2.18.11=runtimeClasspath
11+
com.google.errorprone:error_prone_annotations:2.47.0=runtimeClasspath
12+
com.google.guava:failureaccess:1.0.3=runtimeClasspath
13+
com.google.guava:guava:33.6.0-jre=runtimeClasspath
14+
com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava=runtimeClasspath
15+
com.google.j2objc:j2objc-annotations:3.1=runtimeClasspath
16+
com.squareup.okhttp3:okhttp:4.12.0=runtimeClasspath
17+
com.squareup.okio:okio-jvm:3.6.0=runtimeClasspath
18+
com.squareup.okio:okio:3.6.0=runtimeClasspath
19+
org.apache.commons:commons-lang3:3.19.0=runtimeClasspath
20+
org.jetbrains.kotlin:kotlin-reflect:1.8.10=runtimeClasspath
21+
org.jetbrains.kotlin:kotlin-stdlib-common:1.9.10=runtimeClasspath
22+
org.jetbrains.kotlin:kotlin-stdlib-jdk7:1.9.10=runtimeClasspath
23+
org.jetbrains.kotlin:kotlin-stdlib-jdk8:1.9.10=runtimeClasspath
24+
org.jetbrains.kotlin:kotlin-stdlib:1.9.10=runtimeClasspath
25+
org.jetbrains:annotations:13.0=runtimeClasspath
26+
org.jspecify:jspecify:1.0.0=runtimeClasspath
27+
org.openjdk.nashorn:nashorn-core:15.6=runtimeClasspath
28+
org.ow2.asm:asm-analysis:7.3.1=runtimeClasspath
29+
org.ow2.asm:asm-commons:7.3.1=runtimeClasspath
30+
org.ow2.asm:asm-tree:7.3.1=runtimeClasspath
31+
org.ow2.asm:asm-util:7.3.1=runtimeClasspath
32+
org.ow2.asm:asm:7.3.1=runtimeClasspath
33+
org.slf4j:slf4j-api:1.7.36=runtimeClasspath
34+
empty=

0 commit comments

Comments
 (0)