From 8490b7de8855bf3be884dddea7b055f847730ddb Mon Sep 17 00:00:00 2001
From: Gabor Garancsi <gabor.garancsi@casrd.net>
Date: Tue, 19 Jan 2021 16:22:47 +0100
Subject: [PATCH] Bump dependency versions that are grabbed transitively

- httpclient:4.5.8 is included with gerrit-rest-java-client
- commons-cli:1.4 is included with checkstyle
  (1.2 does not even have the DefaultParser that is used for the CLI)

These versions are now explicitly defined, so build won't fail
if the first level dependencies won't rely on them anymore.
---
 build.gradle | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/build.gradle b/build.gradle
index 451ae49f..29b9c2ea 100644
--- a/build.gradle
+++ b/build.gradle
@@ -66,13 +66,13 @@ repositories {
 
 //noinspection GroovyAssignabilityCheck
 dependencies {
-    implementation 'org.apache.httpcomponents:httpclient:4.3.1'
+    implementation 'org.apache.httpcomponents:httpclient:4.5.8'
     implementation 'com.fasterxml.jackson.core:jackson-databind:2.3.0'
     implementation 'com.intellij:annotations:12.0'
     implementation 'org.slf4j:slf4j-api:1.7.26'
     implementation 'org.slf4j:log4j-over-slf4j:1.7.26'
     implementation 'ch.qos.logback:logback-classic:1.2.3'
-    implementation 'commons-cli:commons-cli:1.2'
+    implementation 'commons-cli:commons-cli:1.4'
     implementation 'com.jayway.jsonpath:json-path:2.4.0'
     implementation 'commons-io:commons-io:2.4'
     implementation 'org.eclipse.jgit:org.eclipse.jgit:5.5.1.201910021850-r'