@@ -76,8 +76,10 @@ allprojects {
7676 utilities
7777 }
7878 configurations. configureEach {
79- // exclude log4j, which may come in transitively, from all configurations to avoid its potential vulnerabilities
79+ // exclude log4j 1.x , which may come in transitively, from all configurations to avoid its potential vulnerabilities
8080 exclude group : " log4j" , module :" log4j"
81+ // exclude to ensure we don't have Log4J to SLFJ adapters or other unwanted logging libraries added to modules
82+ exclude group : " org.springframework.boot" , module :" spring-boot-starter-logging"
8183 }
8284 configurations. driver. setDescription(" Dependencies used for Gradle SetUpProperties task" )
8385 configurations. utilities. setDescription(" Utility binaries for use on Windows platform" )
@@ -202,6 +204,13 @@ allprojects {
202204 configurations. configureEach
203205 {Configuration config ->
204206 resolutionStrategy {
207+ // spring-ai pulls a different version of antr-ST4 than the version pulled by query (via antlr)
208+ force " org.antlr:ST4:${ antlrST4Version} "
209+ // also it pulls in a bunch of com.google.api dependencies which conflict with DiscvrLabKeyModules:SequenceAnalysis and wnprc-modules:WNPRC_EHR
210+ force " com.google.api:api-common:${ googleApiVersion} "
211+ force " com.google.auth:google-auth-library-oauth2-http:${ googleAuthVersion} "
212+ force " com.google.auth:google-auth-library-credentials:${ googleAuthVersion} "
213+
205214 // we force this version because we have compilation problems with version 1.9.2 of commons-beanutils, which is the version
206215 // that is brought in by Gradle's conflict resolution as a result of our chosen versions for commons-validator (1.5.0) and commons-digester (1.8.1)
207216 force " commons-beanutils:commons-beanutils:${ commonsBeanutilsVersion} "
0 commit comments