From 00b0ba2896299bba942f6c55c0091fad1ed38492 Mon Sep 17 00:00:00 2001
From: Paolo Di Tommaso <paolo.ditommaso@gmail.com>
Date: Mon, 23 Dec 2024 12:16:47 +0100
Subject: [PATCH] Bump commons-io 2.18.0

Signed-off-by: Paolo Di Tommaso <paolo.ditommaso@gmail.com>
---
 app/build.gradle | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/app/build.gradle b/app/build.gradle
index d03030a..0d34b77 100644
--- a/app/build.gradle
+++ b/app/build.gradle
@@ -32,6 +32,8 @@ dependencies {
     implementation 'dev.langchain4j:langchain4j-open-ai:0.29.0'
     implementation 'org.semver4j:semver4j:5.4.0'
     annotationProcessor 'info.picocli:picocli-codegen:4.6.1'
+    // bump commons-io version to address security vulnerabilities
+    runtimeOnly 'commons-io:commons-io:2.18.0'
 
     testImplementation "org.codehaus.groovy:groovy:3.0.21"
     testImplementation "org.codehaus.groovy:groovy-nio:3.0.21"