SONAR-13155 upgrade commons-collection to fix vulnerability

(that can't be exploited)

diff --git a/sonar-ws-generator/build.gradle b/sonar-ws-generator/build.gradle
index 3c7ae776b085beb1ec659ec3a8412a1a12e1aff7..e872e414c793b5031f60ad9948f3205d32cc00a7 100644 (file)
--- a/sonar-ws-generator/build.gradle
+++ b/sonar-ws-generator/build.gradle
@@ -8,6 +8,9 @@ dependencies {
   compile 'com.google.code.gson:gson'
   compile 'com.google.guava:guava'
   compile 'commons-io:commons-io'
+  // transitive dependency of Velocity that must be upgraded
+  // in order to fix a vulnerability
+  compile 'commons-collections:commons-collections:3.2.2'
   compile 'org.apache.velocity:velocity:1.7'
   compile 'org.slf4j:log4j-over-slf4j'
   compile 'org.sonarsource.orchestrator:sonar-orchestrator'