Use constraint

marcphilipp · marcphilipp · commit 546951ecbd28 · 2026-04-01T09:18:40.000+02:00
diff --git a/gradle/plugins/publishing/build.gradle.kts b/gradle/plugins/publishing/build.gradle.kts
@@ -6,9 +6,7 @@ plugins {
 
 dependencies {
 	implementation("junitbuild.base:dsl-extensions")
-	implementation(libs.plugins.jreleaser.markerCoordinates) {
-		exclude("org.codehaus.plexus", "plexus-utils") // workaround for CVE-2025-67030
-	}
+	implementation(libs.plugins.jreleaser.markerCoordinates)
 	constraints {
 		implementation("org.eclipse.jgit:org.eclipse.jgit") {
 			version {
@@ -28,5 +26,11 @@ dependencies {
 			}
 			because("Workaround for GHSA-72hv-8253-57qq")
 		}
+		implementation("org.codehaus.plexus:plexus-utils") {
+			version {
+				require("4.0.3")
+			}
+			because("Workaround for CVE-2025-67030")
+		}
 	}
 }

Original file line number	Diff line number	Diff line change
`@@ -6,9 +6,7 @@ plugins {`
`6`	`6`
`7`	`7`	`dependencies {`
`8`	`8`	`implementation("junitbuild.base:dsl-extensions")`
`9`		`- implementation(libs.plugins.jreleaser.markerCoordinates) {`
`10`		`- exclude("org.codehaus.plexus", "plexus-utils") // workaround for CVE-2025-67030`
`11`		`- }`
	`9`	`+ implementation(libs.plugins.jreleaser.markerCoordinates)`
`12`	`10`	`constraints {`
`13`	`11`	`implementation("org.eclipse.jgit:org.eclipse.jgit") {`
`14`	`12`	`version {`
`@@ -28,5 +26,11 @@ dependencies {`
`28`	`26`	`}`
`29`	`27`	`because("Workaround for GHSA-72hv-8253-57qq")`
`30`	`28`	`}`
	`29`	`+ implementation("org.codehaus.plexus:plexus-utils") {`
	`30`	`+ version {`
	`31`	`+ require("4.0.3")`
	`32`	`+ }`
	`33`	`+ because("Workaround for CVE-2025-67030")`
	`34`	`+ }`
`31`	`35`	`}`
`32`	`36`	`}`