Merge pull request #10 from guardian/db/fix-snyk-high-story-model

Fix synk high vulns

build.sbt

@@ -62,11 +62,14 @@ lazy val scalaClasses = (project in file("scala"))
     scroogePublishThrift in Compile := true,
     resolvers ++= Seq(Resolver.sonatypeRepo("public")),
     libraryDependencies ++= Seq(
-        "org.apache.thrift" % "libthrift" % "0.10.0",
+        "org.apache.thrift" % "libthrift" % "0.18.1",
         "com.twitter" %% "scrooge-core" % "19.3.0",
         "com.gu" % "content-entity-thrift" % "2.0.1",
         "com.gu" % "content-atom-model-thrift" % "3.0.2",
-        "com.gu" %% "content-atom-model" % "3.0.2"
+        "com.gu" %% "content-atom-model" % "3.0.2",
+        //adding annotation dependency to fix compilation error "Generated is not member of package javax.annotation"
+        //as recommended at https://github.com/bazelbuild/rules_scala/pull/1090 to comptaible for java 11 or any higher than java 8
+        "javax.annotation" % "javax.annotation-api" % "1.3.2",
     ),
   )