From 755a84cdcc0379acfedb33fe84a082e9e592dfae Mon Sep 17 00:00:00 2001
From: Aaron Steinfeld <aaron@traceable.ai>
Date: Thu, 12 May 2022 20:36:09 -0400
Subject: [PATCH] chore: constraint vulnerable netty version

---
 grpc-server-utils/build.gradle.kts | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/grpc-server-utils/build.gradle.kts b/grpc-server-utils/build.gradle.kts
index 0db1003..ca5fcb3 100644
--- a/grpc-server-utils/build.gradle.kts
+++ b/grpc-server-utils/build.gradle.kts
@@ -14,6 +14,12 @@ dependencies {
   api("io.grpc:grpc-context")
   api("io.grpc:grpc-api")
 
+  constraints {
+    api("io.netty:netty-codec-http2:4.1.77.Final") {
+      because("https://snyk.io/vuln/SNYK-JAVA-IONETTY-2812456")
+    }
+  }
+
   implementation(project(":grpc-context-utils"))
   implementation("org.slf4j:slf4j-api:1.7.36")