From fb2cc7314d474faf5a3ae7c18782bac5e382d716 Mon Sep 17 00:00:00 2001
From: Andy Wilkinson <wilkinsona@vmware.com>
Date: Thu, 24 Nov 2022 16:49:43 +0000
Subject: [PATCH] Work around Thymeleaf's dependency on
 spring-security-bom:6.0.0-RC2

Closes gh-33348
---
 build.gradle | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/build.gradle b/build.gradle
index 83bfda6c17c4..5be0a0fd1d78 100644
--- a/build.gradle
+++ b/build.gradle
@@ -26,8 +26,12 @@ allprojects {
 
 	repositories {
 		mavenCentral()
-		if (version.contains('-')) {
-			maven { url "https://repo.spring.io/milestone" }
+		maven {
+			url "https://repo.spring.io/milestone"
+			content {
+				// Thymeleaf uses 6.0.0-RC2 of Security's bom in its dependency management
+				includeModule("org.springframework.security", "spring-security-bom")
+			}
 		}
 		if (version.endsWith('-SNAPSHOT')) {
 			maven { url "https://repo.spring.io/snapshot" }