Use newer hk2-locator in order to get rid of javassist

(with a known vulnerable version or whatnot) Fixes: scylladb#231
yaronkaikov · Jan 7, 2024 · a602294 · a602294
1 parent 80ce599
commit a602294
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/scylla-apiclient/pom.xml b/scylla-apiclient/pom.xml
@@ -42,6 +42,11 @@
             <artifactId>jersey-client</artifactId>
             <version>2.22.1</version>
         </dependency>
+        <dependency>
+            <groupId>org.glassfish.hk2</groupId>
+            <artifactId>hk2-locator</artifactId>
+            <version>2.5.0</version>
+        </dependency>
         <dependency>
             <groupId>org.glassfish</groupId>
             <artifactId>javax.json</artifactId>