Exclude (not used) vulnerable dependencies (#592)

* Exclude (not used) vulnerable dependencies * Exclude (not used) vulnerable dependencies
openrewrite · Sep 10, 2024 · cf6d238 · cf6d238
1 parent ed574ff
commit cf6d238
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/build.gradle.kts b/build.gradle.kts
@@ -145,7 +145,10 @@ dependencies {
         exclude("com.google.auto.service", "auto-service-annotations")
     }
     implementation("org.mongodb:mongo-java-driver:3.12.+")
-    implementation("org.springframework.data:spring-data-mongodb:2.2.+")
+    implementation("org.springframework.data:spring-data-mongodb:2.2.+"){
+        because("We only require the classes (for refaster style recipes), not the dependencies")
+        exclude(group = "org.springframework")
+    }
 
     testRuntimeOnly("ch.qos.logback:logback-classic:1.+")
     testRuntimeOnly(gradleApi())