build(dependencies): 更新 telegrambots 依赖项.

将 telegrambots 依赖项更新至 6.5.0, 支持新版 Api;
已确认 telegrambots 6.5.0 版本升级了jackson-databind 版本,
因此移除 jackson-databind 的显性依赖声明.
This commit is contained in:
2023-02-08 10:12:33 +08:00
parent 961382fb56
commit 712378b3ff
3 changed files with 4 additions and 16 deletions

View File

@ -9,13 +9,9 @@ plugins {
dependencies {
implementation("commons-codec:commons-codec:1.15")
api("org.telegram:telegrambots-abilities:6.3.0")
api("org.telegram:telegrambots-abilities:6.5.0")
api("org.slf4j:slf4j-api:2.0.3")
// Added as a mitigation measure for vulnerabilities.
// When the relevant reference dependency updates it, it will be removed.
implementation("com.fasterxml.jackson.core:jackson-databind:2.13.4.2")
testImplementation("org.junit.jupiter:junit-jupiter-api:5.9.0")
testImplementation("org.mockito:mockito-core:4.8.0")
testRuntimeOnly("org.junit.jupiter:junit-jupiter-engine")