diff --git a/backend/build.gradle b/backend/build.gradle index 73a8d92e..7ae32609 100644 --- a/backend/build.gradle +++ b/backend/build.gradle @@ -27,7 +27,7 @@ repositories { // Spring AI BOM for dependency management ext { - springAiVersion = '1.1.6' + springAiVersion = '1.1.7' // セキュリティ修正: Spring Boot 管理下の推移的依存をパッチ版へ上書き(Dependabot 対応) set('tomcat.version', '10.1.55') // CVE: GHSA-5m62-pw8w-7w9f 他 (Critical) set('netty.version', '4.1.133.Final') // CVE: GHSA-57rv-r2g8-2cj3 他 (High) @@ -37,7 +37,7 @@ dependencyManagement { imports { // 順序重要: 後に宣言した BOM が優先される // spring-cloud-gcp が古い google-cloud-vertexai を引き込むため、spring-ai-bom を後に配置 - mavenBom "com.google.cloud:spring-cloud-gcp-dependencies:7.4.6" + mavenBom "com.google.cloud:spring-cloud-gcp-dependencies:7.4.9" mavenBom "org.springframework.ai:spring-ai-bom:${springAiVersion}" } } @@ -73,8 +73,8 @@ dependencies { } implementation 'commons-io:commons-io:2.22.0' implementation 'org.freemarker:freemarker:2.3.34' - implementation 'com.codeborne:selenide:7.16.1' - implementation 'org.hibernate.orm:hibernate-core:6.6.50.Final' + implementation 'com.codeborne:selenide:7.16.2' + implementation 'org.hibernate.orm:hibernate-core:6.6.52.Final' // implementation 'jakarta.servlet:jakarta.servlet-api:5.0.0' // Managed by Spring Boot implementation 'jakarta.validation:jakarta.validation-api:3.1.1' implementation 'jakarta.persistence:jakarta.persistence-api:3.1.0' // 3.2.xはHibernate 7.0向け、Spring Boot 3.xは3.1.xが必要 @@ -83,7 +83,7 @@ dependencies { // Redis (分散レート制限・セッション管理) implementation 'org.springframework.boot:spring-boot-starter-data-redis:3.5.14' // lettuce-core: Spring Bootの依存関係管理に任せる(6.3.xはSpring Boot 3.5+と互換性なし) - implementation 'io.hypersistence:hypersistence-utils-hibernate-63:3.15.2' + implementation 'io.hypersistence:hypersistence-utils-hibernate-63:3.15.3' // Azure Communication Services (メール送信) implementation 'com.azure:azure-communication-email:1.1.3' @@ -124,7 +124,7 @@ dependencies { implementation 'com.google.cloud:spring-cloud-gcp-starter-storage' // AWS SDK for S3 (Cloudflare R2 互換) - implementation platform('software.amazon.awssdk:bom:2.45.1') + implementation platform('software.amazon.awssdk:bom:2.46.4') implementation 'software.amazon.awssdk:s3' annotationProcessor 'org.springframework.boot:spring-boot-configuration-processor'