SDI-318 Declare bom correctly with the dependencyManagement plugin

See this thread: jfrog/build-info#198 (comment)
ministryofjustice · Dec 12, 2022 · d187592 · d187592 · tim-str · Jul 28, 2023
1 parent 9c8ca87
commit d187592
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/hmpps-sqs-spring-boot-autoconfigure/build.gradle.kts b/hmpps-sqs-spring-boot-autoconfigure/build.gradle.kts
@@ -20,9 +20,15 @@ ext["snakeyaml.version"] = "1.33"
 // Pinned to counter various CVEs. Please remove once Spring Boot brings in at least this version.
 ext["spring-security.version"] = "5.7.5"
 
+dependencyManagement {
+  imports {
+    mavenBom("software.amazon.awssdk:bom:2.18.28")
+  }
+}
+
 dependencies {
   implementation("com.amazonaws:amazon-sqs-java-messaging-lib:2.0.1")
-  implementation(platform("software.amazon.awssdk:bom:2.18.28"))
+  // implementation(platform("software.amazon.awssdk:bom:2.18.28"))
   implementation("software.amazon.awssdk:sns")
   implementation("org.springframework.boot:spring-boot-starter-web")
   implementation("org.springframework.boot:spring-boot-starter-webflux")