From 122c8e0a325fd5f3fa5a92f9a4869a4bd02aaa4f Mon Sep 17 00:00:00 2001
From: Hongchol Sinn <hongchol.sinn@broadcom.com>
Date: Wed, 26 Aug 2026 12:31:19 -0700
Subject: [PATCH] remove: dependency version pinning of httpcore5.version to
 5.4.3 - Manually revert https://github.com/cloudfoundry/credhub/pull/1182/. -
 As we have bumped spring-boot to 4.1.1 and its managed dependency version of
 httpcore5.version is 5.4.3.

---
 build.gradle | 2 --
 1 file changed, 2 deletions(-)

diff --git a/build.gradle b/build.gradle
index fac81d9f3..5fc988c2b 100644
--- a/build.gradle
+++ b/build.gradle
@@ -12,7 +12,6 @@ buildscript {
         mariadbJdbcVersion = '2.7.15' // Bumping to v3 breaks some pipeline jobs, so pinning to v2 for now. v2 (current version) is stable and will be supported until about September 2025 (https://mariadb.com/kb/en/about-mariadb-connector-j/).
         grpcVersion = '1.83.0'
         protobufVersion = '4.36.0'
-        httpcore5Version = '5.4.3' // spring-boot 4.1.0 has this pinned at 5.4.2.  5.4.3 fixes CVE-2026-54399.  Can remove this on future spring-boot update.
     }
     repositories {
         def artifactRepoUrl = System.getenv("ARTIFACTORY_URL")
@@ -83,6 +82,5 @@ subprojects {
 // Override spring boot's version dependencies
 ext['kotlin.version'] = "${kotlinVersion}"
 ext['protobuf-java.version'] = "${protobufVersion}"
-ext['httpcore5.version'] = "${httpcore5Version}"
 
 assert JavaVersion.current().isCompatibleWith(JavaVersion.VERSION_25)