From e02eb8881580cf348026e68ec7a7c6666207e77b Mon Sep 17 00:00:00 2001
From: "aikido-autofix[bot]"
 <119856028+aikido-autofix[bot]@users.noreply.github.com>
Date: Thu, 17 Sep 2026 23:21:31 +0000
Subject: [PATCH] fix(security): update dependencies

---
 agent/build.gradle | 10 ++++++++--
 build.gradle       |  4 ++--
 2 files changed, 10 insertions(+), 4 deletions(-)

diff --git a/agent/build.gradle b/agent/build.gradle
index 2e4e217cd..bff4aa1a8 100644
--- a/agent/build.gradle
+++ b/agent/build.gradle
@@ -9,9 +9,15 @@ dependencies {
     // Compile only for interface types :
     compileOnly 'jakarta.servlet:jakarta.servlet-api:6.1.0' // spring 3 -> jakarta
     compileOnly 'javax.servlet:javax.servlet-api:4.0.1' // spring 2 -> javax
-    compileOnly 'io.projectreactor.netty:reactor-netty-http:1.2.1' // For Spring Webflux
+    compileOnly 'io.projectreactor.netty:reactor-netty-http:1.3.7' // For Spring Webflux
     compileOnly 'io.javalin:javalin:6.4.0'
-    compileOnly 'org.springframework:spring-web:5.3.20'
+    compileOnly 'org.springframework:spring-web:7.0.9'
+
+    constraints {
+        compileOnly('org.jetbrains.kotlin:kotlin-stdlib:2.1.0') { because 'CVE fix: AIKIDO-2026-550292' }
+        compileOnly('org.jetbrains.kotlin:kotlin-stdlib-jdk7:2.1.0') { because 'CVE fix: AIKIDO-2026-550292' }
+        compileOnly('org.jetbrains.kotlin:kotlin-stdlib-jdk8:2.1.0') { because 'CVE fix: AIKIDO-2026-550292' }
+    }
 
     testImplementation 'org.junit.jupiter:junit-jupiter:5.9.2'
     testRuntimeOnly 'org.junit.jupiter:junit-jupiter-engine:5.9.2'
diff --git a/build.gradle b/build.gradle
index fa76e36db..426d0e3b1 100644
--- a/build.gradle
+++ b/build.gradle
@@ -12,7 +12,7 @@ subprojects {
         options.encoding = 'UTF-8'
     }
     java {
-        sourceCompatibility = JavaVersion.VERSION_16
-        targetCompatibility = JavaVersion.VERSION_16
+        sourceCompatibility = JavaVersion.VERSION_17
+        targetCompatibility = JavaVersion.VERSION_17
     }
 }