From 9528056f1cc7ffb717301c5f1faed4ae28e237ef Mon Sep 17 00:00:00 2001
From: "B. K. Oxley (binkley)" <binkley@alumni.rice.edu>
Date: Sun, 22 Oct 2023 15:38:12 -0500
Subject: [PATCH] Closes #288

It took me a while to finish this CVE convern. I gave a lot of time for
upstream to address the underlying issue.
---
 gradle.properties | 2 --
 pom.xml           | 8 --------
 2 files changed, 10 deletions(-)

diff --git a/gradle.properties b/gradle.properties
index 7d585de7..7d672506 100644
--- a/gradle.properties
+++ b/gradle.properties
@@ -2,8 +2,6 @@
 org.gradle.jvmargs=--add-opens java.base/java.lang=ALL-UNNAMED
 # Versions
 assertJVersion=3.24.2
-# TODO: Update spotbugs for CVE-2022-42920
-bcelVersion=6.7.0
 checkstyleVersion=10.12.4
 dependencyCheckPluginVersion=8.4.2
 findbugsAnnotationsVersion=3.0.1
diff --git a/pom.xml b/pom.xml
index af6d8625..3a2affd7 100644
--- a/pom.xml
+++ b/pom.xml
@@ -56,8 +56,6 @@
     <properties>
         <!-- @formatter:off -->
         <assertj.version>3.24.2</assertj.version>
-        <!-- TODO: Update spotbugs for CVE-2022-42920 -->
-        <bcel.version>6.7.0</bcel.version>
         <buildplan-maven-plugin.version>1.5</buildplan-maven-plugin.version>
         <checkstyle.version>10.12.4</checkstyle.version>
         <dependency-check-maven.version>8.4.2</dependency-check-maven.version>
@@ -370,12 +368,6 @@
                     </plugins>
                 </configuration>
                 <dependencies>
-                    <dependency>
-                        <groupId>org.apache.bcel</groupId>
-                        <artifactId>bcel</artifactId>
-                        <!-- TODO: Update spotbugs for CVE-2022-42920 -->
-                        <version>${bcel.version}</version>
-                    </dependency>
                     <dependency>
                         <groupId>com.github.spotbugs</groupId>
                         <artifactId>spotbugs</artifactId>