From 292b350f2c5917ddae92e40f5e84d5088f828a4b Mon Sep 17 00:00:00 2001
From: James Agnew <jamesagnew@gmail.com>
Date: Fri, 30 Apr 2021 14:39:16 -0400
Subject: [PATCH] Bump Junit for to avoid OWASP flag (#2618)

---
 pom.xml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/pom.xml b/pom.xml
index 0526a02ad74..494d4f57d1b 100644
--- a/pom.xml
+++ b/pom.xml
@@ -1120,6 +1120,15 @@
 				<artifactId>javax.ws.rs-api</artifactId>
 				<version>2.0.1</version>
 			</dependency>
+			<dependency>
+				<!--
+				We use JUnit 5 in HAPI FHIR, but some libraries still pull in / require JUnit 4
+				(e.g. Testcontainers) so we enforce a current version to avoid OWASP flags
+				-->
+				<groupId>junit</groupId>
+				<artifactId>junit</artifactId>
+				<version>4.13.2</version>
+			</dependency>
 			<dependency>
 				<groupId>io.swagger</groupId>
 				<artifactId>swagger-annotations</artifactId>