chore: 优化子模块引用传递

app/build.gradle

@@ -37,11 +37,9 @@ dependencies {
 
 	// Optional: Doc
 	implementation project(":basic-common:doc")
-	implementation "com.github.xiaoymin:knife4j-openapi3-jakarta-spring-boot-starter:${knife4jOpen3Version}"
 
 	// Optional: Auth
 	implementation project(":basic-auth")
-	implementation "cn.dev33:sa-token-spring-boot3-starter:${saTokenVersion}"
 
 	// Optional: Dict - 数据字典
 	implementation project(":basic-dict")
@@ -51,9 +49,6 @@ dependencies {
 
 	// Optional: Minio S3
 	implementation project(":basic-common:minio")
-	// FIX: minio dep
-	implementation "io.minio:minio:${minioVersion}"
-	implementation "com.squareup.okhttp3:okhttp:${okhttpVersion}"
 	// Optional: 扩展实现在文件上传时对文件进行预处理，依赖 Minio 模块
 	// https://mvnrepository.com/artifact/org.apache.pdfbox/pdfbox
 	implementation "org.apache.pdfbox:pdfbox:${pdfboxVersion}"

basic-auth/build.gradle

+plugins {
+	id 'java-library'
+}
+
 dependencies {
 	implementation project(':basic-common:core')
 	implementation project(':basic-common:util')
@@ -9,7 +13,11 @@ dependencies {
 	implementation "com.github.xiaoymin:knife4j-openapi3-jakarta-spring-boot-starter:${knife4jOpen3Version}"
 
 	// sa-token
-	implementation "cn.dev33:sa-token-spring-boot3-starter:${saTokenVersion}"
+	api("cn.dev33:sa-token-spring-boot3-starter:${saTokenVersion}") {
+		// FIX: 1.33 CVE
+		exclude group: 'org.yaml', module: 'snakeyaml'
+	}
+	implementation "org.yaml:snakeyaml:${snakeyamlVersion}"
 	// Sa-Token 整合 Redis （使用 jackson 序列化方式）
 	implementation "cn.dev33:sa-token-dao-redis-jackson:${saTokenVersion}"
 	implementation 'org.apache.commons:commons-pool2'

basic-common/doc/build.gradle

@@ -6,7 +6,11 @@ dependencies {
 	implementation 'org.springframework.boot:spring-boot-starter-validation'
 
 	// swagger(knife4j)
-	implementation "com.github.xiaoymin:knife4j-openapi3-jakarta-spring-boot-starter:${knife4jOpen3Version}"
+	api("com.github.xiaoymin:knife4j-openapi3-jakarta-spring-boot-starter:${knife4jOpen3Version}") {
+		// FIX: 1.33 CVE
+		exclude group: 'org.yaml', module: 'snakeyaml'
+	}
+	implementation "org.yaml:snakeyaml:${snakeyamlVersion}"
 
 	// hutool-core
 	implementation "cn.hutool:hutool-core:${hutoolVersion}"

basic-common/minio/build.gradle

+plugins {
+	id 'java-library'
+}
+
 dependencies {
 	implementation project(":basic-common:core")
 	implementation project(":basic-common:util")
@@ -9,7 +13,11 @@ dependencies {
 	implementation "com.github.xiaoymin:knife4j-openapi3-jakarta-spring-boot-starter:${knife4jOpen3Version}"
 
 	// minio
-	implementation "io.minio:minio:${minioVersion}"
+	api("io.minio:minio:${minioVersion}") {
+		// FIX: 1.33 CVE
+		exclude group: 'org.yaml', module: 'snakeyaml'
+	}
+	implementation "org.yaml:snakeyaml:${snakeyamlVersion}"
 
 	// hutool
 	implementation "cn.hutool:hutool-core:${hutoolVersion}"

build.gradle

 plugins {
     id 'java'
+    id 'java-library'
     // https://start.spring.io
     id 'org.springframework.boot' version '3.1.0'
     id 'org.graalvm.buildtools.native' version '0.9.20'
@@ -59,6 +60,8 @@ ext {
     // https://central.sonatype.com/artifact/net.bramp.ffmpeg/ffmpeg
     // FIXED: ffmpeg 4.x
     ffmpegWrapperVersion = '0.7.0'
+    // https://central.sonatype.com/artifact/org.yaml/snakeyaml
+    snakeyamlVersion = '2.0'
 }
 
 allprojects {
@@ -76,6 +79,7 @@ allprojects {
 
 subprojects {
     apply plugin: 'java'
+    apply plugin: 'java-library'
     apply plugin: 'org.springframework.boot'
     apply plugin: 'io.spring.dependency-management'
     apply plugin: "com.diffplug.spotless"