From c87c710f791ac3084e84665ddef2381feff68985 Mon Sep 17 00:00:00 2001
From: Andy Wilkinson <andy.wilkinson@broadcom.com>
Date: Fri, 5 Jan 2024 11:41:47 +0000
Subject: [PATCH] Prohibit upgrades to HttpClient5 5.3

Closes gh-39007
---
 spring-boot-project/spring-boot-dependencies/build.gradle | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle
index 74927f78fd..70fe374a2d 100644
--- a/spring-boot-project/spring-boot-dependencies/build.gradle
+++ b/spring-boot-project/spring-boot-dependencies/build.gradle
@@ -443,6 +443,10 @@ bom {
 		}
 	}
 	library("HttpClient5", "5.2.3") {
+		prohibit {
+			versionRange "[5.3]"
+			because "it can NPE when discarding a connection (https://issues.apache.org/jira/browse/HTTPCLIENT-2313)"
+		}
 		group("org.apache.httpcomponents.client5") {
 			modules = [
 				"httpclient5",