Changing Version of Transitive Dependency of a Plugin

Hello,

I am trying to use the PMD plugin for gradle. However, this plugin uses a version of commons-io that gets flagged by XRAY internally. I would like to change the version of commons-io that is used. I have managed to get it working in everything except the plugin. I know that plugins happen very early so is this even possible?

Thanks for any help you can provide.

Is this simply not possible?