From 9e7ed21f15587aa84ec4e4234c322286ef667686 Mon Sep 17 00:00:00 2001
From: Dan Timoney <dtimoney@att.com>
Date: Wed, 23 Sep 2020 13:36:08 -0400
Subject: Update third party dependencies

Updated the following dependencies based on guidance from SECCOM:

    com.fasterxml.jackson.core : jackson-databind : 2.9.8 -> 2.11.0
    org.springframework : spring-web : 4.3.22.RELEASE -> 5.2.7.RELEASE
    org.springframework : spring-webmvc : 4.3.22.RELEASE -> 5.2.7.RELEASE
    com.mchange : c3p0 : 0.9.5.3 -> 0.9.5.5

Also, updated jsp tag library from javax.servlet:jstl:1.2 to org.glassfish.web:javax.servlet.jsp.jstl:1.2.5 to remediate vulnerability.

Change-Id: I48c5bc6944eab469c120b7aae8876721b989f443
Issue-ID: CCSDK-2855
Signed-off-by: Dan Timoney <dtimoney@att.com>
---
 ccsdk-app-common/pom.xml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

(limited to 'ccsdk-app-common')

diff --git a/ccsdk-app-common/pom.xml b/ccsdk-app-common/pom.xml
index 95abf22..d87dbb7 100644
--- a/ccsdk-app-common/pom.xml
+++ b/ccsdk-app-common/pom.xml
@@ -6,19 +6,19 @@
 	<parent>
 		<groupId>org.onap.ccsdk.dashboard</groupId>
 		<artifactId>ccsdk-app-parent</artifactId>
-		<version>1.4.0-SNAPSHOT</version>
+		<version>1.4.1-SNAPSHOT</version>
 	</parent>
 
 	<groupId>org.onap.ccsdk.dashboard</groupId>
 	<artifactId>ccsdk-app-common</artifactId>
-	<version>1.4.0-SNAPSHOT</version>
+	<version>1.4.1-SNAPSHOT</version>
 	<packaging>jar</packaging>
 	<name>DCAE Dashboard common</name>
 	<description>CCSDK Dashboard common Java code</description>
 
 	<properties>
 		<encoding>UTF-8</encoding>
-		<springframework.version>4.3.22.RELEASE</springframework.version>
+		<springframework.version>5.2.7.RELEASE</springframework.version>
 		<hibernate.version>4.3.11.Final</hibernate.version>
 		<eelf.version>1.0.0</eelf.version>
 		<epsdk.version>2.6.0</epsdk.version>
@@ -27,7 +27,7 @@
 		<releaseNexusPath>content/repositories/releases/</releaseNexusPath>
 		<stagingNexusPath>/content/repositories/staging/</stagingNexusPath>
 		<skipTests>false</skipTests>
-		<jackson.version>2.9.8</jackson.version>
+		<jackson.version>2.11.0</jackson.version>
 		<sonar.coverage.jacoco.xmlReportPaths> 
 			${project.reporting.outputDirectory}/jacoco-ut/jacoco.xml
     	</sonar.coverage.jacoco.xmlReportPaths>
@@ -241,7 +241,7 @@
 		<dependency>
 			<groupId>com.mchange</groupId>
 			<artifactId>c3p0</artifactId>
-			<version>0.9.5.3</version>
+			<version>0.9.5.5</version>
 		</dependency>
 		<dependency>
 			<groupId>javax.servlet</groupId>
-- 
cgit