summaryrefslogtreecommitdiffstats
path: root/a1-policy-management/pom.xml
diff options
context:
space:
mode:
authorJohnKeeney <john.keeney@est.tech>2022-11-01 18:49:15 +0000
committerJohnKeeney <john.keeney@est.tech>2022-11-01 18:50:56 +0000
commitc9778a709c4ef73dbdebcad43a59838a26026d0e (patch)
treedefeb6c88ab21d3795081bea2162203af3875181 /a1-policy-management/pom.xml
parent6b99dcc7dc6b8b0eb66fbefe2a7e5470cdb6c92e (diff)
Roll version & Update 3PPs
version roll -> 2.5.0-SNAPSHOT jackson-bom -> 2.13.4.2 (via spring-boot-starter:jar:2.6.11) to address CVE-2020-36518 & CVE-2022-42003 & CVE-2022-42004 snakeyaml -> 1.32 (via spring-boot-starter:jar:2.6.11) to address CVE-2022-25857 & CVE-2022-38752 & CVE-2022-38749 & CVE-2022-38751 & CVE-2022-38750 guava -> 31.0.1-jre to partly address CVE-2020-0926 Issue-ID: CCSDK-3618 Change-Id: Ibe428dfb19adfb13f325398c69430334f2dd516c Signed-off-by: JohnKeeney <john.keeney@est.tech>
Diffstat (limited to 'a1-policy-management/pom.xml')
-rw-r--r--a1-policy-management/pom.xml6
1 files changed, 4 insertions, 2 deletions
diff --git a/a1-policy-management/pom.xml b/a1-policy-management/pom.xml
index d47019b6..e34c9cfd 100644
--- a/a1-policy-management/pom.xml
+++ b/a1-policy-management/pom.xml
@@ -24,7 +24,7 @@
<parent>
<groupId>org.onap.ccsdk.parent</groupId>
<artifactId>spring-boot-26-starter-parent</artifactId>
- <version>2.4.2</version>
+ <version>2.5.0-SNAPSHOT</version>
<relativePath/>
</parent>
<groupId>org.onap.ccsdk.oran</groupId>
@@ -40,8 +40,10 @@
<formatter-maven-plugin.version>2.13.0</formatter-maven-plugin.version>
<spotless-maven-plugin.version>2.5.0</spotless-maven-plugin.version>
<commons-io.version>2.11.0</commons-io.version>
+ <guava.version>31.0.1-jre</guava.version>
<docker-maven-plugin>0.30.0</docker-maven-plugin>
<surefire-maven-plugin.version>3.0.0-M5</surefire-maven-plugin.version>
+ <snakeyaml.version>1.32</snakeyaml.version><!-- overrides version included via spring-boot-starter:jar:2.6.11 to address CVE-2022-38752. Remove later if possible -->
<!-- Version must be higher than version 2.19.1 that is defined in the parent pom for JUnit 5 tests to be run. Do not remove! -->
<jacoco-maven-plugin.version>0.8.6</jacoco-maven-plugin.version>
<swagger-codegen-maven-plugin.version>3.0.11</swagger-codegen-maven-plugin.version>
@@ -115,6 +117,7 @@
<dependency>
<groupId>com.google.guava</groupId>
<artifactId>guava</artifactId>
+ <version>${guava.version}</version>
</dependency>
<dependency>
<groupId>com.google.code.gson</groupId>
@@ -223,7 +226,6 @@
<version>${commons-io.version}</version>
<scope>test</scope>
</dependency>
- <!-- https://mvnrepository.com/artifact/com.github.erosb/everit-json-schema -->
<dependency>
<groupId>com.github.erosb</groupId>
<artifactId>everit-json-schema</artifactId>