Age | Commit message (Collapse) | Author | Files | Lines |
|
|
|
org.springframework.boot.* 3.0.3 -> 3.0.6
CVE-2023-28867
CVE-2023-20873
CVE-2023-1370
CVE-2022-4492
org.springframework.* 6.0.4 -> 6.0.8
CVE-2023-20863
CVE-2023-20861
ch.qos.logback.* 1.4.5 -> 1.4.7
Issue-ID: CCSDK-3841
Change-Id: I857c4f60977c31271c85da3a933c7cb12ed125bd
Signed-off-by: JohnKeeney <john.keeney@est.tech>
|
|
Release initial version of parent poms upgraded to OpenDaylight
Chlorine release versions.
Issue-ID: CCSDK-3813
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: I77565259f58be59fb2b0b09e8535a13de2706f05
|
|
Changes in earlier commit were made directly to a generated pom file
and thus were lost at compile time. This change makes the changes
to the template and properties files used to generate that pom
Issue-ID: CCSDK-3813
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: Ieb3bacfe29d7834bdc049023a2beefbf39d87ab1
|
|
Issue-ID: CCSDK-3813
Signed-off-by: Lukasz Rajewski <lukasz.rajewski@t-mobile.pl>
Change-Id: I266fc92a839d8474847216f2b3b4970c7c217280
|
|
Version 1.25.0 of grpc does not support Apple silicon, causing local
builds to fail on newer Macbooks. This is resolved in verson 1.29.0
Issue-ID: CCSDK-3860
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: Ib76fba09bfd965d115d2697536f7aefef7ed5ff7
|
|
Issue-ID: CCSDK-3813
Change-Id: If23fa807187520ae62091fc2e4156d25b71e8ff3
Signed-off-by: JohnKeeney <john.keeney@est.tech>
|
|
Release version 2.5.3 of ccsdk/parent poms
Issue-ID: CCSDK-3813
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: I22db7f82ccd1a119c7bb9ec849183935aa167d6f
|
|
Build for version 2.5.2 failed, most likely due to earlier partial failure
due to sigul error. Will skip 2.5.2 and create version 2.5.3
Issue-ID: CCSDK-3813
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: I7facdaf9ba5edc2608f83b76488fa522a0590e7a
|
|
Release version 2.5.1 parent poms
Issue-ID: SDNC-1765
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: I0f724b6a2c597499db241c06571ed8d7fdfb9457
|
|
Update dependencies to work with Java 17
Issue-ID: CCSDK-3813
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: I89ac86cf45da8a36a8032607bc203f10f2faab01
|
|
Release initial London version of CCSDK parent poms
Change-Id: Iae15510afe4764caa576b1ab69b296cda8a7a045
Issue-ID: CCSDK-3779
Signed-off-by: Timoney, Dan (dt5972) <dtimoney@att.com>
|
|
jackson-bom -> 2.13.4.2 (via spring-boot-starter:jar:2.6.11) to address CVE-2020-36518 & CVE-2022-42003 & CVE-2022-42004
log4j -> 2.17.2
Issue-ID: CCSDK-3618
Change-Id: Ic1660b18ebc2f9519bcbd5f767a0f22d2a1dd0db
Signed-off-by: JohnKeeney <john.keeney@est.tech>
|
|
Roll master branch numbers to London release numbering
Change-Id: I192be24a3ad662f9a8bc902249c5122d62d5e47e
Issue-ID: CCSDK-3779
Signed-off-by: Timoney, Dan (dt5972) <dtimoney@att.com>
|
|
Release version 2.4.3 of parent poms, containing kotlin
version upgrades
Change-Id: I884f7b9b9ce56331ac4e25f36584686558d442a6
Issue-ID: CCSDK-3771
Signed-off-by: Timoney, Dan (dt5972) <dtimoney@att.com>
|
|
Update kotlin versions in springboot 2.5 and 2.6 parent poms
Change-Id: I9ff9ee224795de252225cc0517bd40b4802b6a7f
Issue-ID: CCSDK-3771
Signed-off-by: Timoney, Dan (dt5972) <dtimoney@att.com>
|
|
Release version 2.4.2 of parent poms
Issue-ID: CCSDK-3754
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: If273a0581fdbe18509169cde4029ba0559960642
|
|
Change-Id: I409979c2bdd7e2e5a36b036be1c04a30116367e9
Signed-off-by: JohnKeeney <john.keeney@est.tech>
Issue-ID: CCSDK-3618
|
|
Release ODL Sulfur SR1 version of parent poms (version 2.4.1)
Issue-ID: CCSDK-3691
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: Icb38ed1bc87e2e8f37050dce6f624f1544b7ab22
|
|
Update versions to address issues in local Sulfur testing
Issue-ID: CCSDK-3691
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: I886ec094c589cc2888a05e7e9d30f99748d27209
|
|
Release initial Phosphorus version of parent poms and roll to next
snapshot in preparation for merging changes for Sulfur
Issue-ID: CCSDK-3691
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: Ia32773724fb8688b745d5bf1ca9758dd60613e2b
|
|
Update springboot 2.6.6 -> 2.6.8
Update spring version 5.3.16 -> 5.3.18
Addresses CVE-2022-24823
Issue-ID: CCSDK-3581
Change-Id: I1546a5f812aacd5843a85fa48f5718ad0901b15b
Signed-off-by: JohnKeeney <john.keeney@est.tech>
|
|
Issue-ID: CCSDK-3629
Signed-off-by: Singal, Kapil (ks220y) <ks220y@att.com>
Change-Id: I0d0bb47e55a1f27131795e609e38c0952e763856
|
|
To address Security Issue CVE-2022-22965
https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcement
Change-Id: Id719b9dc33d774b0d6516cc63ab7830d45deb27a
Signed-off-by: JohnKeeney <john.keeney@est.tech>
Issue-ID: CCSDK-3629
|
|
Update CCSDK versions in parent poms to align with Kohn release
Issue-ID: CCSDK-3641
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: I665ae25005548bb3924695f9a5e30950282c8bee
|
|
Roll versions to next minor release, for ONAP Kohn release
Issue-ID: CCSDK-3623
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: I74834244efa7b470e4737cb6c50fbb3d62e3d9b5
|
|
Release version 2.3.3 parent poms and roll to next snapshot version
Issue-ID: CCSDK-3604
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: Idc4627c2d17711731d374292555bf20c28f2d53d
|
|
Remove nordix repository declaration. Instead, the standard onap-public
repo should be used to resolve nordix version of liquibase.
Issue-ID: CCSDK-3612
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: If24d111330f49dee28855d81ab9a7f6917776957
|
|
Update dependencies for springboot 2.5.10
Issue-ID: CCSDK-3585
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: Iaef2b462dcc687d6e8b4b44ba33f278f4eccd3a1
|
|
Update to springboot version 2.5.10
Issue-ID: CCSDK-3585
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: I1508da2efab6a882dae5421247c8a3a460eb53c9
|
|
Release version 2.3.2 paremt poms, containing fix for log4shell
vulnerability
Issue-ID: CCSDK-3556
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: Ibf7027dfaf03f7cf1b9cb25a760abd303ab5a5e6
|
|
Add explicit dependencies on log4j-core and log4j-api to override
derived version and force 2.17.1
Issue-ID: CCSDK-3556
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: I9e8ebbaaaccad59735236810ad25c9b50ef84322
|
|
Upgrade to log4j2 version 2.17.1 to correct log4shell vulnerability
Issue-ID: CCSDK-3556
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: I61a3fdd9854a1beee70abed1fd8542cdf664756a
|
|
Upgrade to log4j2 2.16.0 to address log4shell vulnerability
Issue-ID: CCSDK-3556
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: I005a2030679172288b8195b72ef804feb4f84386
|
|
Update log4j2 to version 2.16.0 to address new variant of log4shell
Issue-ID: CCSDK-3556
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: I28d4e9657db054edeb4788946c36bd1476fbdf55
|
|
Update log4j version to address known vulnerability
Issue-ID: CCSDK-3556
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: Ie0840a7f45257092c93bd5dbb23d197a1de491b0
|
|
Release Silicon SR2 version (2.3.1) of parent poms.
Issue-ID: CCSDK-3513
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: Ic130c2bbc98f5817bd5848b774bc81e3a695150d
|
|
Release initial Jakarta version of ccsdk/parent. This is needed so
that initial version of ccsdk/sli can be released, which is needed
to resolve issue building dependent repos such as cds.
Issue-ID: CCSDK-3492
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: Icf363da0867defe9aa7a13a1c3b26c1469466137
|
|
Fix range so that snapshots are included
Issue-ID: CCSDK-3470
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: I8a3f59b59d0c9d347a259fa093470371fb169902
|
|
Update versions of dependencies for Jakarta
Issue-ID: CCSDK-3470
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: Iff421b002fd2e6e2f1063667026278d09b9a3e77
|
|
Roll ccsdk/parent master branch numbering to Jakarta
Issue-ID: CCSDK-3470
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: I4f655bf2d63ecb45c28383bdca2aef6344094c54
|
|
Release version 2.2.1 of ccsdk/parent poms
Issue-ID: CCSDK-3444
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: I65ea0c549fd6e8da37cad2d77446c18719c9a69e
|
|
Due to issues in range expansion, version of ccsdk/sli should be set
to static value 1.3.1 for Istanbul
Issue-ID: CCSDK-3444
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: I3ab63166ae51000e58206b795d3dd96f86240e76
|
|
Release version 2.2.0 (initial Istanbul) of parent poms
Issue-ID: CCSDK-3444
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: I0dad067bd08d9f4770a1b54f656c2ee2cefe2578
|
|
Update to use java 11 to compile
Issue-ID: CCSDK-3415
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: I6f60e301c801f44ff811a6dd1cc40ad721bb7fc3
|
|
Update to use APL licensed liquibase distribution provided by CPS project
Issue-ID: CCSDK-3423
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: Ibd5f543f693160e5aed27c2fb4bac4b531f1c557
|
|
Upgrade third party packages to address security vulnerabilities.
Provide new parent pom for spring boot 2.5, which is not
backward compatible with spring boot 2.3
Issue-ID: CCSDK-3415
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: Iffbfffb6709aeec48c35dd604b9293fb3af34a10
|
|
maven-assembly-plugin seems to exclude snapshots when resolving
ranges unless the range explicitly includes a snapshot. Updated
ranges to end in snapshot release to work around this issue.
Issue-ID: CCSDK-3387
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: I443da915e792e153eea55fdb9dc763b68471bb3c
|
|
Update to latest version of spring boot 2.3
Issue-ID: CCSDK-3291
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: Ie475c749fa9e8b58cae2aadbde0e8e9b40790f4d
|
|
Update parent poms to specify CCSDK repo versions using ranges
Issue-ID: CCSDK-3387
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: Ibe503fd109559e36d40fba90feb58dea9d1919ab
|