From 56fb6de5e2bf9bf21ddafbdb40a8b67536392356 Mon Sep 17 00:00:00 2001
From: abbas <abbas.attarwala@wipro.com>
Date: Mon, 29 Aug 2022 09:15:49 +0000
Subject: vulnerability updates for son-handler

Issue-ID: DCAEGEN2-3222
Signed-off-by: abbas <abbas.attarwala@wipro.com>
Change-Id: If7f7f908872163bb8fc73b8dd1342b6c20ca3503
---
 Changelog.md       |  3 +++
 pom.xml            | 14 +++++++-------
 version.properties |  2 +-
 3 files changed, 11 insertions(+), 8 deletions(-)

diff --git a/Changelog.md b/Changelog.md
index 9ff9d6b..5943e70 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -4,6 +4,9 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](http://keepachangelog.com/)
 and this project adheres to [Semantic Versioning](http://semver.org/).
 
+## [2.1.8] - 2022/08/31
+         - [DCAEGEN2-3222](https://jira.onap.org/browse/DCAEGEN2-3222) - dcaegen2-services-son-handler vulnerability updates
+
 ## [2.1.7] - 2021/05/11
          - [DCAEGEN2-3150](https://jira.onap.org/browse/DCAEGEN2-3150) - Fix bug in handling FM notification
 
diff --git a/pom.xml b/pom.xml
index 5365a15..f67a68c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -27,7 +27,7 @@
         <groupId>org.onap.dcaegen2.services.son-handler</groupId>
         <artifactId>son-handler</artifactId>
         <name>dcaegen2-services-son-handler</name>
-        <version>2.1.7-SNAPSHOT</version>
+        <version>2.1.8-SNAPSHOT</version>
 
        <!--parent> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-parent</artifactId>
                 <version>2.0.4.RELEASE</version> </parent -->
@@ -42,7 +42,7 @@
 
         <properties>
                 <sdk.version>1.8.6</sdk.version>
-                <spring.version>5.3.14</spring.version>
+                <spring.version>5.3.20</spring.version>
                 <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
                 <maven.compiler.source>11</maven.compiler.source>
                 <maven.compiler.target>11</maven.compiler.target>
@@ -144,12 +144,12 @@
                 <dependency>
                         <groupId>com.fasterxml.jackson.core</groupId>
                         <artifactId>jackson-core</artifactId>
-                        <version>2.12.6</version>
+                        <version>2.13.3</version>
                 </dependency>
                 <dependency>
                         <groupId>com.fasterxml.jackson.core</groupId>
                         <artifactId>jackson-databind</artifactId>
-                        <version>2.12.6</version>
+                        <version>2.13.3</version>
                 </dependency>
                 <!-- https://mvnrepository.com/artifact/javax.json/javax.json-api -->
                 <dependency>
@@ -171,7 +171,7 @@
                  <dependency>
                         <groupId>org.postgresql</groupId>
                         <artifactId>postgresql</artifactId>
-                        <version>42.2.18</version>
+                        <version>42.3.6</version>
                         </dependency>
                  <dependency>
                         <groupId>org.springframework.boot</groupId>
@@ -270,12 +270,12 @@
             <dependency>
                     <groupId>org.apache.tomcat.embed</groupId>
                     <artifactId>tomcat-embed-core</artifactId>
-                    <version>9.0.50</version>
+                    <version>10.0.21</version>
             </dependency>
             <dependency>
                    <groupId>ch.qos.logback</groupId>
                    <artifactId>logback-core</artifactId>
-                   <version>1.2.10</version>
+                   <version>1.2.11</version>
             </dependency>
         </dependencies>
 
diff --git a/version.properties b/version.properties
index 13675c4..3f0f450 100644
--- a/version.properties
+++ b/version.properties
@@ -20,7 +20,7 @@
 ###############################################################################
 major=2
 minor=1
-patch=7
+patch=8
 base_version=${major}.${minor}.${patch}
 release_version=${base_version}
 snapshot_version=${base_version}-SNAPSHOT
-- 
cgit 1.2.3-korg