aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorvasraz <vasyl.razinkov@est.tech>2021-05-24 19:06:50 +0100
committerVasyl Razinkov <vasyl.razinkov@est.tech>2021-05-24 18:07:35 +0000
commitec0ce1278407471d01543467fc9e46880bab76e6 (patch)
tree883e84277dd9a63af409dd43b8a778018329c5d5
parentdba0c14a975d7c93cb5562da566542d98a836367 (diff)
Fix dependency vulnerabilities
Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Change-Id: I165351142363f9fc201bac85b78f6ac5730c9e72 Issue-ID: SDC-3572
-rw-r--r--sdc-workflow-designer-be/pom.xml45
1 files changed, 39 insertions, 6 deletions
diff --git a/sdc-workflow-designer-be/pom.xml b/sdc-workflow-designer-be/pom.xml
index e7be72bf..9bd1f2e9 100644
--- a/sdc-workflow-designer-be/pom.xml
+++ b/sdc-workflow-designer-be/pom.xml
@@ -1,7 +1,7 @@
<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0"
- xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
- xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
+ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+ xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
<modelVersion>4.0.0</modelVersion>
@@ -14,11 +14,13 @@
</parent>
<properties>
- <spring.boot.version>2.3.10.RELEASE</spring.boot.version>
+ <spring.boot.version>2.3.11.RELEASE</spring.boot.version>
+ <org.springframework.version>5.2.15.RELEASE</org.springframework.version>
<mapstruct.version>1.3.1.Final</mapstruct.version>
<lombok.version>1.18.0</lombok.version>
<springfox.version>3.0.0</springfox.version>
<jaxb.api.version>2.3.0</jaxb.api.version>
+ <org.glassfish.version>3.0.3</org.glassfish.version>
</properties>
<dependencyManagement>
@@ -35,6 +37,16 @@
<dependencies>
<dependency>
+ <groupId>org.glassfish</groupId>
+ <artifactId>jakarta.el</artifactId>
+ <version>${org.glassfish.version}</version>
+ </dependency>
+ <dependency>
+ <groupId>org.springframework</groupId>
+ <artifactId>spring-web</artifactId>
+ <version>${org.springframework.version}</version>
+ </dependency>
+ <dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-web</artifactId>
<exclusions>
@@ -42,15 +54,31 @@
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-tomcat</artifactId>
</exclusion>
+ <exclusion>
+ <groupId>org.springframework</groupId>
+ <artifactId>spring-web</artifactId>
+ </exclusion>
</exclusions>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-jetty</artifactId>
+ <exclusions>
+ <exclusion>
+ <groupId>org.glassfish</groupId>
+ <artifactId>jakarta.el</artifactId>
+ </exclusion>
+ </exclusions>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-validation</artifactId>
+ <exclusions>
+ <exclusion>
+ <groupId>org.glassfish</groupId>
+ <artifactId>jakarta.el</artifactId>
+ </exclusion>
+ </exclusions>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
@@ -76,6 +104,10 @@
<artifactId>asm-tree</artifactId>
<groupId>org.ow2.asm</groupId>
</exclusion>
+ <exclusion>
+ <groupId>com.github.jnr</groupId>
+ <artifactId>jnr-posix</artifactId>
+ </exclusion>
</exclusions>
</dependency>
<dependency>
@@ -217,7 +249,7 @@
</exclusion>
</exclusions>
</dependency>
- <dependency>
+ <dependency>
<groupId>javax.xml.bind</groupId>
<artifactId>jaxb-api</artifactId>
<version>${jaxb.api.version}</version>
@@ -229,7 +261,7 @@
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-compiler-plugin</artifactId>
- <version>3.5.1</version>
+ <version>3.8.1</version>
</plugin>
<plugin>
<groupId>org.springframework.boot</groupId>
@@ -255,8 +287,9 @@
<build>
<plugins>
<plugin>
+ <groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-resources-plugin</artifactId>
- <version>2.6</version>
+ <version>3.2.0</version>
<executions>
<execution>
<id>copy-resources-docker</id>