Update resilience and spring boot version (#783)

finos · Nov 27, 2023 · fcbddcf · fcbddcf
1 parent 6bf82d4
commit fcbddcf
Show file tree

Hide file tree

Showing 3 changed files with 14 additions and 6 deletions.
diff --git a/allow-list.xml b/allow-list.xml
@@ -57,8 +57,9 @@
       <notes><![CDATA[
           No fix available
           ]]></notes>
-      <gav>org.json:json:20230227</gav>
+      <gav>org.json:json:20231013</gav>
       <cve>CVE-2022-45688</cve>
+      <cve>CVE-2023-5072</cve>
     </suppress>
     <suppress>
         <notes><![CDATA[
@@ -67,4 +68,11 @@
         <gav>net.minidev:json-smart:2.4.8</gav>
         <cve>CVE-2023-1370</cve>
     </suppress>
+    <suppress>
+        <notes><![CDATA[
+          No fix available
+          ]]></notes>
+        <gav>io.netty:netty-bom:4.1.101.Final</gav>
+        <cve>CVE-2023-4586</cve>
+    </suppress>
 </suppressions>
diff --git a/symphony-bdk-bom/build.gradle b/symphony-bdk-bom/build.gradle
@@ -16,9 +16,9 @@ repositories {
 
 dependencies {
     // import Spring Boot's BOM
-    api platform('org.springframework.boot:spring-boot-dependencies:3.0.7')
+    api platform('org.springframework.boot:spring-boot-dependencies:3.0.13')
     // import Jackson's BOM
-    api platform('com.fasterxml.jackson:jackson-bom:2.15.0')
+    api platform('com.fasterxml.jackson:jackson-bom:2.15.3')
     // import Jersey's BOM
     api platform('org.glassfish.jersey:jersey-bom:3.1.2')
     // import Log4j's BOM
@@ -64,7 +64,7 @@ dependencies {
         api 'org.bouncycastle:bcpkix-jdk18on:1.74'
         api 'com.google.code.findbugs:jsr305:3.0.2'
 
-        api 'io.github.resilience4j:resilience4j-retry:1.7.1'
+        api 'io.github.resilience4j:resilience4j-retry:2.1.0'
 
         api 'io.swagger:swagger-annotations:1.6.0'
         api 'org.openapitools:jackson-databind-nullable:0.2.2'
@@ -79,7 +79,7 @@ dependencies {
         api 'org.junit.jupiter:junit-jupiter-api:5.9.2'
         api 'org.junit.jupiter:junit-jupiter-engine:5.9.2'
         api 'com.tngtech.archunit:archunit-junit5:0.22.0'
-        api 'org.mock-server:mockserver-netty:5.14.0'
+        api 'org.mock-server:mockserver-netty:5.15.0'
         api 'org.mockito:mockito-core:4.11.0'
         api 'org.mockito:mockito-junit-jupiter:4.11.0'
         api 'org.assertj:assertj-core:3.24.2'

diff --git a/symphony-bdk-examples/bdk-multi-instances-example/build.gradle b/symphony-bdk-examples/bdk-multi-instances-example/build.gradle
@@ -11,7 +11,7 @@ dependencies {
     implementation project(':symphony-bdk-core')
     implementation 'org.slf4j:slf4j-api'
 
-    implementation 'com.hazelcast:hazelcast:5.3.0'
+    implementation 'com.hazelcast:hazelcast:5.3.6'
 
     runtimeOnly 'ch.qos.logback:logback-classic'
 }