Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

updated dependencies, fixing vulnerabilities #166

Merged
merged 1 commit into from
Sep 19, 2024
Merged

updated dependencies, fixing vulnerabilities #166

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 11 additions & 11 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,24 +1,24 @@
# current master
* Update dependencies
* Spring 5.3.36
* AWS 1.12.739
* Jetty 9.4.53.v20231009
* Spring 5.3.39
* AWS 1.12.772
* Jetty 9.4.56.v20240826
* Joda-Time 2.12.7
* Log4J 2.23.1
* ActiveMQ 5.16.7
* Apache CXF 3.5.8
* Apache CXF 3.5.9
* JSON Small and Fast Parser 2.5.1
* Jackson 2.17.1
* Guava 33.2.1-jre
* Jackson 2.17.2
* Guava 33.3.0-jre
* Hazelcast 5.3.7
* Swagger 2.2.22
* Liquibase 4.28.0
* Mongo Java Driver 4.11.2
* Mongock 5.4.2
* Mongo Java Driver 4.11.4
* Mongock 5.4.4
* Bouncycastle Provider 1.78.1
* Nimbus JOSE+JWT 9.40
* Nimbus JOSE+JWT 9.41
* Commons Codec 1.17.0
* Junit 5.10.2
* Junit 5.10.3
* Bson 2.15.1
* Concordion 4.0.1
* Removed (unused) cglib from dvalin-jaxrs
Expand All @@ -29,7 +29,7 @@
* Complete overhaul for entity handling
* The old functionality is still available with the mongodb-legacy library
* Breaking: Removed Junit 5 Vintage engine and Junit 4 (can be added in projects that need it)
* Fixed vulnerabilities: CVE-2023-52428(nimbus-jose-jwt), CVE-2024-29857,CVE-2024-30171,CVE-2024-30172,CVE-2024-34447 (bouncycastle), CVE-2024-28752 (Apache CXF)
* Fixed vulnerabilities: CVE-2023-52428(nimbus-jose-jwt), CVE-2024-29857,CVE-2024-30171,CVE-2024-30172,CVE-2024-34447 (bouncycastle), CVE-2024-28752,CVE-2024-29736 (Apache CXF), CVE-2024-38808 (Spring Framework)
* Corrected the use of @Nullable and @Nonnull annotations on created ivos and events, especially on the generated builders
* Add support for h2 embedded database

Expand Down
2 changes: 1 addition & 1 deletion jaxrs-jwtauth/pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@
<dependency>
<groupId>com.nimbusds</groupId>
<artifactId>nimbus-jose-jwt</artifactId>
<version>9.40</version>
<version>9.41</version>
</dependency>


Expand Down
18 changes: 9 additions & 9 deletions pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -52,23 +52,23 @@
</contributors>
<properties>
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
<org.springframework.version>5.3.36</org.springframework.version>
<jackson.version>2.17.1</jackson.version>
<org.springframework.version>5.3.39</org.springframework.version>
<jackson.version>2.17.2</jackson.version>
<joda.time.version>2.12.7</joda.time.version>
<slf4j.version>1.7.36</slf4j.version>
<log4j.version>2.23.1</log4j.version>
<junit.version>5.10.2</junit.version>
<aws.version>1.12.739</aws.version>
<junit.version>5.10.3</junit.version>
<aws.version>1.12.772</aws.version>
<activemq.version>5.16.7</activemq.version>
<cxf.version>3.5.8</cxf.version>
<jetty.version>9.4.54.v20240208</jetty.version>
<guava.version>33.2.1-jre</guava.version>
<cxf.version>3.5.9</cxf.version>
<jetty.version>9.4.56.v20240826</jetty.version>
<guava.version>33.3.0-jre</guava.version>
<hibernate.version>5.6.14.Final</hibernate.version>
<http.version>2.2</http.version>
<velocity.version>2.3</velocity.version>
<bson.version>2.15.1</bson.version>
<mongo.version>4.11.2</mongo.version>
<mongock.version>5.4.2</mongock.version>
<mongo.version>4.11.4</mongo.version>
<mongock.version>5.4.4</mongock.version>
<mongo-java-server.version>1.43.0</mongo-java-server.version>
<xdocreport.version>2.0.4</xdocreport.version>
<mockito-core.version>4.11.0</mockito-core.version>
Expand Down
Loading