chore: upgrade spring-boot to 2.7.13 (#4336)

* chore: upgrade spring-boot to 2.7.13 * update cve exclude list
vaadin · Jul 18, 2023 · 9ef0cbd · 9ef0cbd
1 parent bf60fc0
commit 9ef0cbd
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/pom.xml b/pom.xml
@@ -19,7 +19,7 @@
         <maven.compiler.source>11</maven.compiler.source>
         <maven.compiler.target>11</maven.compiler.target>
         <hilla.version>1.3-SNAPSHOT</hilla.version>
-        <spring.boot.version>2.7.12</spring.boot.version>
+        <spring.boot.version>2.7.13</spring.boot.version>
     </properties>
 
     <distributionManagement>

diff --git a/scripts/generateAndCheckSBOM.js b/scripts/generateAndCheckSBOM.js
@@ -41,7 +41,7 @@ const licenseWhiteList = [
 ];
 
 const cveWhiteList = {
-  'pkg:maven/org.springframework/[email protected].27' : ['CVE-2016-1000027'],
+  'pkg:maven/org.springframework/[email protected].28' : ['CVE-2016-1000027'],
   // based on the issue this is not a CVE https://github.com/FasterXML/jackson-databind/issues/3972
   'pkg:maven/com.fasterxml.jackson.core/[email protected]' : ['CVE-2023-35116'],
   'pkg:maven/com.vaadin/[email protected]' : ['CVE-2023-25499', 'CVE-2023-25500']