Skip to content
This repository has been archived by the owner on May 16, 2023. It is now read-only.

Commit

Permalink
Update Spring Boot to 2.7.1 and more (#5)
Browse files Browse the repository at this point in the history 
* Update Spring Boot to 2.7.1
Update Spring Cloud OpenFeign to 3.1.3
Update SpringDoc OpenAPI to 1.6.9
Update Shedlock to 4.37.0
Update Nimbus Jose JWT to 9.23
Update Liquibase to 4.12.0
Update H2 to 2.1.214
Update AWS SDK to 1.12.250
Update CloudFoundry to 2.4.0, 3.70.0, 3.6.2
Update Mapstruct to 1.5.2
Update Surfire Plugin to 3.0.0-M7
Update Maven Compiler Plugin to 3.10.1
Update License Plugin to 4.1
Update OWASP Dependency Check to 7.1.1
Update Asciidoctor Plugin to 2.2.2

* Add OWASP Suppressions

* Add OWASP Suppressions
  • Loading branch information
@f11h
f11h authored Jun 29, 2022
1 parent 0bd39d5 commit b41d500
Show file tree
Hide file tree
Showing 2 changed files with 32 additions and 20 deletions.
12 changes: 12 additions & 0 deletions owasp/suppressions.xml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,19 @@
<suppress>
<notes>Updating of Keycloak Lib is not possible at the moment. Security risk is not affecting CWA components.</notes>
<cve>CVE-2022-1466</cve>
<cve>CVE-2022-1970</cve>
<cve>CVE-2021-20323</cve>
<cve>CVE-2020-14359</cve>
</suppress>

<suppress>
<notes>CVE is matching for Spring Security 5.3.x, but we have 5.7.x</notes>
<cve>CVE-2020-5408</cve>
</suppress>

<suppress>
<notes>CVE is matching for Spring Framework up to 5.3.20, but we have 5.3.21</notes>
<cve>CVE-2016-1000027</cve>
</suppress>

</suppressions>
40 changes: 20 additions & 20 deletions pom.xml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -59,7 +59,7 @@
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-dependencies</artifactId>
<version>2.6.7</version>
<version>2.7.1</version>
<type>pom</type>
<scope>import</scope>
</dependency>
Expand All @@ -73,7 +73,7 @@
<dependency>
<groupId>org.springframework.cloud</groupId>
<artifactId>spring-cloud-starter-openfeign</artifactId>
<version>3.1.1</version>
<version>3.1.3</version>
<exclusions>
<exclusion>
<groupId>commons-io</groupId>
Expand All @@ -84,7 +84,7 @@
<dependency>
<groupId>org.springdoc</groupId>
<artifactId>springdoc-openapi-ui</artifactId>
<version>1.6.8</version>
<version>1.6.9</version>
</dependency>


Expand All @@ -100,12 +100,12 @@
<dependency>
<groupId>net.javacrumbs.shedlock</groupId>
<artifactId>shedlock-spring</artifactId>
<version>4.34.0</version>
<version>4.37.0</version>
</dependency>
<dependency>
<groupId>net.javacrumbs.shedlock</groupId>
<artifactId>shedlock-provider-jdbc-template</artifactId>
<version>4.34.0</version>
<version>4.37.0</version>
</dependency>

<!-- Commons IO -->
Expand Down Expand Up @@ -142,20 +142,20 @@
<dependency>
<groupId>com.nimbusds</groupId>
<artifactId>nimbus-jose-jwt</artifactId>
<version>9.22</version>
<version>9.23</version>
</dependency>


<!-- Persistence -->
<dependency>
<groupId>org.liquibase</groupId>
<artifactId>liquibase-core</artifactId>
<version>4.9.1</version>
<version>4.12.0</version>
</dependency>
<dependency>
<groupId>com.h2database</groupId>
<artifactId>h2</artifactId>
<version>2.1.212</version>
<version>2.1.214</version>
<scope>runtime</scope>
</dependency>

Expand Down Expand Up @@ -239,31 +239,31 @@
<dependency>
<groupId>com.amazonaws</groupId>
<artifactId>aws-java-sdk-s3</artifactId>
<version>1.12.201</version>
<version>1.12.250</version>
</dependency>

<!-- SAP Cloud Foundry -->
<dependency>
<groupId>io.pivotal.cfenv</groupId>
<artifactId>java-cfenv-boot</artifactId>
<version>2.3.0</version>
<version>2.4.0</version>
</dependency>
<dependency>
<groupId>com.sap.cloud.sdk.cloudplatform</groupId>
<artifactId>scp-cf</artifactId>
<version>3.67.0</version>
<version>3.70.0</version>
</dependency>
<dependency>
<groupId>com.sap.hcp.cf.logging</groupId>
<artifactId>cf-java-logging-support-logback</artifactId>
<version>3.6.0</version>
<version>3.6.2</version>
</dependency>

<!-- Mapstruct -->
<dependency>
<groupId>org.mapstruct</groupId>
<artifactId>mapstruct</artifactId>
<version>1.4.2.Final</version><!-- Also update version of lombok in Maven Compiler Plugin -->
<version>1.5.2.Final</version><!-- Also update version of lombok in Maven Compiler Plugin -->
</dependency>
</dependencies>
</dependencyManagement>
Expand All @@ -274,7 +274,7 @@
<plugin>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-maven-plugin</artifactId>
<version>2.6.7</version>
<version>2.7.1</version>
<executions>
<execution>
<goals>
Expand All @@ -288,13 +288,13 @@
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-surefire-plugin</artifactId>
<version>3.0.0-M6</version>
<version>3.0.0-M7</version>
</plugin>

<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-compiler-plugin</artifactId>
<version>3.8.1</version>
<version>3.10.1</version>
<configuration>
<annotationProcessorPaths>
<path>
Expand All @@ -305,7 +305,7 @@
<path>
<groupId>org.mapstruct</groupId>
<artifactId>mapstruct-processor</artifactId>
<version>1.4.2.Final</version>
<version>1.5.2.Final</version>
</path>
</annotationProcessorPaths>
</configuration>
Expand Down Expand Up @@ -358,7 +358,7 @@
<plugin>
<groupId>org.codehaus.mojo</groupId>
<artifactId>license-maven-plugin</artifactId>
<version>2.0.0</version>
<version>4.1</version>
<configuration>
<includes>**/*.java</includes>
<copyrightOwners>${project.organization.name} and all other contributors</copyrightOwners>
Expand All @@ -380,7 +380,7 @@
<plugin>
<groupId>org.owasp</groupId>
<artifactId>dependency-check-maven</artifactId>
<version>7.1.0</version>
<version>7.1.1</version>
<configuration>
<suppressionFile>./owasp/suppressions.xml</suppressionFile>
<failBuildOnAnyVulnerability>true</failBuildOnAnyVulnerability>
Expand All @@ -391,7 +391,7 @@
<plugin>
<groupId>org.asciidoctor</groupId>
<artifactId>asciidoctor-maven-plugin</artifactId>
<version>1.5.8</version>
<version>2.2.2</version>
<dependencies>
<dependency>
<groupId>org.springframework.restdocs</groupId>
Expand Down

0 comments on commit b41d500

Please sign in to comment.