mcobbett 1949 jackson core vuln fix uplift

.gitignore

@@ -19,4 +19,5 @@ lib/
 dependency-reduced-pom.xml
 
 # Don't check-in IDE specific files if we can help it.
-.vscode
+.vscode
+temp/

build-locally.sh

@@ -19,6 +19,7 @@ export ORIGINAL_DIR=$(pwd)
 
 cd "${BASEDIR}/.."
 WORKSPACE_DIR=$(pwd)
+cd $BASEDIR
 
 
 #-----------------------------------------------------------------------------------------                   
@@ -118,7 +119,7 @@ while [ "$1" != "" ]; do
     case $1 in
         -p | --passphrase )
                                 shift
-                                export pg_passphrase="$1"
+                                export gpg_passphrase="$1"
                                 ;;
         -h | --help )           usage
                                 exit
@@ -142,6 +143,8 @@ if [[ "${gpg_passphrase}" == "" ]]; then
     fi
 fi
 
+info "gpg passphrase is $gpg_passphrase"
+
 
 #-----------------------------------------------------------------------------------------                   
 # Main logic.
@@ -164,24 +167,23 @@ else
     info "Over-ridden by caller using the LOGS_DIR variable."
 fi
 
+export LOGS_DIR=$BASEDIR/temp
+rm -fr $BASEDIR/temp
+mkdir -p $BASEDIR/temp
+
 info "Using source code at ${source_dir}"
 cd ${BASEDIR}/${source_dir}
 
 log_file=${LOGS_DIR}/${project}.txt
 info "Log will be placed at ${log_file}"
 
 h2 "Building..."
-cat << EOF
 
-Using this command:
+cmd="mvn clean install -Dgpg.passphrase=${gpg_passphrase}"
 
-mvn clean install -Dgpg.passphrase=\$GPG_PASSPHRASE
-2>&1 >> ${log_file}
-
-EOF
 
-mvn clean install -Dgpg.passphrase=${gpg_passphrase} \
-2>&1 >> ${log_file}
+info "Using command: $cmd"
+$cmd 2>&1 >> ${log_file}
 rc=$? ; if [[ "${rc}" != "0" ]]; then error "Failed to build ${project}" ; info "See log file at ${log_file}" ; exit 1 ; fi
 success "Built OK"
 

com.auth0.jwt/pom.xml

@@ -6,11 +6,11 @@
 	<parent>
 		<groupId>dev.galasa</groupId>
 		<artifactId>galasa-wrapping-parent</artifactId>
-		<version>0.35.0</version>
+		<version>0.37.0</version>
 	</parent>
 
 	<artifactId>com.auth0.jwt</artifactId>
-	<version>4.4.0</version>
+	<version>4.4.1</version>
 	<packaging>bundle</packaging>
 
 	<name>Galasa wrapped version of auth0 JWT</name>

com.google.gson/pom.xml

@@ -6,7 +6,7 @@
 	<parent>
 		<groupId>dev.galasa</groupId>
 		<artifactId>galasa-wrapping-parent</artifactId>
-		<version>0.35.0</version>
+		<version>0.37.0</version>
 	</parent>
 
 	<artifactId>gson</artifactId>

com.jcraft.jsch/pom.xml

@@ -6,7 +6,7 @@
 	<parent>
 		<groupId>dev.galasa</groupId>
 		<artifactId>galasa-wrapping-parent</artifactId>
-		<version>0.35.0</version>
+		<version>0.37.0</version>
 	</parent>
 
 	<artifactId>com.jcraft.jsch</artifactId>

io.grpc.java/pom.xml

@@ -6,7 +6,7 @@
 	<parent>
 		<groupId>dev.galasa</groupId>
 		<artifactId>galasa-wrapping-parent</artifactId>
-		<version>0.35.0</version>
+		<version>0.37.0</version>
 	</parent>
 
 	<artifactId>io.grpc.java</artifactId>

jakarta.transaction/pom.xml

@@ -6,7 +6,7 @@
 	<parent>
 		<groupId>dev.galasa</groupId>
 		<artifactId>galasa-wrapping-parent</artifactId>
-		<version>0.35.0</version>
+		<version>0.37.0</version>
 	</parent>
 
 	<artifactId>jta</artifactId>

kafka.clients/pom.xml

@@ -6,7 +6,7 @@
 	<parent>
 		<groupId>dev.galasa</groupId>
 		<artifactId>galasa-wrapping-parent</artifactId>
-		<version>0.35.0</version>
+		<version>0.37.0</version>
 	</parent>
 
 	<artifactId>kafka.clients</artifactId>

pom.xml

@@ -5,7 +5,7 @@
 
 	<groupId>dev.galasa</groupId>
 	<artifactId>galasa-wrapping-parent</artifactId>
-	<version>0.35.0</version>
+	<version>0.37.0</version>
 	<packaging>pom</packaging>
 
 	<name>Galasa OSGi Wrapping</name>
@@ -29,8 +29,8 @@
 	</developers>
 
 	<modules>
-		<module>com.jcraft.jsch</module>
 		<module>com.auth0.jwt</module>
+		<module>com.jcraft.jsch</module>
 		<module>com.google.gson</module>
 		<module>jakarta.transaction</module>
 		<module>io.grpc.java</module>