Skip to content
This repository was archived by the owner on Jun 4, 2024. It is now read-only.

Commit dbcb90e

Browse files
Update dependencies. Resolve issue CVE-2023-5072. (#101)
* Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.5.0 to 3.6.0 (#90) Bumps [org.apache.maven.plugins:maven-javadoc-plugin](https://github.com/apache/maven-javadoc-plugin) from 3.5.0 to 3.6.0. - [Release notes](https://github.com/apache/maven-javadoc-plugin/releases) - [Commits](apache/maven-javadoc-plugin@maven-javadoc-plugin-3.5.0...maven-javadoc-plugin-3.6.0) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-javadoc-plugin dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump uk.org.webcompere:system-stubs-jupiter from 2.1.1 to 2.1.2 (#92) Bumps [uk.org.webcompere:system-stubs-jupiter](https://github.com/webcompere/system-stubs) from 2.1.1 to 2.1.2. - [Release notes](https://github.com/webcompere/system-stubs/releases) - [Changelog](https://github.com/webcompere/system-stubs/blob/main/History.md) - [Commits](webcompere/system-stubs@system-stubs-parent-2.1.1...system-stubs-parent-2.1.2) --- updated-dependencies: - dependency-name: uk.org.webcompere:system-stubs-jupiter dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump uk.org.webcompere:system-stubs-core from 2.1.1 to 2.1.2 (#91) Bumps [uk.org.webcompere:system-stubs-core](https://github.com/webcompere/system-stubs) from 2.1.1 to 2.1.2. - [Release notes](https://github.com/webcompere/system-stubs/releases) - [Changelog](https://github.com/webcompere/system-stubs/blob/main/History.md) - [Commits](webcompere/system-stubs@system-stubs-parent-2.1.1...system-stubs-parent-2.1.2) --- updated-dependencies: - dependency-name: uk.org.webcompere:system-stubs-core dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump org.apache.maven.plugins:maven-shade-plugin from 3.5.0 to 3.5.1 (#94) Bumps [org.apache.maven.plugins:maven-shade-plugin](https://github.com/apache/maven-shade-plugin) from 3.5.0 to 3.5.1. - [Release notes](https://github.com/apache/maven-shade-plugin/releases) - [Commits](apache/maven-shade-plugin@maven-shade-plugin-3.5.0...maven-shade-plugin-3.5.1) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-shade-plugin dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump actions/checkout from 3 to 4 (#93) Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v3...v4) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Update Maven Wrapper to 3.9.4 * Update Maven Enforcer Plugin to 3.4.1 * Bump org.mockito:mockito-junit-jupiter from 5.5.0 to 5.6.0 (#98) Bumps [org.mockito:mockito-junit-jupiter](https://github.com/mockito/mockito) from 5.5.0 to 5.6.0. - [Release notes](https://github.com/mockito/mockito/releases) - [Commits](mockito/mockito@v5.5.0...v5.6.0) --- updated-dependencies: - dependency-name: org.mockito:mockito-junit-jupiter dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump org.mockito:mockito-core from 5.5.0 to 5.6.0 (#97) Bumps [org.mockito:mockito-core](https://github.com/mockito/mockito) from 5.5.0 to 5.6.0. - [Release notes](https://github.com/mockito/mockito/releases) - [Commits](mockito/mockito@v5.5.0...v5.6.0) --- updated-dependencies: - dependency-name: org.mockito:mockito-core dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump uk.org.webcompere:system-stubs-core from 2.1.2 to 2.1.3 (#96) Bumps [uk.org.webcompere:system-stubs-core](https://github.com/webcompere/system-stubs) from 2.1.2 to 2.1.3. - [Release notes](https://github.com/webcompere/system-stubs/releases) - [Changelog](https://github.com/webcompere/system-stubs/blob/main/History.md) - [Commits](webcompere/system-stubs@system-stubs-parent-2.1.2...system-stubs-parent-2.1.3) --- updated-dependencies: - dependency-name: uk.org.webcompere:system-stubs-core dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump uk.org.webcompere:system-stubs-jupiter from 2.1.2 to 2.1.3 (#95) Bumps [uk.org.webcompere:system-stubs-jupiter](https://github.com/webcompere/system-stubs) from 2.1.2 to 2.1.3. - [Release notes](https://github.com/webcompere/system-stubs/releases) - [Changelog](https://github.com/webcompere/system-stubs/blob/main/History.md) - [Commits](webcompere/system-stubs@system-stubs-parent-2.1.2...system-stubs-parent-2.1.3) --- updated-dependencies: - dependency-name: uk.org.webcompere:system-stubs-jupiter dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * POM: replace explicit versions with environment variables * POM: remove an unused environment variable * Bump org.json:json from 20230618 to 20231013 (#99) Bumps [org.json:json](https://github.com/douglascrockford/JSON-java) from 20230618 to 20231013. - [Release notes](https://github.com/douglascrockford/JSON-java/releases) - [Changelog](https://github.com/stleary/JSON-java/blob/master/docs/RELEASES.md) - [Commits](https://github.com/douglascrockford/JSON-java/commits) --- updated-dependencies: - dependency-name: org.json:json dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump org.jacoco:jacoco-maven-plugin from 0.8.10 to 0.8.11 (#100) Bumps [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) from 0.8.10 to 0.8.11. - [Release notes](https://github.com/jacoco/jacoco/releases) - [Commits](jacoco/jacoco@v0.8.10...v0.8.11) --- updated-dependencies: - dependency-name: org.jacoco:jacoco-maven-plugin dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent 47b109e commit dbcb90e

File tree

4 files changed

+18
-16
lines changed

4 files changed

+18
-16
lines changed

.github/workflows/codeql.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424

2525
steps:
2626
- name: Checkout repository
27-
uses: actions/checkout@v3
27+
uses: actions/checkout@v4
2828

2929
# Initializes the CodeQL tools for scanning.
3030
- name: Initialize CodeQL

.mvn/wrapper/maven-wrapper.properties

+1-1
Original file line numberDiff line numberDiff line change
@@ -14,5 +14,5 @@
1414
# KIND, either express or implied. See the License for the
1515
# specific language governing permissions and limitations
1616
# under the License.
17-
distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.2/apache-maven-3.9.2-bin.zip
17+
distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.4/apache-maven-3.9.4-bin.zip
1818
wrapperUrl=https://repo.maven.apache.org/maven2/org/apache/maven/wrapper/maven-wrapper/3.2.0/maven-wrapper-3.2.0.jar

json-logger/pom.xml

+1-1
Original file line numberDiff line numberDiff line change
@@ -54,7 +54,7 @@
5454
<dependency>
5555
<artifactId>json</artifactId>
5656
<groupId>org.json</groupId>
57-
<version>20230618</version>
57+
<version>20231013</version>
5858
</dependency>
5959
<!-- test -->
6060
<dependency>

pom.xml

+15-13
Original file line numberDiff line numberDiff line change
@@ -109,7 +109,7 @@
109109
</execution>
110110
</executions>
111111
<groupId>org.apache.maven.plugins</groupId>
112-
<version>3.5.0</version>
112+
<version>3.5.1</version>
113113
</plugin>
114114
<plugin>
115115
<artifactId>maven-failsafe-plugin</artifactId>
@@ -205,7 +205,7 @@
205205
</execution>
206206
</executions>
207207
<groupId>org.jacoco</groupId>
208-
<version>0.8.10</version>
208+
<version>0.8.11</version>
209209
</plugin>
210210
<plugin>
211211
<artifactId>maven-source-plugin</artifactId>
@@ -270,7 +270,7 @@
270270
</execution>
271271
</executions>
272272
<groupId>org.apache.maven.plugins</groupId>
273-
<version>3.4.0</version>
273+
<version>3.4.1</version>
274274
</plugin>
275275
<plugin>
276276
<artifactId>maven-clean-plugin</artifactId>
@@ -335,31 +335,31 @@
335335
<artifactId>junit-jupiter-api</artifactId>
336336
<groupId>org.junit.jupiter</groupId>
337337
<scope>test</scope>
338-
<version>5.10.0</version>
338+
<version>${junit-jupiter.version}</version>
339339
</dependency>
340340
<dependency>
341341
<artifactId>junit-jupiter-engine</artifactId>
342342
<groupId>org.junit.jupiter</groupId>
343343
<scope>test</scope>
344-
<version>5.10.0</version>
344+
<version>${junit-jupiter.version}</version>
345345
</dependency>
346346
<dependency>
347347
<artifactId>junit-jupiter-params</artifactId>
348348
<groupId>org.junit.jupiter</groupId>
349349
<scope>test</scope>
350-
<version>5.10.0</version>
350+
<version>${junit-jupiter.version}</version>
351351
</dependency>
352352
<dependency>
353353
<artifactId>mockito-core</artifactId>
354354
<groupId>org.mockito</groupId>
355355
<scope>test</scope>
356-
<version>5.5.0</version>
356+
<version>${mockito.version}</version>
357357
</dependency>
358358
<dependency>
359359
<artifactId>mockito-junit-jupiter</artifactId>
360360
<groupId>org.mockito</groupId>
361361
<scope>test</scope>
362-
<version>5.5.0</version>
362+
<version>${mockito.version}</version>
363363
</dependency>
364364
<dependency>
365365
<artifactId>hamcrest</artifactId>
@@ -371,13 +371,13 @@
371371
<artifactId>system-stubs-core</artifactId>
372372
<groupId>uk.org.webcompere</groupId>
373373
<scope>test</scope>
374-
<version>2.1.1</version>
374+
<version>${system-stubs.version}</version>
375375
</dependency>
376376
<dependency>
377377
<artifactId>system-stubs-jupiter</artifactId>
378378
<groupId>uk.org.webcompere</groupId>
379379
<scope>test</scope>
380-
<version>2.1.1</version>
380+
<version>${system-stubs.version}</version>
381381
</dependency>
382382
</dependencies>
383383
</dependencyManagement>
@@ -576,13 +576,15 @@
576576
<changelist>-SNAPSHOT</changelist>
577577
<github.release.url>https://github.com/bot-by/slf4j-aws-lambda/releases</github.release.url>
578578
<gitlab.release.url>https://gitlab.com/bot-by/slf4j-aws-lambda/-/releases</gitlab.release.url>
579-
<javadoc-plugin.version>3.5.0</javadoc-plugin.version>
579+
<javadoc-plugin.version>3.6.0</javadoc-plugin.version>
580+
<junit-jupiter.version>5.10.0</junit-jupiter.version>
581+
<mockito.version>5.6.0</mockito.version>
580582
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
581583
<project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
582-
<propertiesEncoding>ISO-8859-1</propertiesEncoding>
583-
<revision>1.1.0</revision>
584+
<revision>1.0.2</revision>
584585
<sha1/>
585586
<slf4j.version>2.0.9</slf4j.version>
587+
<system-stubs.version>2.1.3</system-stubs.version>
586588
</properties>
587589
<scm>
588590
<connection>scm:git:https://gitlab.com/bot-by/slf4j-aws-lambda.git</connection>

0 commit comments

Comments
 (0)