From 0d602fe3f2166ea6f2aaafd37d9743754e966fc8 Mon Sep 17 00:00:00 2001
From: Guillaume Caillet <cailletg@amazon.com>
Date: Mon, 30 Sep 2024 15:17:44 +0000
Subject: [PATCH] Remediating Vulnerabilities
---
NOTICE | 2 ++
pom.xml | 4 ++--
provider/schema-aws/pom.xml | 2 +-
schema-core-plus/pom.xml | 4 ++--
4 files changed, 7 insertions(+), 5 deletions(-)
diff --git a/NOTICE b/NOTICE
index 44144a5b1..ba2384f02 100644
--- a/NOTICE
+++ b/NOTICE
@@ -86,6 +86,8 @@ The following software have components provided under the terms of this license:
- GSON extensions to the Google HTTP Client Library for Java. (from https://repo1.maven.org/maven2/com/google/http-client/google-http-client-gson)
- Google APIs Client Library for Java (from https://repo1.maven.org/maven2/com/google/api-client/google-api-client)
- Google App Engine extensions to the Google HTTP Client Library for Java. (from https://repo1.maven.org/maven2/com/google/http-client/google-http-client-appengine)
+- Google Auth Library for Java - Credentials (from https://repo1.maven.org/maven2/com/google/auth/google-auth-library-credentials)
+- Google Auth Library for Java - OAuth2 HTTP (from https://repo1.maven.org/maven2/com/google/auth/google-auth-library-oauth2-http)
- Google Cloud Core (from https://github.com/googleapis/google-cloud-java/tree/master/google-cloud-clients/google-cloud-core, https://github.com/googleapis/java-core, https://repo1.maven.org/maven2/com/google/cloud/google-cloud-core)
- Google Cloud Core HTTP (from https://github.com/GoogleCloudPlatform/google-cloud-java/tree/master/google-cloud-core-http, https://github.com/googleapis/google-cloud-java/tree/master/google-cloud-clients/google-cloud-core-http, https://github.com/googleapis/java-core, https://repo1.maven.org/maven2/com/google/cloud/google-cloud-core-http)
- Google Cloud Core gRPC (from https://github.com/googleapis/google-cloud-java/tree/master/google-cloud-clients/google-cloud-core-grpc, https://github.com/googleapis/java-core, https://repo1.maven.org/maven2/com/google/cloud/google-cloud-core-grpc)
diff --git a/pom.xml b/pom.xml
index 638329aa9..093a55e9a 100644
--- a/pom.xml
+++ b/pom.xml
@@ -17,8 +17,8 @@
<json-smart.version>2.5.0</json-smart.version>
<spring-boot-maven-plugin.version>3.2.2</spring-boot-maven-plugin.version>
<openapi.version>2.5.0</openapi.version>
- <spring-framework-version>6.1.10</spring-framework-version>
- <spring-security.version>6.3.1</spring-security.version>
+ <spring-framework-version>6.1.13</spring-framework-version>
+ <spring-security.version>6.3.3</spring-security.version>
<spring-boot.version>3.3.1</spring-boot.version>
</properties>
diff --git a/provider/schema-aws/pom.xml b/provider/schema-aws/pom.xml
index b9236a819..68959a969 100644
--- a/provider/schema-aws/pom.xml
+++ b/provider/schema-aws/pom.xml
@@ -62,7 +62,7 @@
<dependency>
<groupId>org.opengroup.osdu.core.aws</groupId>
<artifactId>os-core-lib-aws</artifactId>
- <version>0.27.0-rc3</version>
+ <version>3.0.1</version>
</dependency>
<dependency>
diff --git a/schema-core-plus/pom.xml b/schema-core-plus/pom.xml
index ef0eb5a1a..09f713456 100644
--- a/schema-core-plus/pom.xml
+++ b/schema-core-plus/pom.xml
@@ -25,7 +25,7 @@
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-dependencies</artifactId>
- <version>3.3.1</version>
+ <version>3.3.3</version>
<type>pom</type>
<scope>import</scope>
</dependency>
@@ -158,7 +158,7 @@
<dependency>
<groupId>com.google.cloud</groupId>
<artifactId>google-cloud-datastore</artifactId>
- <version>2.17.5</version>
+ <version>2.21.3</version>
</dependency>
<dependency>
--
GitLab