[MSCOSDU-1894] upgrade reactor-netty, log4j2, okhttp and okio

Change details

Common code

• upgraded log4j2 version to 2.22.0

Azure

• upgraded reactor-netty related dependencies to version 1.1.14
• upgraded nimbus-jose-jwt-azure to 9.30.2.
• remediate container_scanning flagged vulnerabilities log4j2,okio,okhttp

Changes in:

• GCP
• Azure
• AWS
• IBM

assigned to @vidya

added 1 commit

• f154a721 - [MSCOSDU-1894] fix json-smart

Compare with previous version

added 1 commit

• 400ee791 - [MSCOSDU-1894] upgrade log4j

Compare with previous version

added 1 commit

• ec416b84 - [MSCOSDU-1894] exclude logback vulnerability

Compare with previous version

added 1 commit

• b50b6b96 - [MSCOSDU-1894] upgrade azure vulnerabilities

Compare with previous version

changed milestone to %M23 - Release 0.26

added Azure MRDependencies Upgrade Vulnerability Management labels

added 1 commit

• 25356ad6 - [MSCOSDU-1894] update notice

Compare with previous version

marked this merge request as ready

changed title from Draft: [MSCOSDU-1894] fix logback vulnerability to [MSCOSDU-1894] upgrade reactor-netty, log4j2, okhttp and okio

changed the description

added Common Code label

changed the description

approved this merge request

requested review from @thulasi_dass

requested review from @Srinivasan_Narayanan

Hello @Srinivasan_Narayanan @chad @vikasrana

• Kindly review and approve the vulnerability remediation MR
• Pipeline all jobs are passed except the IBM-test which is unrelated to this change.

cc: @thulasi_dass

requested review from @chad

approved this merge request

approved this merge request