From a1803b2a420c73c740699e0f3138ef8ff0ff258e Mon Sep 17 00:00:00 2001 From: NikhilMM89 <117143852+NikhilMM89@users.noreply.github.com> Date: Wed, 7 Jun 2023 22:03:25 -0700 Subject: [PATCH 1/4] Update pom.xml Update spring security version to 5.7.8 as per depend Bot suggestion --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 26a568a..7f0f27c 100644 --- a/pom.xml +++ b/pom.xml @@ -33,7 +33,7 @@ ${springboot.version} 5.3.21 - 5.7.1 + 5.7.8 5.3.21 3.1.3 From 6b3f8ddc6e85a44a2c6a9f667cc146b6b2fe5002 Mon Sep 17 00:00:00 2001 From: NikhilMM89 <117143852+NikhilMM89@users.noreply.github.com> Date: Wed, 7 Jun 2023 22:12:18 -0700 Subject: [PATCH 2/4] Update pom.xml Updated CXF core version to 3.5.5 based on Dependabot alert --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 7f0f27c..b603207 100644 --- a/pom.xml +++ b/pom.xml @@ -253,7 +253,7 @@ org.apache.cxf cxf-core - 3.5.1 + 3.5.5 From 44f2832844c5804a95f33462bb67feed5d45663c Mon Sep 17 00:00:00 2001 From: NikhilMM89 <117143852+NikhilMM89@users.noreply.github.com> Date: Wed, 7 Jun 2023 22:17:15 -0700 Subject: [PATCH 3/4] Update pom.xml changed the version for Jackson-databind from 2.13.3 to 2.13.4.2 --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index b603207..36ad38b 100644 --- a/pom.xml +++ b/pom.xml @@ -37,7 +37,7 @@ 5.3.21 3.1.3 - 2.13.3 + 2.13.4.2 1.18.22 4.13.2 1.7.30 From d7bb1236c153202216dff22173cbfe06fdaf72b8 Mon Sep 17 00:00:00 2001 From: NikhilMM89 <117143852+NikhilMM89@users.noreply.github.com> Date: Fri, 9 Jun 2023 11:48:58 -0700 Subject: [PATCH 4/4] Update Pom.xml hardcoded jackson-databind to 2.13.4.2 changed jackson-version to 2.13.4 --- pom.xml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pom.xml b/pom.xml index 36ad38b..33e6eff 100644 --- a/pom.xml +++ b/pom.xml @@ -37,7 +37,7 @@ 5.3.21 3.1.3 - 2.13.4.2 + 2.13.4 1.18.22 4.13.2 1.7.30 @@ -79,7 +79,7 @@ com.fasterxml.jackson.core jackson-databind - ${jackson.version} + 2.13.4.2