fix remaining vulnerabilities in server image (open-metadata#13662)

gorgias · Oct 20, 2023 · eb9c7f6 · eb9c7f6
1 parent c3f2895
commit eb9c7f6
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 3 deletions.
diff --git a/openmetadata-service/pom.xml b/openmetadata-service/pom.xml
@@ -16,7 +16,7 @@
     <sonar.coverage.jacoco.xmlReportPaths>${project.basedir}/target/site/jacoco-aggregate/jacoco.xml</sonar.coverage.jacoco.xmlReportPaths>
     <sonar.tests>${project.basedir}/src/test/java</sonar.tests>
     <org.testcontainers.version>1.19.1</org.testcontainers.version>
-    <awssdk.version>2.21.0</awssdk.version>
+    <awssdk.version>2.21.4</awssdk.version>
     <expiring.map.version>0.5.11</expiring.map.version>
     <java.saml>2.9.0</java.saml>
     <quartz.version>2.3.2</quartz.version>

diff --git a/pom.xml b/pom.xml
@@ -78,7 +78,8 @@
     <!-- Upgrading slf4j causes dropwizard issues -->
     <slf4j.version>1.7.36</slf4j.version>
     <jackson.version>2.15.3</jackson.version>
-    <dropwizard.version>2.1.6</dropwizard.version>
+    <dropwizard.version>2.1.8</dropwizard.version>
+    <dropwizard-jdbi3.version>2.1.6</dropwizard-jdbi3.version>
     <diffMatch.version>1.0</diffMatch.version>
     <jersey-bom.version>2.40</jersey-bom.version>
     <javax.ws.rs-api.version>2.1.1</javax.ws.rs-api.version>
@@ -228,7 +229,7 @@
       <dependency>
         <groupId>io.dropwizard</groupId>
         <artifactId>dropwizard-jdbi3</artifactId>
-        <version>${dropwizard.version}</version>
+        <version>${dropwizard-jdbi3.version}</version>
       </dependency>
       <dependency>
         <groupId>org.jdbi</groupId>