update the version of a couple vulnerable dependencies (#3775)

Co-authored-by: Sam Balco <[email protected]> Co-authored-by: devops <[email protected]> Co-authored-by: rv-jenkins <[email protected]>
runtimeverification · Nov 1, 2023 · 12f92c2 · 12f92c2
1 parent c523139
commit 12f92c2
Show file tree

Hide file tree

Showing 5 changed files with 318 additions and 293 deletions.
diff --git a/flake.lock b/flake.lock
diff --git a/flake.nix b/flake.nix
@@ -11,7 +11,7 @@
     nixpkgs.follows = "haskell-backend/nixpkgs";
     flake-utils.url = "github:numtide/flake-utils";
     mavenix = {
-      url = "github:nix-community/mavenix";
+      url = "github:goodlyrottenapple/mavenix";
       inputs.nixpkgs.follows = "haskell-backend/nixpkgs";
       inputs.utils.follows = "flake-utils";
     };
@@ -144,6 +144,7 @@
             ${pkgs.nix}/bin/nix-build --no-out-link -E 'import ./nix/flake-compat-k-unwrapped.nix' \
               || echo "^~~~ expected error"
 
+            export PATH="${pkgs.gnused}/bin:$PATH"
             ${pkgs.mavenix-cli}/bin/mvnix-update -l ./nix/mavenix.lock -E 'import ./nix/flake-compat-k-unwrapped.nix'
           '';
 

diff --git a/kernel/pom.xml b/kernel/pom.xml
@@ -27,7 +27,7 @@
     <dependency>
       <groupId>org.bouncycastle</groupId>
       <artifactId>bcprov-jdk15on</artifactId>
-      <version>1.67</version>
+      <version>1.69</version>
     </dependency>
     <dependency>
       <groupId>com.google.inject</groupId>
@@ -91,12 +91,12 @@
     <dependency>
       <groupId>org.apache.commons</groupId>
       <artifactId>commons-collections4</artifactId>
-      <version>4.1</version>
+      <version>4.3</version>
     </dependency>
     <dependency>
       <groupId>commons-codec</groupId>
       <artifactId>commons-codec</artifactId>
-      <version>1.10</version>
+      <version>1.13</version>
     </dependency>
     <dependency>
       <groupId>net.sf.jung</groupId>
@@ -171,7 +171,7 @@
     <dependency>
       <groupId>com.vladsch.flexmark</groupId>
       <artifactId>flexmark-all</artifactId>
-      <version>0.60.2</version>
+      <version>0.64.6</version>
     </dependency>
   </dependencies>
 

diff --git a/kore/pom.xml b/kore/pom.xml
@@ -23,7 +23,7 @@
     <dependency>
       <groupId>com.google.guava</groupId>
       <artifactId>guava</artifactId>
-      <version>30.0-jre</version>
+      <version>32.1.3-jre</version>
     </dependency>
     <dependency>
       <groupId>org.pcollections</groupId>