From 5d399ddef8962e725e27dc2f71976c6efc6a03e7 Mon Sep 17 00:00:00 2001 From: "QSL\\SumathiT" Date: Fri, 17 Jan 2025 11:43:11 -0800 Subject: [PATCH 1/2] Security: Dependabot findings. --- .github/workflows/on.pr.yml | 3 ++- api/pom.xml | 10 +++++----- 2 files changed, 7 insertions(+), 6 deletions(-) diff --git a/.github/workflows/on.pr.yml b/.github/workflows/on.pr.yml index 4c1f2c158..437585d54 100644 --- a/.github/workflows/on.pr.yml +++ b/.github/workflows/on.pr.yml @@ -21,8 +21,9 @@ jobs: with: fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis - name: Set up JDK 18 - uses: actions/setup-java@v1 + uses: actions/setup-java@v4 with: + distribution: 'corretto' java-version: 18 - uses: actions/cache@v1 with: diff --git a/api/pom.xml b/api/pom.xml index 0e9215c7f..a6d6660be 100644 --- a/api/pom.xml +++ b/api/pom.xml @@ -35,8 +35,8 @@ 4.38.0 2.11.0 1.7.1 - 32.0.1-jre - 2.18.0 + 33.4.0-jre + 2.20.0 @@ -205,7 +205,7 @@ org.flywaydb flyway-core - 8.5.13 + 11.2.0 io.github.resilience4j @@ -265,7 +265,7 @@ org.hibernate.orm.tooling hibernate-enhance-maven-plugin - 6.1.7.Final + 6.6.4.Final org.springframework.boot @@ -357,7 +357,7 @@ org.hibernate.orm.tooling hibernate-enhance-maven-plugin - 6.1.7.Final + 6.6.4.Final From c93dbf1fc3920d6c48cb820489a8bf23c9def56c Mon Sep 17 00:00:00 2001 From: "QSL\\SumathiT" Date: Tue, 21 Jan 2025 09:24:34 -0800 Subject: [PATCH 2/2] Upgrade hibernate, ojdbc11 & log4j version. --- api/pom.xml | 13 ++++--------- 1 file changed, 4 insertions(+), 9 deletions(-) diff --git a/api/pom.xml b/api/pom.xml index a6d6660be..c662009f7 100644 --- a/api/pom.xml +++ b/api/pom.xml @@ -36,7 +36,7 @@ 2.11.0 1.7.1 33.4.0-jre - 2.20.0 + 2.24.3 @@ -101,7 +101,7 @@ com.oracle.database.jdbc ojdbc11 - 21.3.0.0 + 23.6.0.24.10 org.springdoc @@ -231,11 +231,6 @@ com.fasterxml.jackson.datatype jackson-datatype-jsr310 2.15.2 - - - com.fasterxml.jackson.datatype - jackson-datatype-jsr310 - 2.15.2 org.springframework.security @@ -265,7 +260,7 @@ org.hibernate.orm.tooling hibernate-enhance-maven-plugin - 6.6.4.Final + 6.6.5.Final org.springframework.boot @@ -357,7 +352,7 @@ org.hibernate.orm.tooling hibernate-enhance-maven-plugin - 6.6.4.Final + 6.6.5.Final