Skip to content

Commit 6fd46b5

Browse files
snyk-botsnyk-bot
committed
fix: java/serving/pom.xml & java/pom.xml to reduce vulnerabilities
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEOAUTHCLIENT-2807808 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-8055227 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-8055228 - https://snyk.io/vuln/SNYK-JAVA-ORGYAML-3152153 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-3167772 - https://snyk.io/vuln/SNYK-JAVA-ORGAPACHETHRIFT-1074898 - https://snyk.io/vuln/SNYK-JAVA-IONETTY-6483812 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLECODEGSON-1730327 - https://snyk.io/vuln/SNYK-JAVA-COMSQUAREUPOKHTTP3-2958044 - https://snyk.io/vuln/SNYK-JAVA-IOGRPC-571957 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-3040284 - https://snyk.io/vuln/SNYK-JAVA-JUNIT-1017047
1 parent ae2a521 commit 6fd46b5

2 files changed

Lines changed: 9 additions & 9 deletions

File tree

‎java/pom.xml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -41,9 +41,9 @@
4141
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
4242
<project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
4343

44-
<grpc.version>1.30.2</grpc.version>
44+
<grpc.version>1.53.0</grpc.version>
4545
<protoc.version>3.12.2</protoc.version>
46-
<protobuf.version>3.16.1</protobuf.version>
46+
<protobuf.version>3.25.5</protobuf.version>
4747
<com.google.cloud.version>1.111.1</com.google.cloud.version>
4848
<io.prometheus.version>0.8.0</io.prometheus.version>
4949
<byte-buddy.version>1.9.10</byte-buddy.version>
@@ -61,7 +61,7 @@
6161
<swagger.core.version>1.5.24</swagger.core.version>
6262
<okhttp.version>3.14.7</okhttp.version>
6363
<commons.lang3.version>3.10</commons.lang3.version>
64-
<jackson.version>2.14.0</jackson.version>
64+
<jackson.version>2.15.0</jackson.version>
6565
<javax.xml.bind.version>2.3.1</javax.xml.bind.version>
6666
<javax.annotation.version>1.3.2</javax.annotation.version>
6767
<javax.validation.version>2.0.1.Final</javax.validation.version>
@@ -300,7 +300,7 @@
300300
<excludes>
301301
<exclude>src/main/java/**/BatchLoadsWithResult.java</exclude>
302302
</excludes>
303-
<removeUnusedImports />
303+
<removeUnusedImports/>
304304
</java>
305305
<scala>
306306
<licenseHeader>
@@ -365,7 +365,7 @@
365365
<requireJavaVersion>
366366
<version>[11.0,)</version>
367367
</requireJavaVersion>
368-
<reactorModuleConvergence />
368+
<reactorModuleConvergence/>
369369
</rules>
370370
</configuration>
371371
</execution>
@@ -376,7 +376,7 @@
376376
</goals>
377377
<configuration>
378378
<rules>
379-
<banDuplicatePomDependencyVersions />
379+
<banDuplicatePomDependencyVersions/>
380380
</rules>
381381
</configuration>
382382
</execution>

‎java/serving/pom.xml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -126,7 +126,7 @@
126126
<dependency>
127127
<groupId>com.azure</groupId>
128128
<artifactId>azure-storage-blob</artifactId>
129-
<version>12.25.2</version>
129+
<version>12.26.1</version>
130130
</dependency>
131131
<dependency>
132132
<groupId>com.azure</groupId>
@@ -192,7 +192,7 @@
192192
<dependency>
193193
<groupId>io.jaegertracing</groupId>
194194
<artifactId>jaeger-client</artifactId>
195-
<version>1.3.2</version>
195+
<version>1.8.1</version>
196196
</dependency>
197197
<dependency>
198198
<groupId>io.opentracing</groupId>
@@ -240,7 +240,7 @@
240240
<dependency>
241241
<groupId>com.google.cloud</groupId>
242242
<artifactId>google-cloud-storage</artifactId>
243-
<version>1.118.0</version>
243+
<version>2.43.1</version>
244244
</dependency>
245245

246246
<dependency>

0 commit comments

Comments
 (0)