Skip to content

Commit

Permalink
CORE-20817: waiver for snyk issues and upgrade to latest version of d…
Browse files Browse the repository at this point in the history
…okka (#1715)

Corda5 Shippable artifacts do not make use of dokka-core, which is where this dependency originates, this is used at compile / build timeonly for Kdoc generation and not shipped in any of our releasable artifacts.
LWogan authored Nov 20, 2024

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
1 parent 43f0687 commit a27afd3
Showing 2 changed files with 13 additions and 4 deletions.
15 changes: 12 additions & 3 deletions .snyk
Original file line number Diff line number Diff line change
@@ -18,7 +18,7 @@ ignore:
temporary files via Kotlin functions with insecure permissions. Corda
does not use any of the vulnerable functions so it not susceptible to
this vulnerability.
expires: 2023-06-19T10:40:55.991Z
expires: 2025-11-18T13:28:02.597Z
created: 2022-09-22T10:40:55.995Z
SNYK-JAVA-COMFASTERXMLJACKSONCORE-3038424:
- '*':
@@ -45,7 +45,7 @@ ignore:
where this dependency originates, this is used at compile / build time
only for Kdoc generation and not shipped in any of our releasable
artifacts.
expires: 2023-06-19T10:40:55.991Z
expires: 2025-06-19T10:40:55.991Z
created: 2022-12-20T10:40:55.995Z
SNYK-JAVA-COMFASTERXMLWOODSTOX-3091135:
- '*':
@@ -54,6 +54,15 @@ ignore:
where this dependency originates, this is used at compile / build time
only for Kdoc generation and not shipped in any of our releasable
artifacts.
expires: 2023-06-19T13:28:02.582Z
expires: 2025-11-19T10:40:55.991Z
created: 2023-03-20T13:28:02.597Z
SNYK-JAVA-COMFASTERXMLJACKSONCORE-7569538:
- '*':
reason: >-
Corda5 Shippable artifacts do not make use of dokka-core, which is
where this dependency originates, this is used at compile / build time
only for Kdoc generation and not shipped in any of our releasable
artifacts.
expires: 2025-11-18T13:28:02.597Z
created: 2024-11-18T13:28:02.597Z
patch: {}
2 changes: 1 addition & 1 deletion gradle/libs.versions.toml
Original file line number Diff line number Diff line change
@@ -26,7 +26,7 @@ mockitoKotlinVersion = "5.2.1"
# Plugins
avroGradleVersion = "1.3.0"
cyclonedxVersion = "1.8.2"
dokkaVersion = "1.9.10"
dokkaVersion = "1.9.20"
detektVersion = "1.23.5"
dependencyCheckVersion = "0.51.0"
gradleDataVersion = "1.12.1"

0 comments on commit a27afd3

Please sign in to comment.