Update Dependencies (#207)

eu-digital-green-certificates · Sep 26, 2022 · 1d7baa9 · 1d7baa9
1 parent d7e1079
commit 1d7baa9
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 18 deletions.
diff --git a/owasp/suppressions.xml b/owasp/suppressions.xml
@@ -19,7 +19,10 @@
     <suppress>
         <notes>Only affecting example code shipped with tomcat.</notes>
         <cve>CVE-2022-34305</cve>
-
+    </suppress>
+    <suppress>
+        <notes>Bug is fixed with SnameYAML 1.32, but CVE Matcher is invalid</notes>
+        <cve>CVE-2022-38752</cve>
     </suppress>
 
 </suppressions>
diff --git a/pom.xml b/pom.xml
@@ -7,7 +7,7 @@
     <parent>
         <groupId>org.springframework.boot</groupId>
         <artifactId>spring-boot-starter-parent</artifactId>
-        <version>2.7.3</version>
+        <version>2.7.4</version>
         <relativePath/>
     </parent>
 
@@ -46,16 +46,15 @@
         <owasp.version>7.1.2</owasp.version>
         <spring.security.version>5.7.3</spring.security.version>
         <lombok.version>1.18.24</lombok.version>
-        <liquibase.version>4.15.0</liquibase.version>
+        <liquibase.version>4.16.1</liquibase.version>
         <springdoc.version>1.6.11</springdoc.version>
         <mapstruct.version>1.5.2.Final</mapstruct.version>
         <bcpkix.version>1.70</bcpkix.version>
         <semver4j.version>3.1.0</semver4j.version>
         <json-schema.version>1.14.1</json-schema.version>
-        <shedlock.version>4.41.0</shedlock.version>
-        <spring.cloud.version>2021.0.3</spring.cloud.version>
+        <shedlock.version>4.42.0</shedlock.version>
+        <spring.cloud.version>2021.0.4</spring.cloud.version>
         <h2.version>2.1.214</h2.version>
-        <hibernate.version>5.6.11.Final</hibernate.version>
         <dgc.lib.version>1.3.1</dgc.lib.version>
         <!-- plugins -->
         <plugin.maven-assembly.version>3.4.2</plugin.maven-assembly.version>
@@ -178,17 +177,11 @@
         <dependency>
             <groupId>org.yaml</groupId>
             <artifactId>snakeyaml</artifactId>
-            <version>1.31</version>
+            <version>1.32</version>
         </dependency>
         <dependency>
             <groupId>org.springframework.boot</groupId>
             <artifactId>spring-boot-starter-data-jpa</artifactId>
-            <exclusions>
-                <exclusion>
-                    <groupId>org.hibernate</groupId>
-                    <artifactId>hibernate-core</artifactId>
-                </exclusion>
-            </exclusions>
         </dependency>
         <dependency>
             <groupId>org.springframework.boot</groupId>
@@ -245,11 +238,6 @@
             <version>${h2.version}</version>
             <scope>runtime</scope>
         </dependency>
-        <dependency>
-            <groupId>org.hibernate</groupId>
-            <artifactId>hibernate-core</artifactId>
-            <version>${hibernate.version}</version>
-        </dependency>
         <dependency>
             <groupId>org.mapstruct</groupId>
             <artifactId>mapstruct</artifactId>