Merge branch 'main' into deps/gh_action_v3

eu-digital-green-certificates · Mar 15, 2024 · 3ab1406 · 3ab1406
2 parents b01d31e + 2467056
commit 3ab1406
Show file tree

Hide file tree

Showing 4 changed files with 122 additions and 109 deletions.
diff --git a/.gitignore b/.gitignore
@@ -44,3 +44,4 @@ build/
 
 certs/*
 .DS_Store
+pom.xml.versionsBackup
diff --git a/THIRD-PARTY.md b/THIRD-PARTY.md
@@ -11,23 +11,23 @@ ThirdParty Licenses
 
 | Dependency | License |
 | --- | --- |
-| ch.qos.logback:logback-classic:1.4.6 | Eclipse Public License - v 1.0 GNU Lesser General Public License |
-| ch.qos.logback:logback-core:1.4.6 | Eclipse Public License - v 1.0 GNU Lesser General Public License |
+| ch.qos.logback:logback-classic:1.4.7 | Eclipse Public License - v 1.0 GNU Lesser General Public License |
+| ch.qos.logback:logback-core:1.4.7 | Eclipse Public License - v 1.0 GNU Lesser General Public License |
 | com.damnhandy:handy-uri-templates:2.1.8 | The Apache Software License, Version 2.0 |
 | com.fasterxml:classmate:1.5.1 | Apache License, Version 2.0 |
-| com.fasterxml.jackson.core:jackson-annotations:2.14.2 | The Apache Software License, Version 2.0 |
-| com.fasterxml.jackson.core:jackson-core:2.14.2 | The Apache Software License, Version 2.0 |
-| com.fasterxml.jackson.core:jackson-databind:2.14.2 | The Apache Software License, Version 2.0 |
-| com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:2.14.2 | The Apache Software License, Version 2.0 |
-| com.fasterxml.jackson.datatype:jackson-datatype-jdk8:2.14.2 | The Apache Software License, Version 2.0 |
-| com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.14.2 | The Apache Software License, Version 2.0 |
-| com.fasterxml.jackson.module:jackson-module-parameter-names:2.14.2 | The Apache Software License, Version 2.0 |
-| com.github.everit-org.json-schema:org.everit.json.schema:1.14.1 | Apache License, Version 2.0 |
+| com.fasterxml.jackson.core:jackson-annotations:2.15.2 | The Apache Software License, Version 2.0 |
+| com.fasterxml.jackson.core:jackson-core:2.15.2 | The Apache Software License, Version 2.0 |
+| com.fasterxml.jackson.core:jackson-databind:2.15.2 | The Apache Software License, Version 2.0 |
+| com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:2.15.2 | The Apache Software License, Version 2.0 |
+| com.fasterxml.jackson.datatype:jackson-datatype-jdk8:2.15.2 | The Apache Software License, Version 2.0 |
+| com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.15.2 | The Apache Software License, Version 2.0 |
+| com.fasterxml.jackson.module:jackson-module-parameter-names:2.15.2 | The Apache Software License, Version 2.0 |
+| com.github.everit-org.json-schema:org.everit.json.schema:1.14.2 | Apache License, Version 2.0 |
 | com.github.peteroupc:numbers:1.8.2 | CC0-1.0 |
 | com.google.re2j:re2j:1.6 | Go License |
 | com.h2database:h2:2.1.214 | EPL 1.0 MPL 2.0 |
 | com.jayway.jsonpath:json-path:2.7.0 | The Apache Software License, Version 2.0 |
-| com.mysql:mysql-connector-j:8.0.32 | The GNU General Public License, v2 with Universal FOSS Exception, v1.0 |
+| com.mysql:mysql-connector-j:8.0.33 | The GNU General Public License, v2 with Universal FOSS Exception, v1.0 |
 | com.opencsv:opencsv:5.7.1 | Apache 2 |
 | com.sun.istack:istack-commons-runtime:4.1.1 | Eclipse Distribution License - v 1.0 |
 | com.upokecenter:cbor:4.5.2 | CC0-1.0 |
@@ -37,22 +37,21 @@ ThirdParty Licenses
 | commons-collections:commons-collections:3.2.2 | Apache License, Version 2.0 |
 | commons-digester:commons-digester:2.1 | The Apache Software License, Version 2.0 |
 | commons-fileupload:commons-fileupload:1.5 | Apache-2.0 |
-| commons-io:commons-io:2.11.0 | Apache License, Version 2.0 |
+| commons-io:commons-io:2.13.0 | Apache-2.0 |
 | commons-logging:commons-logging:1.2 | The Apache Software License, Version 2.0 |
 | commons-validator:commons-validator:1.7 | Apache License, Version 2.0 |
-| io.github.classgraph:classgraph:4.8.149 | The MIT License (MIT) |
-| io.github.openfeign:feign-core:12.1 | The Apache Software License, Version 2.0 |
-| io.github.openfeign:feign-httpclient:12.1 | The Apache Software License, Version 2.0 |
-| io.github.openfeign:feign-slf4j:12.1 | The Apache Software License, Version 2.0 |
+| io.github.openfeign:feign-core:12.3 | The Apache Software License, Version 2.0 |
+| io.github.openfeign:feign-httpclient:12.3 | The Apache Software License, Version 2.0 |
+| io.github.openfeign:feign-slf4j:12.3 | The Apache Software License, Version 2.0 |
 | io.github.openfeign.form:feign-form:3.8.0 | The Apache Software License, Version 2.0 |
 | io.github.openfeign.form:feign-form-spring:3.8.0 | The Apache Software License, Version 2.0 |
-| io.micrometer:micrometer-commons:1.10.5 | The Apache Software License, Version 2.0 |
-| io.micrometer:micrometer-core:1.10.5 | The Apache Software License, Version 2.0 |
-| io.micrometer:micrometer-observation:1.10.5 | The Apache Software License, Version 2.0 |
-| io.swagger.core.v3:swagger-annotations:2.2.7 | Apache License 2.0 |
-| io.swagger.core.v3:swagger-core:2.2.7 | Apache License 2.0 |
-| io.swagger.core.v3:swagger-models:2.2.7 | Apache License 2.0 |
-| jakarta.activation:jakarta.activation-api:2.1.1 | EDL 1.0 |
+| io.micrometer:micrometer-commons:1.10.7 | The Apache Software License, Version 2.0 |
+| io.micrometer:micrometer-core:1.10.7 | The Apache Software License, Version 2.0 |
+| io.micrometer:micrometer-observation:1.10.7 | The Apache Software License, Version 2.0 |
+| io.swagger.core.v3:swagger-annotations-jakarta:2.2.9 | Apache License 2.0 |
+| io.swagger.core.v3:swagger-core-jakarta:2.2.9 | Apache License 2.0 |
+| io.swagger.core.v3:swagger-models-jakarta:2.2.9 | Apache License 2.0 |
+| jakarta.activation:jakarta.activation-api:2.1.2 | EDL 1.0 |
 | jakarta.annotation:jakarta.annotation-api:2.1.1 | EPL 2.0 GPL2 w/ CPE |
 | jakarta.inject:jakarta.inject-api:2.0.0 | The Apache Software License, Version 2.0 |
 | jakarta.persistence:jakarta.persistence-api:3.1.0 | Eclipse Distribution License v. 1.0 Eclipse Public License v. 2.0 |
@@ -64,11 +63,11 @@ ThirdParty Licenses
 | joda-time:joda-time:2.10.2 | Apache 2 |
 | net.bytebuddy:byte-buddy:1.12.23 | Apache License, Version 2.0 |
 | net.bytebuddy:byte-buddy-agent:1.12.23 | Apache License, Version 2.0 |
-| net.javacrumbs.shedlock:shedlock-core:5.1.0 | The Apache Software License, Version 2.0 |
-| net.javacrumbs.shedlock:shedlock-provider-jdbc-template:5.1.0 | The Apache Software License, Version 2.0 |
-| net.javacrumbs.shedlock:shedlock-spring:5.1.0 | The Apache Software License, Version 2.0 |
-| net.minidev:accessors-smart:2.4.9 | The Apache Software License, Version 2.0 |
-| net.minidev:json-smart:2.4.10 | The Apache Software License, Version 2.0 |
+| net.javacrumbs.shedlock:shedlock-core:5.4.0 | The Apache Software License, Version 2.0 |
+| net.javacrumbs.shedlock:shedlock-provider-jdbc-template:5.4.0 | The Apache Software License, Version 2.0 |
+| net.javacrumbs.shedlock:shedlock-spring:5.4.0 | The Apache Software License, Version 2.0 |
+| net.minidev:accessors-smart:2.4.11 | The Apache Software License, Version 2.0 |
+| net.minidev:json-smart:2.4.11 | The Apache Software License, Version 2.0 |
 | org.antlr:antlr4-runtime:4.10.1 | The BSD License |
 | org.apache.commons:commons-collections4:4.4 | Apache License, Version 2.0 |
 | org.apache.commons:commons-lang3:3.12.0 | Apache License, Version 2.0 |
@@ -77,18 +76,15 @@ ThirdParty Licenses
 | org.apache.httpcomponents:httpcore:4.4.16 | Apache License, Version 2.0 |
 | org.apache.logging.log4j:log4j-api:2.19.0 | Apache License, Version 2.0 |
 | org.apache.logging.log4j:log4j-to-slf4j:2.19.0 | Apache License, Version 2.0 |
-| org.apache.tomcat.embed:tomcat-embed-core:10.1.7 | Apache License, Version 2.0 |
-| org.apache.tomcat.embed:tomcat-embed-el:10.1.7 | Apache License, Version 2.0 |
-| org.apache.tomcat.embed:tomcat-embed-websocket:10.1.7 | Apache License, Version 2.0 |
+| org.apache.tomcat.embed:tomcat-embed-core:10.1.8 | Apache License, Version 2.0 |
+| org.apache.tomcat.embed:tomcat-embed-el:10.1.8 | Apache License, Version 2.0 |
+| org.apache.tomcat.embed:tomcat-embed-websocket:10.1.8 | Apache License, Version 2.0 |
 | org.apiguardian:apiguardian-api:1.1.2 | The Apache License, Version 2.0 |
 | org.aspectj:aspectjweaver:1.9.19 | Eclipse Public License - v 2.0 |
 | org.assertj:assertj-core:3.23.1 | Apache License, Version 2.0 |
-| org.bouncycastle:bcpkix-jdk15on:1.69 | Bouncy Castle Licence |
-| org.bouncycastle:bcpkix-jdk18on:1.72 | Bouncy Castle Licence |
-| org.bouncycastle:bcprov-jdk15on:1.69 | Bouncy Castle Licence |
-| org.bouncycastle:bcprov-jdk18on:1.72 | Bouncy Castle Licence |
-| org.bouncycastle:bcutil-jdk15on:1.69 | Bouncy Castle Licence |
-| org.bouncycastle:bcutil-jdk18on:1.72 | Bouncy Castle Licence |
+| org.bouncycastle:bcpkix-jdk18on:1.74 | Bouncy Castle Licence |
+| org.bouncycastle:bcprov-jdk18on:1.74 | Bouncy Castle Licence |
+| org.bouncycastle:bcutil-jdk18on:1.74 | Bouncy Castle Licence |
 | org.eclipse.angus:angus-activation:2.0.0 | EDL 1.0 |
 | org.glassfish.jaxb:jaxb-core:4.0.2 | Eclipse Distribution License - v 1.0 |
 | org.glassfish.jaxb:jaxb-runtime:4.0.2 | Eclipse Distribution License - v 1.0 |
@@ -100,71 +96,70 @@ ThirdParty Licenses
 | org.hibernate.validator:hibernate-validator:8.0.0.Final | Apache License 2.0 |
 | org.jboss:jandex:2.4.2.Final | Apache License, Version 2.0 |
 | org.jboss.logging:jboss-logging:3.5.0.Final | Apache License, version 2.0 |
-| org.json:json:20220320 | The JSON License |
-| org.junit.jupiter:junit-jupiter:5.9.2 | Eclipse Public License v2.0 |
-| org.junit.jupiter:junit-jupiter-api:5.9.2 | Eclipse Public License v2.0 |
-| org.junit.jupiter:junit-jupiter-engine:5.9.2 | Eclipse Public License v2.0 |
-| org.junit.jupiter:junit-jupiter-params:5.9.2 | Eclipse Public License v2.0 |
-| org.junit.platform:junit-platform-commons:1.9.2 | Eclipse Public License v2.0 |
-| org.junit.platform:junit-platform-engine:1.9.2 | Eclipse Public License v2.0 |
+| org.json:json:20230227 | Public Domain |
+| org.junit.jupiter:junit-jupiter:5.9.3 | Eclipse Public License v2.0 |
+| org.junit.jupiter:junit-jupiter-api:5.9.3 | Eclipse Public License v2.0 |
+| org.junit.jupiter:junit-jupiter-engine:5.9.3 | Eclipse Public License v2.0 |
+| org.junit.jupiter:junit-jupiter-params:5.9.3 | Eclipse Public License v2.0 |
+| org.junit.platform:junit-platform-commons:1.9.3 | Eclipse Public License v2.0 |
+| org.junit.platform:junit-platform-engine:1.9.3 | Eclipse Public License v2.0 |
 | org.latencyutils:LatencyUtils:2.0.3 | Public Domain, per Creative Commons CC0 |
 | org.liquibase:liquibase-core:4.17.2 | Apache License, Version 2.0 |
-| org.mapstruct:mapstruct:1.5.3.Final | The Apache Software License, Version 2.0 |
+| org.mapstruct:mapstruct:1.5.5.Final | The Apache Software License, Version 2.0 |
 | org.mockito:mockito-core:4.8.1 | The MIT License |
 | org.mockito:mockito-junit-jupiter:4.8.1 | The MIT License |
 | org.objenesis:objenesis:3.2 | Apache License, Version 2.0 |
 | org.opentest4j:opentest4j:1.2.0 | The Apache License, Version 2.0 |
 | org.ow2.asm:asm:9.3 | BSD-3-Clause |
 | org.projectlombok:lombok:1.18.26 | The MIT License |
-| org.semver4j:semver4j:4.1.1 | The MIT License |
+| org.semver4j:semver4j:4.3.0 | The MIT License |
 | org.skyscreamer:jsonassert:1.5.1 | The Apache Software License, Version 2.0 |
 | org.slf4j:jul-to-slf4j:2.0.7 | MIT License |
 | org.slf4j:slf4j-api:2.0.7 | MIT License |
-| org.springdoc:springdoc-openapi-common:1.6.14 | The Apache License, Version 2.0 |
-| org.springdoc:springdoc-openapi-ui:1.6.14 | The Apache License, Version 2.0 |
-| org.springdoc:springdoc-openapi-webmvc-core:1.6.14 | The Apache License, Version 2.0 |
-| org.springframework:spring-aop:6.0.7 | Apache License, Version 2.0 |
-| org.springframework:spring-aspects:6.0.7 | Apache License, Version 2.0 |
-| org.springframework:spring-beans:6.0.7 | Apache License, Version 2.0 |
-| org.springframework:spring-context:6.0.7 | Apache License, Version 2.0 |
-| org.springframework:spring-core:6.0.7 | Apache License, Version 2.0 |
-| org.springframework:spring-expression:6.0.7 | Apache License, Version 2.0 |
-| org.springframework:spring-jcl:6.0.7 | Apache License, Version 2.0 |
-| org.springframework:spring-jdbc:6.0.7 | Apache License, Version 2.0 |
-| org.springframework:spring-orm:6.0.7 | Apache License, Version 2.0 |
-| org.springframework:spring-test:6.0.7 | Apache License, Version 2.0 |
-| org.springframework:spring-tx:6.0.7 | Apache License, Version 2.0 |
-| org.springframework:spring-web:6.0.7 | Apache License, Version 2.0 |
-| org.springframework:spring-webmvc:6.0.7 | Apache License, Version 2.0 |
-| org.springframework.boot:spring-boot:3.0.5 | Apache License, Version 2.0 |
-| org.springframework.boot:spring-boot-actuator:3.0.5 | Apache License, Version 2.0 |
-| org.springframework.boot:spring-boot-actuator-autoconfigure:3.0.5 | Apache License, Version 2.0 |
-| org.springframework.boot:spring-boot-autoconfigure:3.0.5 | Apache License, Version 2.0 |
-| org.springframework.boot:spring-boot-starter:3.0.5 | Apache License, Version 2.0 |
-| org.springframework.boot:spring-boot-starter-actuator:3.0.5 | Apache License, Version 2.0 |
-| org.springframework.boot:spring-boot-starter-aop:3.0.5 | Apache License, Version 2.0 |
-| org.springframework.boot:spring-boot-starter-data-jpa:3.0.5 | Apache License, Version 2.0 |
-| org.springframework.boot:spring-boot-starter-jdbc:3.0.5 | Apache License, Version 2.0 |
-| org.springframework.boot:spring-boot-starter-json:3.0.5 | Apache License, Version 2.0 |
-| org.springframework.boot:spring-boot-starter-logging:3.0.5 | Apache License, Version 2.0 |
-| org.springframework.boot:spring-boot-starter-test:3.0.5 | Apache License, Version 2.0 |
-| org.springframework.boot:spring-boot-starter-tomcat:3.0.5 | Apache License, Version 2.0 |
-| org.springframework.boot:spring-boot-starter-validation:3.0.5 | Apache License, Version 2.0 |
-| org.springframework.boot:spring-boot-starter-web:3.0.5 | Apache License, Version 2.0 |
-| org.springframework.boot:spring-boot-test:3.0.5 | Apache License, Version 2.0 |
-| org.springframework.boot:spring-boot-test-autoconfigure:3.0.5 | Apache License, Version 2.0 |
-| org.springframework.cloud:spring-cloud-commons:4.0.2 | Apache License, Version 2.0 |
-| org.springframework.cloud:spring-cloud-context:4.0.2 | Apache License, Version 2.0 |
-| org.springframework.cloud:spring-cloud-openfeign-core:4.0.2 | Apache License, Version 2.0 |
-| org.springframework.cloud:spring-cloud-starter:4.0.2 | Apache License, Version 2.0 |
-| org.springframework.cloud:spring-cloud-starter-openfeign:4.0.2 | Apache License, Version 2.0 |
-| org.springframework.data:spring-data-commons:3.0.4 | Apache License, Version 2.0 |
-| org.springframework.data:spring-data-jpa:3.0.4 | Apache License, Version 2.0 |
-| org.springframework.security:spring-security-core:6.0.2 | Apache License, Version 2.0 |
-| org.springframework.security:spring-security-crypto:6.0.2 | Apache License, Version 2.0 |
+| org.springdoc:springdoc-openapi-starter-common:2.1.0 | The Apache License, Version 2.0 |
+| org.springdoc:springdoc-openapi-starter-webmvc-api:2.1.0 | The Apache License, Version 2.0 |
+| org.springdoc:springdoc-openapi-starter-webmvc-ui:2.1.0 | The Apache License, Version 2.0 |
+| org.springframework:spring-aop:6.0.9 | Apache License, Version 2.0 |
+| org.springframework:spring-aspects:6.0.9 | Apache License, Version 2.0 |
+| org.springframework:spring-beans:6.0.9 | Apache License, Version 2.0 |
+| org.springframework:spring-context:6.0.9 | Apache License, Version 2.0 |
+| org.springframework:spring-core:6.0.9 | Apache License, Version 2.0 |
+| org.springframework:spring-expression:6.0.9 | Apache License, Version 2.0 |
+| org.springframework:spring-jcl:6.0.9 | Apache License, Version 2.0 |
+| org.springframework:spring-jdbc:6.0.9 | Apache License, Version 2.0 |
+| org.springframework:spring-orm:6.0.9 | Apache License, Version 2.0 |
+| org.springframework:spring-test:6.0.9 | Apache License, Version 2.0 |
+| org.springframework:spring-tx:6.0.9 | Apache License, Version 2.0 |
+| org.springframework:spring-web:6.0.9 | Apache License, Version 2.0 |
+| org.springframework:spring-webmvc:6.0.9 | Apache License, Version 2.0 |
+| org.springframework.boot:spring-boot:3.0.7 | Apache License, Version 2.0 |
+| org.springframework.boot:spring-boot-actuator:3.0.7 | Apache License, Version 2.0 |
+| org.springframework.boot:spring-boot-actuator-autoconfigure:3.0.7 | Apache License, Version 2.0 |
+| org.springframework.boot:spring-boot-autoconfigure:3.0.7 | Apache License, Version 2.0 |
+| org.springframework.boot:spring-boot-starter:3.0.7 | Apache License, Version 2.0 |
+| org.springframework.boot:spring-boot-starter-actuator:3.0.7 | Apache License, Version 2.0 |
+| org.springframework.boot:spring-boot-starter-aop:3.0.7 | Apache License, Version 2.0 |
+| org.springframework.boot:spring-boot-starter-data-jpa:3.0.7 | Apache License, Version 2.0 |
+| org.springframework.boot:spring-boot-starter-jdbc:3.0.7 | Apache License, Version 2.0 |
+| org.springframework.boot:spring-boot-starter-json:3.0.7 | Apache License, Version 2.0 |
+| org.springframework.boot:spring-boot-starter-logging:3.0.7 | Apache License, Version 2.0 |
+| org.springframework.boot:spring-boot-starter-test:3.0.7 | Apache License, Version 2.0 |
+| org.springframework.boot:spring-boot-starter-tomcat:3.0.7 | Apache License, Version 2.0 |
+| org.springframework.boot:spring-boot-starter-validation:3.0.7 | Apache License, Version 2.0 |
+| org.springframework.boot:spring-boot-starter-web:3.0.7 | Apache License, Version 2.0 |
+| org.springframework.boot:spring-boot-test:3.0.7 | Apache License, Version 2.0 |
+| org.springframework.boot:spring-boot-test-autoconfigure:3.0.7 | Apache License, Version 2.0 |
+| org.springframework.cloud:spring-cloud-commons:4.0.3 | Apache License, Version 2.0 |
+| org.springframework.cloud:spring-cloud-context:4.0.3 | Apache License, Version 2.0 |
+| org.springframework.cloud:spring-cloud-openfeign-core:4.0.3 | Apache License, Version 2.0 |
+| org.springframework.cloud:spring-cloud-starter:4.0.3 | Apache License, Version 2.0 |
+| org.springframework.cloud:spring-cloud-starter-openfeign:4.0.3 | Apache License, Version 2.0 |
+| org.springframework.data:spring-data-commons:3.0.6 | Apache License, Version 2.0 |
+| org.springframework.data:spring-data-jpa:3.0.6 | Apache License, Version 2.0 |
+| org.springframework.security:spring-security-core:6.0.3 | Apache License, Version 2.0 |
+| org.springframework.security:spring-security-crypto:6.0.3 | Apache License, Version 2.0 |
 | org.springframework.security:spring-security-rsa:1.0.11.RELEASE | Apache 2.0 |
-| org.springframework.security:spring-security-web:6.0.2 | Apache License, Version 2.0 |
-| org.webjars:swagger-ui:4.15.5 | Apache 2.0 |
-| org.webjars:webjars-locator-core:0.52 | MIT |
+| org.springframework.security:spring-security-web:6.0.3 | Apache License, Version 2.0 |
+| org.webjars:swagger-ui:4.18.2 | Apache 2.0 |
 | org.xmlunit:xmlunit-core:2.9.1 | The Apache Software License, Version 2.0 |
 | org.yaml:snakeyaml:1.33 | Apache License, Version 2.0 |
diff --git a/owasp/suppressions.xml b/owasp/suppressions.xml
@@ -30,4 +30,8 @@
         <notes>False positive</notes>
         <cve>CVE-2018-14335</cve>
     </suppress>
+    <suppress>
+        <notes>No fix available, still analyzed</notes>
+        <cve>CVE-2023-35116</cve>
+    </suppress>
 </suppressions>