Browse Source
Bump jackson-bom from 2.19.4 to 2.21.1 to fix GHSA-72hv-8253-57qq
pull/15315/head
Viacheslav Klimov
6 months ago
Failed to extract signature
1 changed files with
10 additions and
0 deletions
-
pom.xml
|
|
|
@ -63,6 +63,7 @@ |
|
|
|
<pkg.unixLogFolder>/var/log/${pkg.name}</pkg.unixLogFolder> |
|
|
|
<pkg.installFolder>/usr/share/${pkg.name}</pkg.installFolder> |
|
|
|
<spring-boot.version>3.5.12</spring-boot.version> |
|
|
|
<jackson-bom.version>2.21.1</jackson-bom.version> <!-- to fix GHSA-72hv-8253-57qq. TODO: remove when fixed in spring-boot-dependencies --> |
|
|
|
<javax.xml.bind-api.version>2.4.0-b180830.0359</javax.xml.bind-api.version> |
|
|
|
<jjwt.version>0.12.5</jjwt.version> |
|
|
|
<rat.version>0.10</rat.version> <!-- unused --> |
|
|
|
@ -991,6 +992,15 @@ |
|
|
|
|
|
|
|
<dependencyManagement> |
|
|
|
<dependencies> |
|
|
|
<!-- Temporary jackson-bom version override --> |
|
|
|
<dependency> |
|
|
|
<groupId>com.fasterxml.jackson</groupId> |
|
|
|
<artifactId>jackson-bom</artifactId> |
|
|
|
<version>${jackson-bom.version}</version> |
|
|
|
<type>pom</type> |
|
|
|
<scope>import</scope> |
|
|
|
</dependency> |
|
|
|
<!-- End of jackson-bom version override --> |
|
|
|
<dependency> |
|
|
|
<groupId>org.springframework.boot</groupId> |
|
|
|
<artifactId>spring-boot-dependencies</artifactId> |
|
|
|
|
