From ed90936013535aa322654434e1a2ebde38449582 Mon Sep 17 00:00:00 2001
From: jianming tu <tu_jm@yahoo.com>
Date: Fri, 18 Oct 2024 16:44:23 -0700
Subject: [PATCH] fix vulnerabilities for image
 jag-ai-reviewer-ai-reviewer-api's and jag-ai-reviewer-ai-reviewer-mock-api's
 java libraries, jag-ai-reviewer-ai-reviewer-admin

---
 src/backend/ai-reviewer-api/pom.xml      | 3 ++-
 src/backend/ai-reviewer-mock-api/pom.xml | 2 +-
 src/backend/libs/ai-bom/pom.xml          | 4 ++--
 3 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/src/backend/ai-reviewer-api/pom.xml b/src/backend/ai-reviewer-api/pom.xml
index 7af6a251..61342e29 100644
--- a/src/backend/ai-reviewer-api/pom.xml
+++ b/src/backend/ai-reviewer-api/pom.xml
@@ -5,7 +5,7 @@
 	<parent>
 		<artifactId>spring-boot-starter-parent</artifactId>
 		<groupId>org.springframework.boot</groupId>
-		<version>3.2.5</version>
+		<version>3.3.4</version>
 		<relativePath/>
 	</parent>
 	<groupId>ca.bc.gov.open.jag</groupId>
@@ -48,6 +48,7 @@
 		<dependency>
 			<groupId>ch.qos.logback</groupId>
 			<artifactId>logback-access</artifactId>
+			<version>1.4.14</version>
 		</dependency>
 
 		<dependency>
diff --git a/src/backend/ai-reviewer-mock-api/pom.xml b/src/backend/ai-reviewer-mock-api/pom.xml
index 67cad3ef..7b896ac2 100644
--- a/src/backend/ai-reviewer-mock-api/pom.xml
+++ b/src/backend/ai-reviewer-mock-api/pom.xml
@@ -5,7 +5,7 @@
 	<parent>
 		<groupId>org.springframework.boot</groupId>
 		<artifactId>spring-boot-starter-parent</artifactId>
-		<version>3.2.5</version>
+		<version>3.3.4</version>
 		<relativePath/> <!-- lookup parent from repository -->
 	</parent>
 	<groupId>ca.bc.gov.open.jag</groupId>
diff --git a/src/backend/libs/ai-bom/pom.xml b/src/backend/libs/ai-bom/pom.xml
index fbf65fff..84729b33 100644
--- a/src/backend/libs/ai-bom/pom.xml
+++ b/src/backend/libs/ai-bom/pom.xml
@@ -14,8 +14,8 @@
         <com.github.joschi.jackson.version>2.12.2</com.github.joschi.jackson.version>
         <com.google.code.findbugs.version>3.0.2</com.google.code.findbugs.version>
         <com.splunk.logging.version>1.11.1</com.splunk.logging.version>
-        <commons-io.version>2.13.0</commons-io.version>
-        <io.springfox.version>2.9.2</io.springfox.version>
+        <commons-io.version>2.16.1</commons-io.version>
+        <io.springfox.version>2.10.0</io.springfox.version>
         <io.swagger.version>2.2.9</io.swagger.version>
         <java.version>17</java.version>
         <javax.validation.version>2.0.1.Final</javax.validation.version>