From d567cf4ff933deb8c50cfbb5cc4fe134a34698db Mon Sep 17 00:00:00 2001 From: Stephan Krusche Date: Sun, 3 Nov 2024 21:41:43 +0100 Subject: [PATCH] Development: Update server dependencies --- build.gradle | 14 +++++++------- gradle.properties | 10 +++++----- 2 files changed, 12 insertions(+), 12 deletions(-) diff --git a/build.gradle b/build.gradle index 0e441e52543f..347d18815d92 100644 --- a/build.gradle +++ b/build.gradle @@ -20,7 +20,7 @@ plugins { id "com.github.ben-manes.versions" version "0.51.0" id "com.github.andygoossens.modernizer" version "${modernizer_plugin_version}" id "com.gorylenko.gradle-git-properties" version "2.4.2" - id "org.owasp.dependencycheck" version "11.0.0" + id "org.owasp.dependencycheck" version "11.1.0" id "com.adarshr.test-logger" version "4.0.0" } @@ -421,7 +421,7 @@ dependencies { implementation "org.springframework.security:spring-security-oauth2-core:${spring_security_version}" implementation "org.springframework.security:spring-security-oauth2-client:${spring_security_version}" // use newest version of nimbus-jose-jwt to avoid security issues through outdated dependencies - implementation "com.nimbusds:nimbus-jose-jwt:9.41.2" + implementation "com.nimbusds:nimbus-jose-jwt:9.45" implementation "org.springframework.security:spring-security-oauth2-jose:${spring_security_version}" implementation "org.springframework.security:spring-security-crypto:${spring_security_version}" @@ -439,15 +439,15 @@ dependencies { runtimeOnly "io.jsonwebtoken:jjwt-impl:${jwt_version}" runtimeOnly "io.jsonwebtoken:jjwt-jackson:${jwt_version}" - implementation "org.bouncycastle:bcpkix-jdk18on:1.78.1" - implementation "org.bouncycastle:bcprov-jdk18on:1.78.1" + implementation "org.bouncycastle:bcpkix-jdk18on:1.79" + implementation "org.bouncycastle:bcprov-jdk18on:1.79" implementation "com.mysql:mysql-connector-j:9.1.0" implementation "org.postgresql:postgresql:42.7.4" implementation "org.zalando:problem-spring-web:0.29.1" implementation "org.zalando:jackson-datatype-problem:0.27.1" - implementation "com.ibm.icu:icu4j-charset:75.1" + implementation "com.ibm.icu:icu4j-charset:76.1" implementation "com.github.seancfoley:ipaddress:5.5.1" implementation "org.apache.maven:maven-model:3.9.9" implementation "org.apache.pdfbox:pdfbox:3.0.3" @@ -468,7 +468,7 @@ dependencies { implementation "com.google.code.gson:gson:2.11.0" - implementation "com.google.errorprone:error_prone_annotations:2.34.0" + implementation "com.google.errorprone:error_prone_annotations:2.35.1" // NOTE: we want to keep the same unique version for all configurations, implementation and annotationProcessor implementation("net.bytebuddy:byte-buddy") { @@ -536,7 +536,7 @@ dependencies { testImplementation "org.awaitility:awaitility:4.2.2" testImplementation "org.apache.maven.shared:maven-invoker:3.3.0" testImplementation "org.gradle:gradle-tooling-api:8.10.2" - testImplementation "org.apache.maven.surefire:surefire-report-parser:3.5.1" + testImplementation "org.apache.maven.surefire:surefire-report-parser:3.5.2" testImplementation "com.opencsv:opencsv:5.9" testImplementation("io.zonky.test:embedded-database-spring-test:2.5.1") { exclude group: "org.testcontainers", module: "mariadb" diff --git a/gradle.properties b/gradle.properties index d97d0c9b9bda..552db125152e 100644 --- a/gradle.properties +++ b/gradle.properties @@ -6,7 +6,7 @@ node_version=22.10.0 npm_version=10.8.0 # Dependency versions -jhipster_dependencies_version=8.7.1 +jhipster_dependencies_version=8.7.2 spring_boot_version=3.3.5 spring_security_version=6.3.4 # TODO: upgrading to 6.6.0 currently leads to issues due to internal changes in Hibernate and potentially wrong use in Artemis server code @@ -16,10 +16,10 @@ opensaml_version=4.3.2 jwt_version=0.12.6 jaxb_runtime_version=4.0.5 hazelcast_version=5.5.0 -fasterxml_version=2.18.0 +fasterxml_version=2.18.1 jgit_version=7.0.0.202409031743-r sshd_version=2.14.0 -checkstyle_version=10.18.2 +checkstyle_version=10.20.0 jplag_version=5.1.0 # not really used in Artemis, nor Jplag, nor the used version of Stanford CoreNLP, but we use the latest to avoid security vulnerabilities # NOTE: we do not need to use the latest version 9.x here as long as Stanford CoreNLP does not reference it @@ -28,9 +28,9 @@ slf4j_version=2.0.16 sentry_version=7.16.0 liquibase_version=4.29.2 docker_java_version=3.4.0 -logback_version=1.5.11 +logback_version=1.5.12 java_parser_version=3.26.2 -byte_buddy_version=1.15.7 +byte_buddy_version=1.15.9 # testing # make sure both versions are compatible