Merge pull request #469 from bci-oss/bugfix/securityfix-spring

Bugfix/securityfix spring

CHANGELOG.md

@@ -4,6 +4,13 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## 0.6.0-RC1
+### Added
+
+## fixed
+- Update Spring Boot to version 3.3.4
+- Update logback to version 1.5.8
+
 ## 0.5.0
 ### Added
 - AWS Cognito support for authentication

pom.xml

@@ -26,7 +26,7 @@
 	<parent>
         <groupId>org.springframework.boot</groupId>
         <artifactId>spring-boot-starter-parent</artifactId>
-        <version>3.2.4</version> <!-- need to be repeated in properties section for technical purposes -->
+        <version>3.3.4</version> <!-- need to be repeated in properties section for technical purposes -->
         <relativePath/> <!-- lookup parent from repository and not the filesystem -->
     </parent>
 
@@ -82,7 +82,7 @@
 
 		<!-- logging -->
 		<slf4j.version>2.0.7</slf4j.version>
-		<logback.version>1.4.14</logback.version>
+		<logback.version>1.5.8</logback.version>
 
 		<!-- json, xml, formats, ... -->
 		<jackson.version>2.13.1</jackson.version>