Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

LASB-2748: Resolve critical vulnerabilities reported by Snyk #256

Merged
merged 27 commits into from
Dec 8, 2023
Merged
Changes from 1 commit
Commits
Show all changes
27 commits
Select commit Hold shift + click to select a range
eced812
Updated the dependabot settings to with with version 2.
mtac50 Dec 6, 2023
64a8d34
LASB-2748: Updated spring boot and gradle versions
mtac50 Dec 6, 2023
8c83341
LASB-2748: Migrated test to use JUnit 5.
mtac50 Dec 6, 2023
0892516
LASB-2748: Fixed test constructor.
mtac50 Dec 7, 2023
2ca6284
LASB-2748: Updated the docker tag to use the commit hash rather than …
mtac50 Dec 7, 2023
067a84d
LASB-2748: Remove references to the BUILD_TAG file.
mtac50 Dec 7, 2023
36ef0e2
LASB-2748: Updated spring boot, logback, snakeyaml and apache.cxf dep…
mtac50 Dec 7, 2023
2ffbb57
LASB-2748: Upgraded spring dependency management and pinned snakeyaml…
mtac50 Dec 7, 2023
9903a87
LASB-2748: Reverted aws sdk update.
mtac50 Dec 7, 2023
fbc21aa
LASB-2748: Created reusable workflows for build and deploying the app…
mtac50 Dec 8, 2023
50cfebd
LASB02748: Replaced the cp-build workflow with one that calls the reu…
mtac50 Dec 8, 2023
1672aaa
LASB-2748: Fixed yaml syntax issue.
mtac50 Dec 8, 2023
6b2b13e
LASB-2748: Added missing job name.
mtac50 Dec 8, 2023
a1018a4
LASB-2748: Updated reference to GITHUB_SHA variable.
mtac50 Dec 8, 2023
1eca258
LASB-2748: Update reference to github.sha variable.
mtac50 Dec 8, 2023
a3c09a1
LASB-2748: Refactored build and deploy dev into steps.
mtac50 Dec 8, 2023
bee4303
LASB-2748: Removed secret inheritance.
mtac50 Dec 8, 2023
0f58c05
LASB-2748: Remove secret inheritance from deploy workflow.
mtac50 Dec 8, 2023
3d1ff68
LASB-2748: Moved checkout action to the calling workflow.
mtac50 Dec 8, 2023
e7ea8c0
LASB-2748: Removed typo in uses section.
mtac50 Dec 8, 2023
4664578
LASB-2748: Changes reusable workflow calls from steps to jobs.
mtac50 Dec 8, 2023
9655b3f
LASB-2748: move runs on and environment settings into the reusable wo…
mtac50 Dec 8, 2023
b0bf59b
LASB-2748:Updated secret usage in reusable workflows.
mtac50 Dec 8, 2023
93b3632
LASB-2748: Fixed typo in inputs reference.
mtac50 Dec 8, 2023
8f30f78
LASB-2748: Updated secrets references.
mtac50 Dec 8, 2023
fe4a0a1
LASB-2748: Updated the cp-deploy action to build and deploy to all en…
mtac50 Dec 8, 2023
6d410e3
LASB-2748: Removed additional jobs section.
mtac50 Dec 8, 2023
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
LASB-2748: Updated spring boot, logback, snakeyaml and apache.cxf dep…
…endencies to resolve vulnerabilities.
  • Loading branch information
mtac50 committed Dec 7, 2023
commit 36ef0e273a5a44f2af254a9a9acb32b84c45328c
15 changes: 10 additions & 5 deletions build.gradle
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
buildscript {
ext {
springBootVersion = '2.5.15'
springBootVersion = '2.7.18'
}
repositories {
mavenCentral()
@@ -14,7 +14,7 @@ plugins {
id 'java'
id 'eclipse'
id 'idea'
id 'org.springframework.boot' version '2.5.15'
id 'org.springframework.boot' version '2.7.18'
id 'io.spring.dependency-management' version '1.0.7.RELEASE'
id 'no.nils.wsdl2java' version '0.12'
}
@@ -31,22 +31,27 @@ repositories {
dependencies {
implementation('org.springframework.boot:spring-boot-starter-data-jpa')
implementation('org.springframework.boot:spring-boot-starter-web')
implementation('ch.qos.logback:logback-classic:1.2.13')
implementation('ch.qos.logback:logback-core:1.2.13')
implementation('org.yaml:snakeyaml:1.31')
implementation('org.springframework.boot:spring-boot-starter-actuator')
implementation('org.springframework.cloud:spring-cloud-starter-aws')
implementation('io.micrometer:micrometer-registry-cloudwatch:1.7.2')
implementation('org.apache.cxf:cxf-spring-boot-starter-jaxws:3.4.3')
implementation('org.apache.cxf:cxf-rt-features-logging:3.4.4')
implementation('org.apache.cxf:cxf-spring-boot-starter-jaxws:3.6.2')
implementation('org.apache.cxf:cxf-rt-features-logging:3.6.2')
implementation name: 'ojdbc8'
compileOnly "org.projectlombok:lombok:1.18.18"
annotationProcessor 'org.projectlombok:lombok:1.18.6'
testImplementation('org.springframework.boot:spring-boot-starter-test')
implementation 'com.amazonaws:aws-xray-recorder-sdk-spring:2.14.0'
implementation 'org.aspectj:aspectjrt:1.9.2'



wsdl2java 'com.sun.xml.bind:jaxb-xjc:2.3.2'
wsdl2java 'javax.xml.bind:jaxb-api:2.3.1'
wsdl2java 'javax.xml.ws:jaxws-api:2.3.1'
wsdl2java 'org.apache.cxf:cxf-rt-wsdl:3.2.7'
wsdl2java 'org.apache.cxf:cxf-rt-wsdl:3.6.2'
wsdl2java 'javax.jws:javax.jws-api:1.1'

implementation 'com.sun.xml.bind:jaxb-xjc:2.3.0.1'